|
Plagegeister aller Art und deren Bekämpfung: Windows 7 - Malware? - Fenster öffnen sich automatischWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
17.02.2014, 18:12 | #1 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Hallo! Mein Vater hat vor ca. einem Monat einen gebrauchten Laptop gekauft mit Windows 7. Bis jetzt war auch alles in Ordnung. Heute Nacht hat er sich bei Ebay Kleinanzeigen aufgehalten. Seitdem öffnet sich laufend eine komplett neue Seite, wenn er auf "weiter" klickt. Zum Anfang kam eine Seite, wo nur englischer Text stand. Als ich es dann heute ausprobiert habe, hat sich wieder eine neue Seite geöffnet, die sich aber nicht geladen hat (nur weißer Schirm). Bei Google ist mir unten rechts aufgefallen, dass sich ein Werbefenster öffnet. Dies kommt immer, wenn man "sucht" und runter scrollt. Dieses Problem habe ich mit einem AddBlocker beheben können, welchen ich heruntergeladen habe. Bei Ebay Kleinanzeigen ist uns dann aufgefallen, dass das Wort "kostenlos" (siehe Screen) und manchmal auch das Wort "Einfach" blau hinterlegt ist - wie ein Link. Wenn ich mit der Maus über das Wort gefahren bin, hat sich ein Fenster geöffnet. Dieses Phänomen (blau hinterlegte Wörter / öffnen dieses einen Fensters) habe ich jetzt auch hier im Forum feststellen können (der gleiche Screen). Ich habe alle Add-Ons entfernt. Den Laptop mehrfach neu gestartet. Und das Antivir habe ich auch durchlaufen lassen und 3 Viren gelöscht. Der Laptop ist entweder über W-Lan oder über einen Telekom Internet-Stick online. Das Problem besteht leider immer noch. Vielleicht weiß jemand von euch, was für ein Problem das ist und was wir machen können, damit der Laptop wieder normal funktioniert. Ich bedanke mich schon einmal im Voraus. Mit freundlichen Grüßen Shirry |
17.02.2014, 18:17 | #2 |
/// the machine /// TB-Ausbilder | Windows 7 - Malware? - Fenster öffnen sich automatisch hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
17.02.2014, 18:46 | #3 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Hallo schrauber,
__________________danke für deine schnelle Antwort! Ich habe den Scan durchlaufen lassen und versucht die .txt's hier via CODE einzufügen. Wenn ich allerdings den Code einfügen möchte, schreibt mir "das Forum", dass ich über 2000 Zeichen zuviel habe und die Antwort deswegen nicht gepostet werden kann... was soll ich machen? Als Word-Datei vielleicht anhängen? Geändert von Shirry (17.02.2014 um 19:39 Uhr) |
18.02.2014, 13:02 | #4 |
/// the machine /// TB-Ausbilder | Windows 7 - Malware? - Fenster öffnen sich automatisch Log einfach in Stücke teilen und mehrere Antworten benutzen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.02.2014, 15:04 | #5 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Ok ... FRST Teil 1: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-02-2014 Ran by Andreas (administrator) on ANDREAS-HP on 17-02-2014 18:23:05 Running from C:\Users\Andreas\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Highlightly) C:\Program Files (x86)\Highlightly\Service\hlsvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe () C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2014-01-31] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-02-24] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN) HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-01-28] (Hewlett-Packard) HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: {180aab81-8bc7-11e3-a101-446d573d4e28} - F:\AutoRun.exe HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: {4185e5f5-85c0-11e3-b3c3-446d573d4e28} - F:\AutoRun.exe HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: {4185e62b-85c0-11e3-b3c3-446d573d4e28} - F:\AutoRun.exe AppInit_DLLs: C:\PROGRA~2\SUPPOR~1\SUPPOR~2.DLL => C:\Program Files (x86)\Supporter\Supporter_x64.dll [4229120 2014-01-25] () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFCB3BC89141ACF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} SearchScopes: HKCU - {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {996317D0-90D7-4835-8E9B-AA46C8B1CD50} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms} BHO: Feven Pro - {11111111-1111-1111-1111-110511161178} - C:\Program Files (x86)\Feven Pro\Feven Pro-bho64.dll (Feven) BHO: ShoppingChip - {15913038-0EF1-583B-129C-342D218DBC4C} - C:\Program Files (x86)\ShoppingChip\_5H747NV.x64.dll () BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) BHO: TauBeItAdBlockFrr - {5E50B8AA-7158-4229-3E4B-327FA83238DF} - C:\ProgramData\TauBeItAdBlockFrr\Fg9U.x64.dll () BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Highlightly - {83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} - C:\Program Files\Highlightly\IE\HighlightlyClientIE.dll (Highlightly) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard) BHO-x32: Feven Pro - {11111111-1111-1111-1111-110511161178} - C:\Program Files (x86)\Feven Pro\Feven Pro-bho.dll (Feven) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Highlightly - {83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} - C:\Program Files (x86)\Highlightly\IE\HighlightlyClientIE.dll (Highlightly) BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{7D8FB911-34C2-41CC-A67F-C5B9FFD16891}: [NameServer] Tcpip\..\Interfaces\{F9DA5CDE-A652-4B4B-9F9B-536B53A607BF}: [NameServer] FireFox: ======== FF ProfilePath: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default FF DefaultSearchEngine: awesomehp FF SelectedSearchEngine: awesomehp FF Homepage: hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\1392523442_xpi [2014-02-16] FF Extension: Adblock Plus - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-17] FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\extensions\lightningnewtab@gmail.com.xpi Chrome: ======= CHR Extension: (ShoppingChip) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb [2014-01-25] CHR Extension: (ShoppingChip) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn [2014-01-25] CHR Extension: (Scorpion Saver) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg [2014-01-25] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-02-14] (Advanced Micro Devices, Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.) R2 be0fb33b; C:\Program Files (x86)\Supporter\SupporterSvc.dll [183632 2014-01-25] () R2 hlsvc; C:\Program Files (x86)\Highlightly\Service\hlsvc.exe [273000 2013-12-04] (Highlightly) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] () R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [513528 2013-12-10] () ==================== Drivers (Whitelisted) ==================== R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) R1 hlnfd; C:\Windows\System32\drivers\hlnfd.sys [58256 2013-12-04] (Highlightly) S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.) R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.) S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-17 18:23 - 2014-02-17 18:24 - 00020591 _____ () C:\Users\Andreas\Downloads\FRST.txt 2014-02-17 18:22 - 2014-02-17 18:23 - 00000000 ____D () C:\FRST 2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe 2014-02-17 13:11 - 2014-02-17 13:11 - 00000000 _____ () C:\Windows\SysWOW64\shoF972.tmp 2014-02-16 22:21 - 2014-02-17 17:36 - 00001075 _____ () C:\Windows\setupact.log 2014-02-16 22:21 - 2014-02-17 13:13 - 00006246 _____ () C:\Windows\PFRO.log 2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-16 05:04 - 2014-02-17 13:13 - 00003088 _____ () C:\Windows\Tasks\Feven Pro-chromeinstaller.job 2014-02-16 05:04 - 2014-02-17 13:13 - 00002256 _____ () C:\Windows\Tasks\Feven Pro-firefoxinstaller.job 2014-02-16 05:04 - 2014-02-17 13:13 - 00001500 _____ () C:\Windows\Tasks\Feven Pro-updater.job 2014-02-16 05:04 - 2014-02-17 13:13 - 00001456 _____ () C:\Windows\Tasks\Feven Pro-codedownloader.job 2014-02-16 05:04 - 2014-02-17 13:13 - 00001354 _____ () C:\Windows\Tasks\Feven Pro-enabler.job 2014-02-16 05:04 - 2014-02-17 10:10 - 00004542 _____ () C:\Windows\System32\Tasks\Feven Pro-updater 2014-02-16 05:04 - 2014-02-17 10:10 - 00004498 _____ () C:\Windows\System32\Tasks\Feven Pro-codedownloader 2014-02-16 05:04 - 2014-02-17 10:10 - 00004396 _____ () C:\Windows\System32\Tasks\Feven Pro-enabler 2014-02-16 05:04 - 2014-02-16 05:10 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\awesomehp 2014-02-16 05:04 - 2014-02-16 05:10 - 00000000 ____D () C:\ProgramData\IePluginService 2014-02-16 05:04 - 2014-02-16 05:08 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-02-16 05:04 - 2014-02-16 05:07 - 00000000 ____D () C:\ProgramData\WPM 2014-02-16 05:04 - 2014-02-16 05:04 - 00000000 ____D () C:\Program Files (x86)\Feven Pro 2014-02-15 03:03 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-15 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-15 03:01 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-15 03:01 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-15 03:01 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-15 03:01 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-15 03:01 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-15 03:01 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-15 03:01 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-15 03:01 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-15 03:01 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-15 03:01 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-15 03:01 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-15 03:01 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-15 03:01 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-15 03:01 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-15 03:01 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-15 03:01 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-15 03:01 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-15 03:01 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-15 03:01 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-15 03:01 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-15 03:01 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-15 03:01 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-15 03:01 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-15 03:01 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-15 03:01 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-15 03:01 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-15 03:01 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-15 03:01 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-15 03:01 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-15 03:01 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-15 03:01 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-15 03:01 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-15 03:01 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-15 03:01 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-15 03:01 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-15 03:01 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-15 03:01 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-15 03:01 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-15 03:01 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 __RHD () C:\MSOCache 2014-02-15 00:31 - 2014-02-15 00:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-14 23:59 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi 2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi 2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip 2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk 2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} 2014-02-14 22:26 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-14 22:26 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-14 22:26 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-14 22:26 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-14 22:26 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-14 22:26 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-14 22:26 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-14 22:26 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-14 22:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-14 22:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-14 22:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-14 22:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-14 22:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-14 22:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-14 22:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-14 22:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-14 22:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-14 22:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-14 22:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-14 22:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-14 22:26 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-14 22:26 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-07 09:22 - 2014-02-07 09:22 - 00000000 _____ () C:\Windows\SysWOW64\sho5FBE.tmp 2014-02-06 01:01 - 2014-02-06 21:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-02 12:01 - 2014-02-17 10:10 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340} 2014-02-02 11:59 - 2014-02-16 05:02 - 00000000 _____ () C:\END 2014-02-02 11:59 - 2014-02-02 11:59 - 00000000 ____D () C:\Users\Andreas\AppData\Local\SearchProtect 2014-02-02 11:58 - 2014-02-02 11:58 - 00319904 _____ () C:\Users\Andreas\Downloads\Setup.exe 2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia 2014-02-02 06:48 - 2014-02-02 06:49 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe 2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC 2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-01 11:07 - 2014-02-01 11:08 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe 2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr 2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl 2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-01-31 21:27 - 2014-02-16 05:10 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla 2014-01-31 21:19 - 2014-02-17 13:13 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job 2014-01-31 21:19 - 2014-02-17 10:10 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas 2014-01-31 21:15 - 2014-01-31 21:12 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-01-31 21:14 - 2014-01-31 21:16 - 00002400 _____ () C:\RHDSetup.log 2014-01-31 21:14 - 2014-01-31 21:12 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-01-31 21:14 - 2014-01-31 21:12 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-01-31 21:14 - 2014-01-31 21:12 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork 2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira 2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-01-31 18:52 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-31 18:52 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-31 18:52 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-31 18:52 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-31 18:29 - 2014-01-31 18:50 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe 2014-01-31 17:38 - 2014-02-16 22:40 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-01-26 11:24 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-01-26 11:24 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-01-26 11:24 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-01-26 11:24 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-01-26 03:08 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-26 02:08 - 2014-01-26 02:08 - 00000000 _____ () C:\Windows\SysWOW64\shoABAD.tmp 2014-01-26 01:53 - 2014-02-16 05:05 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole 2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype 2014-01-26 00:55 - 2014-02-16 22:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-26 00:55 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla 2014-01-26 00:55 - 2014-01-26 01:06 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-25 22:47 - 2014-01-25 22:47 - 00000000 ____D () C:\ProgramData\APN 2014-01-25 20:10 - 2014-01-25 20:10 - 00000000 _____ () C:\Windows\SysWOW64\shoAFB5.tmp 2014-01-25 20:05 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-01-25 20:05 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-01-25 20:05 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-01-25 20:05 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-25 17:15 - 2014-02-17 03:06 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-25 15:15 - 2014-02-01 18:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps 2014-01-25 15:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-01-25 15:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-01-25 15:14 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-01-25 15:14 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-01-25 15:14 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-01-25 15:14 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-01-25 15:14 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-01-25 15:14 - 2013-02-15 07:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-01-25 15:14 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-01-25 15:14 - 2013-02-15 05:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-01-25 15:14 - 2013-02-15 05:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-01-25 15:14 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-01-25 15:13 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-01-25 15:13 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-01-25 15:13 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-01-25 15:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-01-25 15:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-01-25 15:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-01-25 15:13 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-01-25 15:13 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-01-25 15:13 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-01-25 15:13 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-01-25 15:13 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-01-25 15:13 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-01-25 15:13 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-01-25 15:13 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-01-25 15:13 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-01-25 15:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-25 15:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-01-25 15:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-01-25 15:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-01-25 15:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-01-25 15:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-01-25 15:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-01-25 15:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-01-25 15:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-01-25 15:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-01-25 15:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-01-25 15:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-01-25 15:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-01-25 15:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-01-25 15:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-01-25 15:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-01-25 15:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-01-25 15:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-01-25 15:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-01-25 15:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-01-25 15:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-01-25 15:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-01-25 15:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-01-25 15:12 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-01-25 15:12 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-01-25 15:12 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-01-25 15:12 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-01-25 15:12 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-01-25 15:12 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-01-25 15:12 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-01-25 15:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-01-25 15:12 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-01-25 15:12 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-01-25 15:12 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-01-25 15:12 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-01-25 15:12 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2014-01-25 15:12 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-01-25 15:12 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2014-01-25 15:12 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-01-25 15:12 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-01-25 15:12 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-01-25 15:12 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-01-25 15:12 - 2013-04-01 07:03 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll 2014-01-25 15:12 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-01-25 15:11 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-01-25 15:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-01-25 15:11 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-01-25 15:11 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-01-25 15:11 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-01-25 15:11 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-01-25 15:11 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-01-25 15:11 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-01-25 15:11 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-25 15:11 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-25 15:11 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-25 15:11 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-25 15:11 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-01-25 15:11 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-01-25 15:11 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-01-25 15:11 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-01-25 15:11 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-01-25 15:11 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-01-25 15:11 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-01-25 15:11 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-01-25 15:11 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-01-25 15:11 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-01-25 15:11 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-01-25 15:11 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-01-25 15:11 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-01-25 15:11 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-01-25 15:11 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-01-25 15:11 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-01-25 15:11 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-01-25 15:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-25 15:01 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-25 15:01 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-01-25 15:01 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-25 15:01 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-01-25 15:01 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-01-25 15:01 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-01-25 15:01 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-01-25 15:01 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-25 15:01 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-25 15:01 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-01-25 15:01 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-01-25 15:01 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-01-25 15:01 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-01-25 15:01 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-01-25 15:01 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-01-25 15:01 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-01-25 15:01 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-01-25 15:00 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-01-25 15:00 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-01-25 15:00 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-01-25 14:59 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-01-25 14:59 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-01-25 14:59 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-01-25 14:59 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-01-25 14:59 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-01-25 14:59 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-01-25 14:59 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-01-25 14:59 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-01-25 14:58 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-01-25 14:58 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-01-25 14:58 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-01-25 14:58 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-01-25 14:58 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2014-01-25 14:58 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2014-01-25 14:58 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-01-25 14:58 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2014-01-25 14:58 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-01-25 14:58 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-01-25 14:58 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-01-25 14:57 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-01-25 14:57 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-01-25 14:57 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-01-25 14:57 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-01-25 14:57 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-01-25 14:57 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-01-25 14:57 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-01-25 14:57 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-01-25 14:57 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-01-25 14:57 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-01-25 14:57 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-01-25 14:57 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-01-25 14:57 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-01-25 14:57 - 2013-08-01 10:19 - 00984512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-25 14:57 - 2013-08-01 10:19 - 00265152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-01-25 14:55 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-01-25 14:55 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-01-25 14:53 - 2014-01-25 14:53 - 00000000 ____D () C:\Users\Andreas\Documents\Optimizer Pro 2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files\Highlightly 2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files (x86)\Highlightly 2014-01-25 14:48 - 2014-01-25 15:17 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Systweak 2014-01-25 14:48 - 2014-01-25 14:48 - 00000000 ____D () C:\Program Files (x86)\Supporter 2014-01-25 14:48 - 2013-07-11 13:49 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe 2014-01-25 14:47 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88 2014-01-25 14:47 - 2014-01-26 00:39 - 00000000 ____D () C:\Program Files (x86)\ScorpionSaver 2014-01-25 14:47 - 2014-01-25 22:49 - 00000000 ____D () C:\Program Files (x86)\ShoppingChip 2014-01-25 14:47 - 2014-01-25 15:30 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$ 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\ShoppingChip 2014-01-25 14:45 - 2014-01-25 14:45 - 00000000 ____D () C:\Program Files\Level Quality Watcher 2014-01-25 14:37 - 2014-01-25 14:37 - 00000000 _____ () C:\Windows\SysWOW64\sho3746.tmp 2014-01-25 14:34 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-01-25 14:24 - 2014-02-17 10:10 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk 2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager 2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-01-25 14:07 - 2012-04-26 04:04 - 00450048 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys 2014-01-25 14:07 - 2012-04-23 02:58 - 00238080 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00104448 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys 2014-01-25 14:07 - 2011-12-31 02:20 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys 2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll 2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll 2014-01-25 14:07 - 2010-10-08 09:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys 2014-01-25 14:07 - 2010-09-26 11:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys 2014-01-25 14:07 - 2010-08-06 00:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys 2014-01-25 14:07 - 2010-07-27 02:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys 2014-01-25 14:07 - 2010-03-20 05:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys 2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile 2014-01-25 14:05 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\DatacardService 2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf |
18.02.2014, 15:07 | #6 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch FRST Teil 2: Code:
ATTFilter ==================== One Month Modified Files and Folders ======= 2014-02-17 18:24 - 2014-02-17 18:23 - 00020591 _____ () C:\Users\Andreas\Downloads\FRST.txt 2014-02-17 18:23 - 2014-02-17 18:22 - 00000000 ____D () C:\FRST 2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe 2014-02-17 17:46 - 2012-04-05 17:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-17 17:45 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-17 17:45 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-17 17:41 - 2012-12-01 12:16 - 02083596 _____ () C:\Windows\WindowsUpdate.log 2014-02-17 17:36 - 2014-02-16 22:21 - 00001075 _____ () C:\Windows\setupact.log 2014-02-17 17:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-17 13:22 - 2012-02-24 02:22 - 00000000 ____D () C:\Program Files\Hewlett-Packard 2014-02-17 13:13 - 2014-02-16 22:21 - 00006246 _____ () C:\Windows\PFRO.log 2014-02-17 13:13 - 2014-02-16 05:04 - 00003088 _____ () C:\Windows\Tasks\Feven Pro-chromeinstaller.job 2014-02-17 13:13 - 2014-02-16 05:04 - 00002256 _____ () C:\Windows\Tasks\Feven Pro-firefoxinstaller.job 2014-02-17 13:13 - 2014-02-16 05:04 - 00001500 _____ () C:\Windows\Tasks\Feven Pro-updater.job 2014-02-17 13:13 - 2014-02-16 05:04 - 00001456 _____ () C:\Windows\Tasks\Feven Pro-codedownloader.job 2014-02-17 13:13 - 2014-02-16 05:04 - 00001354 _____ () C:\Windows\Tasks\Feven Pro-enabler.job 2014-02-17 13:13 - 2014-01-31 21:19 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job 2014-02-17 13:11 - 2014-02-17 13:11 - 00000000 _____ () C:\Windows\SysWOW64\shoF972.tmp 2014-02-17 10:10 - 2014-02-16 05:04 - 00004542 _____ () C:\Windows\System32\Tasks\Feven Pro-updater 2014-02-17 10:10 - 2014-02-16 05:04 - 00004498 _____ () C:\Windows\System32\Tasks\Feven Pro-codedownloader 2014-02-17 10:10 - 2014-02-16 05:04 - 00004396 _____ () C:\Windows\System32\Tasks\Feven Pro-enabler 2014-02-17 10:10 - 2014-02-02 12:01 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340} 2014-02-17 10:10 - 2014-01-31 21:19 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas 2014-02-17 10:10 - 2014-01-25 14:24 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-02-17 10:10 - 2012-12-01 17:11 - 00003546 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-02-17 10:10 - 2012-12-01 14:17 - 00003770 _____ () C:\Windows\System32\Tasks\Registration 2014-02-17 10:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-17 04:15 - 2012-12-01 17:41 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SoftGrid Client 2014-02-17 03:06 - 2014-01-25 17:15 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 03:01 - 2012-12-07 18:38 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 23:43 - 2012-12-01 14:20 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2B17A51A-F578-4FA4-B1A1-080F9A0ECE95} 2014-02-16 22:40 - 2014-01-31 17:38 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-02-16 22:32 - 2012-04-06 02:24 - 00654610 _____ () C:\Windows\system32\perfh007.dat 2014-02-16 22:32 - 2012-04-06 02:24 - 00130192 _____ () C:\Windows\system32\perfc007.dat 2014-02-16 22:32 - 2009-07-14 06:13 - 01500018 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-16 22:21 - 2014-01-26 00:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-16 05:10 - 2014-02-16 05:04 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\awesomehp 2014-02-16 05:10 - 2014-02-16 05:04 - 00000000 ____D () C:\ProgramData\IePluginService 2014-02-16 05:10 - 2014-01-31 21:27 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-16 05:10 - 2012-12-01 14:20 - 00001421 _____ () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-16 05:09 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-16 05:08 - 2014-02-16 05:04 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-02-16 05:07 - 2014-02-16 05:04 - 00000000 ____D () C:\ProgramData\WPM 2014-02-16 05:05 - 2014-01-26 01:53 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole 2014-02-16 05:04 - 2014-02-16 05:04 - 00000000 ____D () C:\Program Files (x86)\Feven Pro 2014-02-16 05:02 - 2014-02-02 11:59 - 00000000 _____ () C:\END 2014-02-15 22:55 - 2012-12-01 17:24 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype 2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 __RHD () C:\MSOCache 2014-02-15 00:32 - 2014-02-15 00:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-14 23:57 - 2014-02-14 23:59 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi 2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi 2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip 2014-02-14 23:51 - 2012-04-05 17:57 - 00000000 ____D () C:\ProgramData\WinZip 2014-02-14 22:57 - 2012-04-05 18:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk 2014-02-14 22:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-02-14 22:52 - 2012-04-05 18:03 - 00000000 ____D () C:\Windows\System32\Tasks\Hewlett-Packard 2014-02-14 22:50 - 2012-04-05 17:29 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard 2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} 2014-02-14 22:46 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Hewlett-Packard 2014-02-14 22:45 - 2011-02-10 20:23 - 00000000 ____D () C:\SWSetup 2014-02-07 09:22 - 2014-02-07 09:22 - 00000000 _____ () C:\Windows\SysWOW64\sho5FBE.tmp 2014-02-06 21:55 - 2014-02-06 01:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-06 13:16 - 2014-02-15 03:01 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-15 03:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-15 03:01 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-15 03:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-15 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-15 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-15 03:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-15 03:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-15 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-15 03:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-15 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-15 03:01 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-15 03:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-15 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-15 03:01 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-15 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-15 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-15 03:01 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-15 03:01 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-15 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-15 03:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-15 03:01 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-15 03:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-15 03:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-15 03:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-15 03:01 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-15 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-15 03:01 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-15 03:01 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-15 03:01 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-15 03:01 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-15 03:01 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-15 03:01 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-15 03:01 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-15 03:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-15 03:01 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-15 03:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-06 01:46 - 2012-04-05 17:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-06 01:46 - 2012-04-05 17:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-06 01:46 - 2012-04-05 17:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com 2014-02-02 11:59 - 2014-02-02 11:59 - 00000000 ____D () C:\Users\Andreas\AppData\Local\SearchProtect 2014-02-02 11:58 - 2014-02-02 11:58 - 00319904 _____ () C:\Users\Andreas\Downloads\Setup.exe 2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia 2014-02-02 06:49 - 2014-02-02 06:48 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe 2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC 2014-02-01 18:47 - 2014-01-25 15:15 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps 2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-01 11:10 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Skype 2014-02-01 11:08 - 2014-02-01 11:07 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe 2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr 2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl 2014-01-31 21:48 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88 2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla 2014-01-31 21:27 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla 2014-01-31 21:19 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Hewlett-Packard 2014-01-31 21:16 - 2014-01-31 21:14 - 00002400 _____ () C:\RHDSetup.log 2014-01-31 21:15 - 2012-06-02 05:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-01-31 21:12 - 2014-01-31 21:15 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-01-31 21:12 - 2014-01-31 21:14 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-01-31 21:12 - 2014-01-31 21:14 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-01-31 21:12 - 2014-01-31 21:14 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-01-31 21:12 - 2012-06-02 05:42 - 01706640 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-01-31 21:12 - 2012-06-02 05:42 - 00000712 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat 2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork 2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira 2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-01-31 18:50 - 2014-01-31 18:29 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe 2014-01-31 17:51 - 2012-12-01 14:19 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\hpqlog 2014-01-26 03:28 - 2007-01-02 02:25 - 00000000 ____D () C:\Windows\Panther 2014-01-26 03:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-26 02:08 - 2014-01-26 02:08 - 00000000 _____ () C:\Windows\SysWOW64\shoABAD.tmp 2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype 2014-01-26 01:06 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-26 00:39 - 2014-01-25 14:47 - 00000000 ____D () C:\Program Files (x86)\ScorpionSaver 2014-01-25 22:54 - 2012-12-04 17:31 - 00000000 ____D () C:\ProgramData\VirtualizedApplications 2014-01-25 22:49 - 2014-01-25 14:47 - 00000000 ____D () C:\Program Files (x86)\ShoppingChip 2014-01-25 22:47 - 2014-01-25 22:47 - 00000000 ____D () C:\ProgramData\APN 2014-01-25 22:24 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-25 22:20 - 2009-07-14 05:45 - 00271096 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-01-25 20:10 - 2014-01-25 20:10 - 00000000 _____ () C:\Windows\SysWOW64\shoAFB5.tmp 2014-01-25 20:02 - 2012-12-01 17:40 - 01526948 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-25 20:02 - 2012-12-01 17:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client 2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-25 16:17 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Hewlett-Packard 2014-01-25 15:30 - 2014-01-25 14:47 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar 2014-01-25 15:17 - 2014-01-25 14:48 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Systweak 2014-01-25 14:53 - 2014-01-25 14:53 - 00000000 ____D () C:\Users\Andreas\Documents\Optimizer Pro 2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files\Highlightly 2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files (x86)\Highlightly 2014-01-25 14:48 - 2014-01-25 14:48 - 00000000 ____D () C:\Program Files (x86)\Supporter 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$ 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\ShoppingChip 2014-01-25 14:45 - 2014-01-25 14:45 - 00000000 ____D () C:\Program Files\Level Quality Watcher 2014-01-25 14:37 - 2014-01-25 14:37 - 00000000 _____ () C:\Windows\SysWOW64\sho3746.tmp 2014-01-25 14:37 - 2012-06-02 06:00 - 00000000 ____D () C:\ProgramData\Norton 2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk 2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager 2014-01-25 14:08 - 2014-01-25 14:05 - 00000000 ____D () C:\ProgramData\DatacardService 2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile 2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf Some content of TEMP: ==================== C:\Users\Andreas\AppData\Local\Temp\avgnt.exe C:\Users\Andreas\AppData\Local\Temp\BackupSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-17 00:37 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-02-2014 Ran by Andreas at 2014-02-17 18:26:15 Running from C:\Users\Andreas\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (x32 Version: 11.6.3.633 - Adobe Systems, Inc.) AMD APP SDK Runtime (Version: 10.0.898.1 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 3.0.868.0 - Advanced Micro Devices, Inc.) AMD Fuel (Version: 2012.0214.2218.39913 - Ihr Firmenname) Hidden AMD Media Foundation Decoders (Version: 1.0.70214.2220 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.04.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0214.2218.39913 - Ihr Firmenname) Hidden Atheros Driver Installation Program (x32 Version: 9.2 - Atheros) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Avira SearchFree Toolbar (x32 Version: 12.10.0.2951 - APN, LLC) Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden Cake Mania (x32 Version: 2.2.0.98 - WildTangent) Hidden Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.09 - Piriform) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden CyberLink YouCam (x32 Version: 3.5.3.5010 - CyberLink Corp.) CyberLink YouCam (x32 Version: 3.5.3.5010 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden ESU for Microsoft Windows 7 SP1 (x32 Version: 5.1.4 - Hewlett-Packard) Evernote v. 4.5.2 (x32 Version: 4.5.2.5904 - Evernote Corp.) Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden Farmscapes (x32 Version: 2.2.0.98 - WildTangent) Hidden Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden Fishdom (TM) 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden Highlightly (x32 Version: 1.9.0.0 - Highlightly) HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden HP Documentation (x32 Version: 1.1.0.0 - Hewlett-Packard) HP Games (x32 Version: 1.0.2.5 - WildTangent) HP On Screen Display (x32 Version: 1.3.5 - Hewlett-Packard Company) HP Power Manager (x32 Version: 1.4.8 - Hewlett-Packard Company) HP Quick Launch (x32 Version: 2.7.2 - Hewlett-Packard Company) HP Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden HP Security Assistant (Version: 3.0.2 - Hewlett-Packard Company) HP Setup (x32 Version: 9.1.15430.4033 - Hewlett-Packard Company) HP Software Framework (x32 Version: 4.6.10.1 - Hewlett-Packard Company) HP Support Assistant (x32 Version: 7.4.45.4 - Hewlett-Packard Company) Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden Internet Manager (x32 Version: 22.001.18.68.55 - Huawei Technologies Co.,Ltd) Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Jewel Quest II (x32 Version: 2.2.0.97 - WildTangent) Hidden Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Mahjongg Artifacts (x32 Version: 2.2.0.95 - WildTangent) Hidden Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Access 2003 Runtime (x32 Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5139.5005 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla) Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden Realtek Ethernet Controller Driver (x32 Version: 7.51.116.2012 - Realtek) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6652 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (x32 Version: 6.1.7601.29005 - Realtek Semiconductor Corp.) ScorpionSaver (x32 Version: 1.0.0.0 - Adpeak, Inc.) <==== ATTENTION ShoppingChip (x32 Version: 4.3.0.1548 - ShoppingChip) <==== ATTENTION Skype™ 6.13 (x32 Version: 6.13.104 - Skype Technologies S.A.) Supporter 1.80 (x32 Version: - ShoppingChip) <==== ATTENTION swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (Version: 16.0.1.0 - Synaptics Incorporated) TauBeItAdBlockFrr (x32 Version: - TTubEIttAddBlockFr) <==== ATTENTION Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden WildTangent Games App (HP Games) (x32 Version: 4.0.5.36 - WildTangent) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinZip 16.0 (Version: 16.0.9715 - WinZip Computing, S.L. ) Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden ==================== Restore Points ========================= 31-01-2014 21:25:36 Removed Skype™ 6.13 02-02-2014 08:48:16 Sprachpaketdeinstallation 02-02-2014 11:06:18 Windows-Sicherung 02-02-2014 11:11:29 Windows-Sicherung 14-02-2014 21:48:20 Installed HP Support Assistant 14-02-2014 21:53:41 Windows Modules Installer 14-02-2014 21:55:22 Windows Modules Installer 15-02-2014 02:00:24 Windows Update 16-02-2014 04:04:00 Uniblue SpeedUpMyPC installation 17-02-2014 02:00:13 Windows Update 17-02-2014 12:20:32 Removed HP Launch Box ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {061A2C8C-2FB5-4D8D-BC26-3912679441D0} - System32\Tasks\Feven Pro-codedownloader => C:\Program Files (x86)\Feven Pro\Feven Pro-codedownloader.exe [2014-02-16] (Feven) <==== ATTENTION Task: {0C10A2AC-5FB3-437B-8327-7C07B2FDC38A} - System32\Tasks\Feven Pro-chromeinstaller => C:\Program Files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe [2014-02-16] (Feven) <==== ATTENTION Task: {13952C66-FE1E-47EB-ADE3-E0488B9FCA3A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-29] (Hewlett-Packard Company) Task: {22F2EE03-B570-4805-9FDD-DDFB395C1010} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {26FA7021-ECDE-4E6F-A670-7EFF0217AC8D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-02-10] (CyberLink) Task: {2A6AC8CB-D116-40EC-880B-65C520C4D348} - System32\Tasks\Feven Pro-enabler => C:\Program Files (x86)\Feven Pro\Feven Pro-enabler.exe [2014-02-16] (Feven) <==== ATTENTION Task: {2DCB317B-D70A-4D77-A499-6FCDE1504F32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) Task: {43B9C301-3B45-4A48-B956-5D919B24B701} - System32\Tasks\HPCeeScheduleForAndreas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard) Task: {4704D2A3-81A1-470D-8D65-DE2503D2B186} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) Task: {550D799B-45A7-4B83-BEEC-D4F25870D8D6} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2012-02-17] () Task: {5B9D3F14-256B-4BCD-9696-7323AC4AA281} - System32\Tasks\Feven Pro-firefoxinstaller => C:\Program Files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe [2014-02-16] (Feven) <==== ATTENTION Task: {68C29E33-B3F5-49BE-BB88-B057829EABBF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {BA209339-ED07-4EF5-A902-1E9CF1604BD2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated) Task: {EBDEA8C5-1342-4AE1-932C-155237A2E5EB} - System32\Tasks\Feven Pro-updater => C:\Program Files (x86)\Feven Pro\Feven Pro-updater.exe [2014-02-16] (Feven) <==== ATTENTION Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Feven Pro-chromeinstaller.job => C:\Program Files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe <==== ATTENTION Task: C:\Windows\Tasks\Feven Pro-codedownloader.job => C:\Program Files (x86)\Feven Pro\Feven Pro-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\Feven Pro-enabler.job => C:\Program Files (x86)\Feven Pro\Feven Pro-enabler.exe <==== ATTENTION Task: C:\Windows\Tasks\Feven Pro-firefoxinstaller.job => C:\Program Files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe <==== ATTENTION Task: C:\Windows\Tasks\Feven Pro-updater.job => C:\Program Files (x86)\Feven Pro\Feven Pro-updater.exe <==== ATTENTION Task: C:\Windows\Tasks\HPCeeScheduleForAndreas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-14 22:16 - 2012-02-14 22:16 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2012-02-14 22:13 - 2012-02-14 22:13 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2011-11-09 08:55 - 2011-11-09 08:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2014-01-31 18:52 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2014-01-25 14:48 - 2014-01-25 14:48 - 00183632 _____ () C:\Program Files (x86)\Supporter\SupporterSvc.dll 2014-01-25 14:48 - 2014-01-25 14:48 - 04105216 _____ () C:\Program Files (x86)\Supporter\Supporter.dll 2014-01-25 14:08 - 2011-06-17 12:04 - 00224096 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe 2014-01-25 14:08 - 2009-01-10 11:32 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll 2014-01-25 14:08 - 2009-06-22 19:42 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll 2014-01-25 14:08 - 2010-05-05 09:47 - 02415104 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll 2014-01-25 14:08 - 2010-02-10 15:10 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll 2014-02-15 00:31 - 2014-02-15 00:32 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-02-06 01:46 - 2014-02-06 01:46 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll 2014-02-06 01:01 - 2014-02-06 01:01 - 03019376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2014-02-06 01:01 - 2014-02-06 01:01 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2014-02-06 01:01 - 2014-02-06 01:01 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/17/2014 05:38:09 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/17/2014 02:05:38 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/17/2014 02:01:50 PM) (Source: Application Hang) (User: ) Description: Programm avscan.exe, Version 14.0.2.254 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 12c4 Startzeit: 01cf2bdc7a1098e4 Endzeit: 6822 Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe Berichts-ID: a488de81-97d3-11e3-969c-b4b52f28e972 Error: (02/17/2014 01:14:50 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/17/2014 01:08:53 PM) (Source: Application Hang) (User: ) Description: Programm avscan.exe, Version 14.0.2.254 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: d18 Startzeit: 01cf2bc35c1e045e Endzeit: 60000 Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe Berichts-ID: 1a0829e2-97cc-11e3-93a4-b4b52f28e972 Error: (02/17/2014 06:39:41 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/16/2014 10:22:39 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/15/2014 09:47:01 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/15/2014 03:56:31 AM) (Source: CVHSVC) (User: ) Description: Nur zur Information. (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt. Error: (02/15/2014 03:47:15 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (02/17/2014 05:36:49 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/17/2014 05:36:49 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht. Error: (02/17/2014 02:04:16 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/17/2014 02:04:16 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht. Error: (02/17/2014 01:13:24 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/17/2014 01:13:24 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht. Error: (02/17/2014 06:38:17 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/17/2014 06:38:17 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht. Error: (02/16/2014 10:22:26 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/16/2014 10:22:26 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht. Microsoft Office Sessions: ========================= Error: (02/17/2014 05:38:09 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/17/2014 02:05:38 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/17/2014 02:01:50 PM) (Source: Application Hang)(User: ) Description: avscan.exe14.0.2.25412c401cf2bdc7a1098e46822C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exea488de81-97d3-11e3-969c-b4b52f28e972 Error: (02/17/2014 01:14:50 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/17/2014 01:08:53 PM) (Source: Application Hang)(User: ) Description: avscan.exe14.0.2.254d1801cf2bc35c1e045e60000C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe1a0829e2-97cc-11e3-93a4-b4b52f28e972 Error: (02/17/2014 06:39:41 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/16/2014 10:22:39 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/15/2014 09:47:01 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/15/2014 03:56:31 AM) (Source: CVHSVC)(User: ) Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt. Error: (02/15/2014 03:47:15 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Percentage of memory in use: 76% Total physical RAM: 1640.37 MB Available physical RAM: 393.35 MB Total Pagefile: 3280.73 MB Available Pagefile: 1198.76 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:277.83 GB) (Free:234.06 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Recovery) (Fixed) (Total:19.97 GB) (Free:2.14 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 6E474F7D) Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=278 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=103 MB) - (Type=0C) ==================== End Of Log ============================ |
19.02.2014, 15:17 | #7 |
/// the machine /// TB-Ausbilder | Windows 7 - Malware? - Fenster öffnen sich automatisch hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.02.2014, 23:06 | #8 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Hallo. Der Scanner läuft jetzt seit 1 Stunde. Ich habe nix angefasst. Er bleibt immer bei "Fertiggestellt Stufe_4" und dann blinkt das "_" einfach darunter. Habe ich etwas falsch gemacht? Ps. Würde gerne ein Bild davon anfügen, geht über Handy irgendwie nicht. Muss ich morgen mal von meinem Laptop aus probieren. Mache den Laptop meines Vaters jetzt erstmal aus. pps. Ging nun doch^^ LG Shirry Geändert von Shirry (19.02.2014 um 23:12 Uhr) |
20.02.2014, 14:41 | #9 |
/// the machine /// TB-Ausbilder | Windows 7 - Malware? - Fenster öffnen sich automatisch Dann poste bitte das Logfile
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.02.2014, 17:24 | #10 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Ich habe es heute noch einmal probiert - PC und Combofix gestartet - und es ging. ALLERDINGS habe ich danach gesehen, dass sich AntiVir wieder aktiviert hatte beim Start, obwohl ich es gestern deaktiviert hatte. Habe dann das AntiVir deaktiviert und Combofix ist wieder bei Stufe 4 stehen geblieben (jetzt ging das Internet auch nicht mehr... ich musste einen Neustart machen). Da wurde auch kein Logfile erstellt! Aus diesem Grund jetzt das Logfile, wo Antivir aktiviert war. Ich hoffe, dass das trotzdem hilfreich ist ... Code:
ATTFilter ComboFix 14-02-19.01 - Andreas 20.02.2014 16:17:46.3.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.1640.474 [GMT 1:00] ausgeführt von:: c:\users\Andreas\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Feven Pro\FeVEn pro-bho.dll c:\program files (x86)\ScorpionSaver c:\program files (x86)\ScorpionSaver\CustomActionUninstall c:\program files (x86)\ScorpionSaver\ff_addon_runner.js c:\program files (x86)\ScorpionSaver\ff_addonkit_page-mod.js c:\program files (x86)\ScorpionSaver\ff_addonkit_private-browsing.js c:\program files (x86)\ScorpionSaver\ff_addonkit_request.js c:\program files (x86)\ScorpionSaver\ff_addonkit_windows.js c:\program files (x86)\ScorpionSaver\ff_base_api-utils.js c:\program files (x86)\ScorpionSaver\ff_base_base64.js c:\program files (x86)\ScorpionSaver\ff_base_byte-streams.js c:\program files (x86)\ScorpionSaver\ff_base_collection.js c:\program files (x86)\ScorpionSaver\ff_base_content.js c:\program files (x86)\ScorpionSaver\ff_base_cortex.js c:\program files (x86)\ScorpionSaver\ff_base_cuddlefish.js c:\program files (x86)\ScorpionSaver\ff_base_deprecate.js c:\program files (x86)\ScorpionSaver\ff_base_environment.js c:\program files (x86)\ScorpionSaver\ff_base_errors.js c:\program files (x86)\ScorpionSaver\ff_base_events.js c:\program files (x86)\ScorpionSaver\ff_base_file.js c:\program files (x86)\ScorpionSaver\ff_base_functional.js c:\program files (x86)\ScorpionSaver\ff_base_globals.js c:\program files (x86)\ScorpionSaver\ff_base_heritage.js c:\program files (x86)\ScorpionSaver\ff_base_hidden-frame.js c:\program files (x86)\ScorpionSaver\ff_base_light-traits.js c:\program files (x86)\ScorpionSaver\ff_base_list.js c:\program files (x86)\ScorpionSaver\ff_base_loader.js c:\program files (x86)\ScorpionSaver\ff_base_match-pattern.js c:\program files (x86)\ScorpionSaver\ff_base_memory.js c:\program files (x86)\ScorpionSaver\ff_base_namespace.js c:\program files (x86)\ScorpionSaver\ff_base_observer-service.js c:\program files (x86)\ScorpionSaver\ff_base_plain-text-console.js c:\program files (x86)\ScorpionSaver\ff_base_preferences-service.js c:\program files (x86)\ScorpionSaver\ff_base_promise.js c:\program files (x86)\ScorpionSaver\ff_base_querystring.js c:\program files (x86)\ScorpionSaver\ff_base_runtime.js c:\program files (x86)\ScorpionSaver\ff_base_sandbox.js c:\program files (x86)\ScorpionSaver\ff_base_self.js c:\program files (x86)\ScorpionSaver\ff_base_system.js c:\program files (x86)\ScorpionSaver\ff_base_text-streams.js c:\program files (x86)\ScorpionSaver\ff_base_timer.js c:\program files (x86)\ScorpionSaver\ff_base_traceback.js c:\program files (x86)\ScorpionSaver\ff_base_traits.js c:\program files (x86)\ScorpionSaver\ff_base_unload.js c:\program files (x86)\ScorpionSaver\ff_base_url.js c:\program files (x86)\ScorpionSaver\ff_base_uuid.js c:\program files (x86)\ScorpionSaver\ff_base_window-utils.js c:\program files (x86)\ScorpionSaver\ff_base_xhr.js c:\program files (x86)\ScorpionSaver\ff_base_xpcom.js c:\program files (x86)\ScorpionSaver\ff_base_xul-app.js c:\program files (x86)\ScorpionSaver\ff_bootstrap.js c:\program files (x86)\ScorpionSaver\ff_content_content-proxy.js c:\program files (x86)\ScorpionSaver\ff_content_content-worker.js c:\program files (x86)\ScorpionSaver\ff_content_loader.js c:\program files (x86)\ScorpionSaver\ff_content_symbiont.js c:\program files (x86)\ScorpionSaver\ff_content_worker.js c:\program files (x86)\ScorpionSaver\ff_dom_events.js c:\program files (x86)\ScorpionSaver\ff_event_core.js c:\program files (x86)\ScorpionSaver\ff_event_target.js c:\program files (x86)\ScorpionSaver\ff_events_assembler.js c:\program files (x86)\ScorpionSaver\ff_harness-options.json c:\program files (x86)\ScorpionSaver\ff_icon.png c:\program files (x86)\ScorpionSaver\ff_icon64.png c:\program files (x86)\ScorpionSaver\ff_install.rdf c:\program files (x86)\ScorpionSaver\ff_l10n_core.js c:\program files (x86)\ScorpionSaver\ff_l10n_html.js c:\program files (x86)\ScorpionSaver\ff_l10n_loader.js c:\program files (x86)\ScorpionSaver\ff_l10n_locale.js c:\program files (x86)\ScorpionSaver\ff_l10n_prefs.js c:\program files (x86)\ScorpionSaver\ff_locales.json c:\program files (x86)\ScorpionSaver\ff_main.js c:\program files (x86)\ScorpionSaver\ff_main.js.old c:\program files (x86)\ScorpionSaver\ff_prefs.js c:\program files (x86)\ScorpionSaver\ff_privatebrowsing_utils.js c:\program files (x86)\ScorpionSaver\ff_system_events.js c:\program files (x86)\ScorpionSaver\ff_tabs_events.js c:\program files (x86)\ScorpionSaver\ff_tabs_observer.js c:\program files (x86)\ScorpionSaver\ff_tabs_tab.js c:\program files (x86)\ScorpionSaver\ff_tabs_utils.js c:\program files (x86)\ScorpionSaver\ff_traits_core.js c:\program files (x86)\ScorpionSaver\ff_utils_data.js c:\program files (x86)\ScorpionSaver\ff_utils_object.js c:\program files (x86)\ScorpionSaver\ff_utils_registry.js c:\program files (x86)\ScorpionSaver\ff_utils_thumbnail.js c:\program files (x86)\ScorpionSaver\ff_window_utils.js c:\program files (x86)\ScorpionSaver\ff_windows_dom.js c:\program files (x86)\ScorpionSaver\ff_windows_loader.js c:\program files (x86)\ScorpionSaver\ff_windows_observer.js c:\program files (x86)\ScorpionSaver\ff_windows_tabs.js c:\program files (x86)\ScorpionSaver\Microsoft.Deployment.WindowsInstaller.dll c:\program files (x86)\ScorpionSaver\Microsoft.Deployment.WindowsInstaller.xml c:\program files (x86)\ScorpionSaver\SendJson.dll c:\program files (x86)\ShoppingChip c:\program files (x86)\ShoppingChip\_5H747NV.dat c:\program files (x86)\ShoppingChip\_5H747NV.tlb c:\program files (x86)\ShoppingChip\_5H747NV.x64.dll c:\programdata\ShoppingChip c:\programdata\ShoppingChip\E6LwNhPlK.dat c:\programdata\ShoppingChip\E6LwNhPlK.exe c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Preferences c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json c:\windows\Installer\{9B65F9A3-9D24-452A-B6EF-1457D65E4259} c:\windows\Installer\{9B65F9A3-9D24-452A-B6EF-1457D65E4259}\icon64.ico . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_Level Quality Watcher . . ((((((((((((((((((((((( Dateien erstellt von 2014-01-20 bis 2014-02-20 )))))))))))))))))))))))))))))) . . 2014-02-20 15:30 . 2014-02-20 15:30 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-02-17 17:22 . 2014-02-17 17:27 -------- d-----w- C:\FRST 2014-02-17 12:11 . 2014-02-17 12:11 0 ----a-w- c:\windows\SysWow64\shoF972.tmp 2014-02-16 04:04 . 2014-02-16 04:10 -------- d-----w- c:\programdata\IePluginService 2014-02-16 04:04 . 2014-02-16 04:08 -------- d-----w- c:\program files (x86)\SupTab 2014-02-16 04:04 . 2014-02-16 04:07 -------- d-----w- c:\programdata\WPM 2014-02-16 04:04 . 2014-02-16 04:10 -------- d-----w- c:\users\Andreas\AppData\Roaming\awesomehp 2014-02-16 04:04 . 2014-02-20 15:28 -------- d-----w- c:\program files (x86)\Feven Pro 2014-02-15 02:03 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll 2014-02-15 02:03 . 2013-12-21 08:56 454656 ----a-w- c:\windows\SysWow64\vbscript.dll 2014-02-15 01:26 . 2014-02-15 01:26 -------- d-----r- C:\MSOCache 2014-02-14 22:51 . 2014-02-14 22:51 -------- d-----w- c:\users\Andreas\AppData\Local\WinZip 2014-02-14 21:47 . 2014-02-14 21:47 -------- d-----w- c:\programdata\{18165758-115C-4DC0-9EC2-FF89F725767F} 2014-02-07 08:22 . 2014-02-07 08:22 0 ----a-w- c:\windows\SysWow64\sho5FBE.tmp 2014-02-06 00:01 . 2014-02-06 20:55 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird 2014-02-02 10:59 . 2014-02-02 10:59 -------- d-----w- c:\users\Andreas\AppData\Local\SearchProtect 2014-02-02 05:52 . 2014-02-02 05:52 -------- d-----w- c:\users\Andreas\AppData\Local\Macromedia 2014-02-02 05:48 . 2014-02-02 05:49 -------- d-----w- c:\users\Andreas\AppData\Local\Adobe 2014-02-02 05:37 . 2014-02-02 05:37 -------- d-----w- c:\programdata\PDFC 2014-02-01 10:10 . 2014-02-01 10:10 -------- d-----w- c:\program files (x86)\Common Files\Skype 2014-02-01 10:10 . 2014-02-01 10:10 -------- d-----r- c:\program files (x86)\Skype 2014-01-31 20:48 . 2014-01-31 20:48 -------- d-----w- c:\programdata\TauBeItAdBlockFrr 2014-01-31 20:48 . 2014-01-31 20:48 -------- d-----w- c:\programdata\jhippldmkdolhnikfcbcgjihailghcpl 2014-01-31 20:41 . 2014-01-31 20:41 -------- d-----w- c:\programdata\Microsoft Help 2014-01-31 20:40 . 2014-01-31 20:40 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services 2014-01-31 20:27 . 2014-01-31 20:27 -------- d-----w- c:\users\Andreas\AppData\Local\Mozilla 2014-01-31 20:14 . 2014-01-31 20:12 2674320 ----a-w- c:\windows\system32\RtPgEx64.dll 2014-01-31 20:14 . 2014-01-31 20:12 4064784 ----a-w- c:\windows\system32\drivers\RTKVHD64.sys 2014-01-31 20:14 . 2014-01-31 20:12 3611752 ----a-w- c:\windows\system32\RtkAPO64.dll 2014-01-31 20:14 . 2014-01-31 20:12 854672 ----a-w- c:\windows\system32\RtkApi64.dll 2014-01-31 20:14 . 2014-01-31 20:12 1262696 ----a-w- c:\windows\system32\RTCOM64.dll 2014-01-31 20:14 . 2014-01-31 20:12 105616 ----a-w- c:\windows\system32\RCoInstII64.dll 2014-01-31 20:14 . 2014-01-31 20:12 108640 ----a-w- c:\windows\system32\AERTAR64.dll 2014-01-31 20:14 . 2014-01-31 20:12 202336 ----a-w- c:\windows\system32\AERTAC64.dll 2014-01-31 17:56 . 2014-01-31 17:56 -------- d-----w- c:\users\Andreas\AppData\Local\AskPartnerNetwork 2014-01-31 17:55 . 2014-01-31 17:55 -------- d-----w- c:\programdata\AskPartnerNetwork 2014-01-31 17:55 . 2014-01-31 17:55 -------- d-----w- c:\program files (x86)\AskPartnerNetwork 2014-01-31 17:54 . 2014-01-31 17:54 -------- d-----w- c:\users\Andreas\AppData\Roaming\Avira 2014-01-31 17:52 . 2013-12-09 10:37 84720 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2014-01-31 17:52 . 2013-12-09 10:37 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2014-01-31 17:52 . 2013-12-09 10:37 131576 ----a-w- c:\windows\system32\drivers\avipbb.sys 2014-01-31 17:52 . 2013-12-09 10:37 108440 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2014-01-31 17:52 . 2014-01-31 17:52 -------- d-----w- c:\programdata\Avira 2014-01-31 17:52 . 2014-01-31 17:52 -------- d-----w- c:\program files (x86)\Avira 2014-01-26 10:24 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2014-01-26 10:24 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2014-01-26 10:24 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll 2014-01-26 10:24 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-01-26 02:08 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE 2014-01-26 02:01 . 2014-01-26 02:01 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2014-01-26 02:01 . 2014-01-26 02:01 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2014-01-26 01:08 . 2014-01-26 01:08 0 ----a-w- c:\windows\SysWow64\shoABAD.tmp 2014-01-26 00:27 . 2014-01-26 00:27 -------- d-----w- c:\users\Andreas\AppData\Local\Skype 2014-01-25 23:55 . 2014-01-26 00:06 -------- d-----w- c:\users\Andreas\AppData\Local\Thunderbird 2014-01-25 23:55 . 2014-01-25 23:55 -------- d-----w- c:\users\Andreas\AppData\Roaming\Thunderbird 2014-01-25 23:55 . 2014-02-16 21:21 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service 2014-01-25 21:47 . 2014-01-25 21:47 -------- d-----w- c:\programdata\APN 2014-01-25 19:10 . 2014-01-25 19:10 0 ----a-w- c:\windows\SysWow64\shoAFB5.tmp 2014-01-25 19:05 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2014-01-25 19:05 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe 2014-01-25 19:05 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL 2014-01-25 19:05 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL 2014-01-25 19:05 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll 2014-01-25 16:51 . 2014-01-25 16:51 -------- d-----w- c:\program files\Microsoft Silverlight 2014-01-25 16:51 . 2014-01-25 16:51 -------- d-----w- c:\program files (x86)\Microsoft Silverlight 2014-01-25 16:15 . 2014-02-17 02:06 -------- d-----w- c:\windows\system32\MRT 2014-01-25 14:15 . 2014-02-01 17:47 -------- d-----w- c:\users\Andreas\AppData\Local\CrashDumps 2014-01-25 14:14 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll 2014-01-25 14:14 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll 2014-01-25 14:14 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll 2014-01-25 14:14 . 2013-07-04 11:50 530432 ----a-w- c:\windows\SysWow64\comctl32.dll 2014-01-25 14:14 . 2013-02-15 06:06 3717632 ----a-w- c:\windows\system32\mstscax.dll 2014-01-25 14:14 . 2013-02-15 04:37 3217408 ----a-w- c:\windows\SysWow64\mstscax.dll 2014-01-25 14:14 . 2013-02-15 06:08 44032 ----a-w- c:\windows\system32\tsgqec.dll 2014-01-25 14:14 . 2013-02-15 06:02 158720 ----a-w- c:\windows\system32\aaclient.dll 2014-01-25 14:14 . 2013-02-15 04:34 131584 ----a-w- c:\windows\SysWow64\aaclient.dll 2014-01-25 14:14 . 2013-02-15 03:25 36864 ----a-w- c:\windows\SysWow64\tsgqec.dll 2014-01-25 14:14 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll 2014-01-25 14:14 . 2013-07-09 04:52 175104 ----a-w- c:\windows\SysWow64\wintrust.dll 2014-01-25 14:12 . 2013-09-28 01:09 497152 ----a-w- c:\windows\system32\drivers\afd.sys 2014-01-25 14:11 . 2013-07-25 09:25 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL 2014-01-25 14:01 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys 2014-01-25 14:00 . 2012-11-30 05:45 362496 ----a-w- c:\windows\system32\wow64win.dll 2014-01-25 14:00 . 2012-11-30 05:45 13312 ----a-w- c:\windows\system32\wow64cpu.dll 2014-01-25 14:00 . 2012-11-30 05:43 16384 ----a-w- c:\windows\system32\ntvdm64.dll 2014-01-25 13:59 . 2013-07-26 02:24 14172672 ----a-w- c:\windows\system32\shell32.dll 2014-01-25 13:59 . 2013-07-26 02:24 197120 ----a-w- c:\windows\system32\shdocvw.dll 2014-01-25 13:59 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll 2014-01-25 13:59 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll 2014-01-25 13:59 . 2013-10-03 02:23 404480 ----a-w- c:\windows\system32\gdi32.dll 2014-01-25 13:59 . 2013-10-03 02:00 311808 ----a-w- c:\windows\SysWow64\gdi32.dll 2014-01-25 13:57 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx 2014-01-25 13:55 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll 2014-01-25 13:55 . 2012-11-02 05:11 376832 ----a-w- c:\windows\SysWow64\dpnet.dll 2014-01-25 13:49 . 2014-01-25 13:49 -------- d-----w- c:\program files\Highlightly 2014-01-25 13:49 . 2014-01-25 13:49 -------- d-----w- c:\program files (x86)\Highlightly 2014-01-25 13:48 . 2014-01-25 14:17 -------- d-----w- c:\users\Andreas\AppData\Roaming\Systweak 2014-01-25 13:48 . 2013-07-11 12:49 20312 ----a-w- c:\windows\system32\roboot64.exe 2014-01-25 13:48 . 2014-02-18 20:21 -------- d-----w- c:\program files (x86)\Supporter 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Andreas\AppData\Local\Programs 2014-01-25 13:47 . 2014-01-25 14:30 -------- d-----w- c:\program files (x86)\IminentToolbar 2014-01-25 13:47 . 2014-01-31 20:48 -------- d-----w- c:\programdata\a0372ee8eaab2b88 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Andreas\AppData\Local\Packages 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Andreas\AppData\Local\Torch 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Andreas\AppData\Local\Google 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\HomeGroupUser$ 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Gast 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Andreas\AppData\Local\Comodo 2014-01-25 13:47 . 2014-01-25 13:47 -------- d-----w- c:\users\Administrator 2014-01-25 13:45 . 2014-01-31 19:59 -------- d-----w- C:\temp 2014-01-25 13:45 . 2014-01-25 13:45 -------- d-----w- c:\program files\Level Quality Watcher 2014-01-25 13:37 . 2014-01-25 13:37 0 ----a-w- c:\windows\SysWow64\sho3746.tmp 2014-01-25 13:34 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll 2014-01-25 13:33 . 2013-12-16 00:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{279A08BD-B2F2-4CE9-9C03-ABD40B05404E}\mpengine.dll 2014-01-25 13:24 . 2014-01-25 13:24 -------- d-----w- c:\program files\CCleaner 2014-01-25 13:08 . 2014-01-25 13:08 -------- d-----w- c:\programdata\Internet Manager 2014-01-25 13:06 . 2014-01-25 13:06 -------- d-----w- c:\program files (x86)\T-Mobile 2014-01-25 13:05 . 2014-01-25 13:08 -------- d-----w- c:\programdata\DatacardService . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-02-17 02:01 . 2012-12-07 17:38 88567024 ----a-w- c:\windows\system32\MRT.exe 2014-02-06 00:46 . 2012-04-05 16:35 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-02-06 00:46 . 2012-04-05 16:35 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-01-31 20:12 . 2012-06-02 04:42 1706640 ----a-w- c:\windows\RtlExUpd.dll 2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe 2013-12-04 19:46 . 2013-12-04 19:46 58256 ----a-w- c:\windows\system32\drivers\hlnfd.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}] 2013-12-20 21:02 12240 ----a-w- c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE}] 2013-12-04 19:46 147560 ----a-w- c:\program files (x86)\Highlightly\IE\HighlightlyClientIE.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{41564952-412D-5637-4300-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" [2013-12-20 12240] . [HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-4300-7a786e7484d7}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 636032] "HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944] "HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-02-18 684600] "ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-12-20 1778640] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "Userinit"="userinit.exe" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x] R2 Internet Manager. RunOuc;Internet Manager. OUC;c:\program files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe;c:\program files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x] R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys;c:\windows\SYSNATIVE\DRIVERS\ew_usbenumfilter.sys [x] R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x] R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jucdcacm.sys [x] R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juextctrl.sys [x] R3 huawei_wwanecm;huawei_wwanecm;c:\windows\system32\DRIVERS\ew_juwwanecm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juwwanecm.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 SmbDrv;SmbDrv;c:\windows\system32\drivers\Smb_driver.sys;c:\windows\SYSNATIVE\drivers\Smb_driver.sys [x] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x] S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x] S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S1 hlnfd;hlnfd;c:\windows\system32\drivers\hlnfd.sys;c:\windows\SYSNATIVE\drivers\hlnfd.sys [x] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x] S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x] S2 hlsvc;Highlightly Client Service;c:\program files (x86)\Highlightly\Service\hlsvc.exe;c:\program files (x86)\Highlightly\Service\hlsvc.exe [x] S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x] S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [x] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x] S3 amdiox64;AMD IO Driver;c:\windows\system32\drivers\amdiox64.sys;c:\windows\SYSNATIVE\drivers\amdiox64.sys [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x] S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x] S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . Inhalt des "geplante Tasks" Ordners . 2014-02-19 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 00:46] . 2014-02-17 c:\windows\Tasks\Feven Pro-chromeinstaller.job - c:\program files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe [2014-02-16 04:04] . 2014-02-17 c:\windows\Tasks\Feven Pro-codedownloader.job - c:\program files (x86)\Feven Pro\Feven Pro-codedownloader.exe [2014-02-16 04:04] . 2014-02-17 c:\windows\Tasks\Feven Pro-enabler.job - c:\program files (x86)\Feven Pro\Feven Pro-enabler.exe [2014-02-16 04:04] . 2014-02-17 c:\windows\Tasks\Feven Pro-firefoxinstaller.job - c:\program files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe [2014-02-16 04:04] . 2014-02-17 c:\windows\Tasks\Feven Pro-updater.job - c:\program files (x86)\Feven Pro\Feven Pro-updater.exe [2014-02-16 04:04] . 2014-02-17 c:\windows\Tasks\HPCeeScheduleForAndreas.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 02:43] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}] 2013-12-20 21:02 13776 ----a-w- c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5E50B8AA-7158-4229-3E4B-327FA83238DF}] 2014-01-31 20:48 473600 ----a-w- c:\programdata\TauBeItAdBlockFrr\Fg9U.x64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{41564952-412D-5637-4300-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" [2013-12-20 13776] . [HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-4300-7A786E7484D7}] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2014-01-31 6548112] . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT uLocal Page = c:\windows\system32\blank.htm mDefault_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} mDefault_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT mStart Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms} TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\ FF - prefs.js: browser.search.selectedEngine - awesomehp FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/ . - - - - Entfernte verwaiste Registrierungseinträge - - - - . URLSearchHooks-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file) BHO-{11111111-1111-1111-1111-110511161178} - c:\program files (x86)\Feven Pro\Feven Pro-bho.dll BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start HKLM_Wow6432Node-ActiveSetup-{438363A8-F486-4C37-834C-4955773CB3D3} - msiexec BHO-{15913038-0EF1-583B-129C-342D218DBC4C} - c:\program files (x86)\ShoppingChip\_5H747NV.x64.dll HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} - c:\programdata\ShoppingChip\E6LwNhPlK.exe AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-263240945-1247611552-2027154437-1002_Classes\CLSID] @DACL=(02 0000) . [HKEY_USERS\S-1-5-21-263240945-1247611552-2027154437-1002_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}] @DACL=(02 0000) @="SynTPCpl0" "LocalizedString"="Synaptics TouchPad V7.5" "System.ApplicationName"="Synaptics.SynTPCpl0" "System.ControlPanel.Category"="2" "System.Software.TasksFileUrl"="c:\\ProgramData\\Synaptics\\SynTP\\SynTPCpl0.xml" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe c:\programdata\Internet Manager\OnlineUpdate\ouc.exe c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-02-20 16:41:28 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-02-20 15:41 . Vor Suchlauf: 11 Verzeichnis(se), 250.878.189.568 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 250.559.254.528 Bytes frei . - - End Of File - - 778A440FD050627820224C42D153F6EC A36C5E4F47E84449FF07ED3517B43A31 |
21.02.2014, 14:08 | #11 |
/// the machine /// TB-Ausbilder | Windows 7 - Malware? - Fenster öffnen sich automatisch Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
22.02.2014, 13:07 | #12 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Malwarebytes Anti-Malware LOG: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.22.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16518 Andreas :: ANDREAS-HP [Administrator] Schutz: Aktiviert 22.02.2014 11:30:28 mbam-log-2014-02-22 (11-30-28).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 244430 Laufzeit: 14 Minute(n), 33 Sekunde(n) Infizierte Speicherprozesse: 1 C:\Program Files (x86)\Highlightly\Service\hlsvc.exe (PUP.Optional.Highlightly) -> 492 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 26 HKCR\CLSID\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} (PUP.Optional.GreatSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} (PUP.Optional.ShoppingChip) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94EEB800-E533-7AE1-5C31-0446E1C0537C} (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Highlightly (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\hlsvc (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0051678.BHO (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0051678.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0051678.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\AppDataLow\Software\Feven Pro (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstalledBrowserExtensions\Feven (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Highlightly (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HLNFD (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\awesomehpSoftware (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\Feven Pro (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511161178} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{11111111-1111-1111-1111-110511161178} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 3 HKLM\SOFTWARE\Mozilla\Firefox\Extensions|lightningnewtab@gmail.com (PUP.Optional.Lightning.A) -> Daten: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\extensions\lightningnewtab@gmail.com.xpi -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\hlnfd|DisplayName (PUP.Optional.Highlightly) -> Daten: hlnfd -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\hlsvc|DisplayName (PUP.Optional.Highlightly) -> Daten: Highlightly Client Service -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 5 HKCU\Software\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 13 C:\Users\Andreas\AppData\Roaming\awesomehp (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Roaming\awesomehp\log (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files\Level Quality Watcher\v1.01 (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly (PUP.Optional.Highlightly) -> Löschen bei Neustart. C:\Program Files (x86)\Highlightly\3rd Party Licenses (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\IE (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\Service (PUP.Optional.Highlightly) -> Löschen bei Neustart. C:\Program Files (x86)\IminentToolbar (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0 (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IePluginService (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IePluginService\update (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 51 C:\Program Files (x86)\Highlightly\IE\HighlightlyClientIE.dll (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\TauBeItAdBlockFrr\Fg9U.exe (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\TauBeItAdBlockFrr\Fg9U.x64.dll (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Roaming\awesomehp\QQBrowserFrame.dll (PUP.Optional.SkyTech.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\temp\t.msi (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\Downloads\Setup.exe (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Installer\88ac7.msi (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Feven Pro-chromeinstaller.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Feven Pro-codedownloader.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Feven Pro-enabler.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Feven Pro-firefoxinstaller.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Feven Pro-updater.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Roaming\awesomehp\54.json (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Roaming\awesomehp\awesomehp.exe (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Roaming\awesomehp\DataBase (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Roaming\awesomehp\log\awesomehp.LOG (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\awesomehp.xml (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\terms-of-service.rtf (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\Uninstall.exe (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\3rd Party Licenses\buildcrx-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\3rd Party Licenses\Info-ZIP-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\3rd Party Licenses\nsJSON-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\3rd Party Licenses\SimpleSC-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\3rd Party Licenses\UAC-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Highlightly\Service\hlsvc.exe (PUP.Optional.Highlightly) -> Löschen bei Neustart. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\background.js (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\bootstrap.js (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\bootstrap.js.old (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon128.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon16.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon32.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon48.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon64.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon8.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\manifest.json (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\marcopolo.js (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\51678.crx (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\51678.xpi (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\background.html (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-bg.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-bho64.dll (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-codedownloader.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-enabler.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro-updater.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Feven Pro.ico (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Installer.log (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\Uninstall.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Feven Pro\utils.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter 2014/02/22 11:26:32 +0100 ANDREAS-HP Andreas MESSAGE Executing scheduled update: Daily 2014/02/22 11:26:40 +0100 ANDREAS-HP Andreas MESSAGE Starting protection 2014/02/22 11:26:40 +0100 ANDREAS-HP Andreas MESSAGE Protection started successfully 2014/02/22 11:26:40 +0100 ANDREAS-HP Andreas MESSAGE Starting IP protection 2014/02/22 11:27:39 +0100 ANDREAS-HP Andreas MESSAGE IP Protection started successfully 2014/02/22 11:27:58 +0100 ANDREAS-HP Andreas MESSAGE Starting database refresh 2014/02/22 11:27:58 +0100 ANDREAS-HP Andreas MESSAGE Stopping IP protection 2014/02/22 11:28:03 +0100 ANDREAS-HP Andreas MESSAGE IP Protection stopped successfully 2014/02/22 11:28:07 +0100 ANDREAS-HP Andreas MESSAGE Scheduled update executed successfully: database updated from version v2013.04.04.07 to version v2014.02.22.02 2014/02/22 11:28:11 +0100 ANDREAS-HP Andreas MESSAGE Database refreshed successfully 2014/02/22 11:28:11 +0100 ANDREAS-HP Andreas MESSAGE Starting IP protection 2014/02/22 11:28:26 +0100 ANDREAS-HP Andreas MESSAGE IP Protection started successfully 2014/02/22 11:29:08 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49621, Process: firefox.exe) 2014/02/22 11:29:08 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49622, Process: firefox.exe) 2014/02/22 11:29:08 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49623, Process: firefox.exe) 2014/02/22 11:29:08 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49624, Process: firefox.exe) 2014/02/22 11:59:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49710, Process: firefox.exe) 2014/02/22 11:59:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49711, Process: firefox.exe) 2014/02/22 11:59:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49712, Process: firefox.exe) 2014/02/22 11:59:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49713, Process: firefox.exe) 2014/02/22 11:59:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49720, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49722, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49723, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49724, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49728, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49729, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49730, Process: firefox.exe) 2014/02/22 11:59:31 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49731, Process: firefox.exe) 2014/02/22 11:59:47 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49749, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49750, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49751, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49752, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49756, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49757, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49758, Process: firefox.exe) 2014/02/22 11:59:48 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49759, Process: firefox.exe) 2014/02/22 11:59:56 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49775, Process: firefox.exe) 2014/02/22 11:59:56 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49776, Process: firefox.exe) 2014/02/22 11:59:56 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49777, Process: firefox.exe) 2014/02/22 11:59:57 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49778, Process: firefox.exe) 2014/02/22 11:59:57 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49782, Process: firefox.exe) 2014/02/22 11:59:57 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49783, Process: firefox.exe) 2014/02/22 11:59:57 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49784, Process: firefox.exe) 2014/02/22 11:59:57 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49785, Process: firefox.exe) 2014/02/22 12:00:29 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49803, Process: firefox.exe) 2014/02/22 12:00:29 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49804, Process: firefox.exe) 2014/02/22 12:00:29 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49805, Process: firefox.exe) 2014/02/22 12:00:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49806, Process: firefox.exe) 2014/02/22 12:00:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49808, Process: firefox.exe) 2014/02/22 12:00:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49809, Process: firefox.exe) 2014/02/22 12:00:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49810, Process: firefox.exe) 2014/02/22 12:00:30 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49811, Process: firefox.exe) 2014/02/22 12:00:38 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49826, Process: firefox.exe) 2014/02/22 12:00:38 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49827, Process: firefox.exe) 2014/02/22 12:00:38 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49828, Process: firefox.exe) 2014/02/22 12:00:39 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49829, Process: firefox.exe) 2014/02/22 12:00:39 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49833, Process: firefox.exe) 2014/02/22 12:00:39 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49834, Process: firefox.exe) 2014/02/22 12:00:39 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.22 (Type: outgoing, Port: 49835, Process: firefox.exe) 2014/02/22 12:00:39 +0100 ANDREAS-HP Andreas IP-BLOCK 162.210.192.26 (Type: outgoing, Port: 49836, Process: firefox.exe) 2014/02/22 12:03:38 +0100 ANDREAS-HP Andreas MESSAGE Starting protection 2014/02/22 12:03:38 +0100 ANDREAS-HP Andreas MESSAGE Protection started successfully 2014/02/22 12:03:38 +0100 ANDREAS-HP Andreas MESSAGE Starting IP protection 2014/02/22 12:03:54 +0100 ANDREAS-HP Andreas MESSAGE IP Protection started successfully Code:
ATTFilter # AdwCleaner v3.019 - Bericht erstellt am 22/02/2014 um 12:17:12 # Aktualisiert 17/02/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Andreas - ANDREAS-HP # Gestartet von : C:\Users\Andreas\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\WPM Ordner Gelöscht : C:\Program Files (x86)\SupTab Ordner Gelöscht : C:\Program Files\Highlightly Ordner Gelöscht : C:\Program Files\Level Quality Watcher Ordner Gelöscht : C:\Users\Andreas\AppData\Local\Searchprotect Ordner Gelöscht : C:\Users\Andreas\AppData\Local\torch Ordner Gelöscht : C:\Users\Andreas\AppData\LocalLow\IminentToolbar Ordner Gelöscht : C:\Users\Andreas\AppData\Roaming\Systweak Ordner Gelöscht : C:\Users\Andreas\Documents\optimizer pro Datei Gelöscht : C:\END Datei Gelöscht : C:\Windows\System32\roboot64.exe ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IMinentToolbar_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IMinentToolbar_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162278} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165578} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166678} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162278} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165578} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166678} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3} Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions Schlüssel Gelöscht : HKCU\Software\systweak Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B} Schlüssel Gelöscht : HKLM\Software\caphyon Schlüssel Gelöscht : HKLM\Software\supTab Schlüssel Gelöscht : HKLM\Software\supWPM Schlüssel Gelöscht : HKLM\Software\systweak Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Scorpion Saver ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16518 Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v27.0.1 (de) [ Datei : C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\prefs.js ] Zeile gelöscht : user_pref("browser.search.defaultenginename", "awesomehp"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "awesomehp"); Zeile gelöscht : user_pref("extensions.crossrider.bic", "14438dede11049ac3df618c9c465dc22"); Zeile gelöscht : user_pref("extensions.z_QMiS.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressbar.com[^f]+fid=65017/)[...] ************************* AdwCleaner[R0].txt - [6861 octets] - [22/02/2014 12:15:38] AdwCleaner[S0].txt - [6058 octets] - [22/02/2014 12:17:12] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6118 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.2 (02.20.2014:1) OS: Windows 7 Home Premium x64 Ran by Andreas on 22.02.2014 at 12:26:42,73 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\Windows\syswow64\sho3746.tmp Successfully deleted: [File] C:\Windows\syswow64\sho5FBE.tmp Successfully deleted: [File] C:\Windows\syswow64\shoABAD.tmp Successfully deleted: [File] C:\Windows\syswow64\shoAFB5.tmp Successfully deleted: [File] C:\Windows\syswow64\shoC810.tmp Successfully deleted: [File] C:\Windows\syswow64\shoF972.tmp ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" ~~~ FireFox Emptied folder: C:\Users\Andreas\AppData\Roaming\mozilla\firefox\profiles\5qxwlrma.default\minidumps [6 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 22.02.2014 at 12:46:16,32 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Geändert von Shirry (22.02.2014 um 12:12 Uhr) |
22.02.2014, 13:36 | #13 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch FRST neu: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01 Ran by Andreas (administrator) on ANDREAS-HP on 22-02-2014 13:33:51 Running from C:\Users\Andreas\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Farbar) C:\Users\Andreas\Desktop\FRST64(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2014-01-31] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-02-24] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFCB3BC89141ACF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms} SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms} SearchScopes: HKCU - {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {996317D0-90D7-4835-8E9B-AA46C8B1CD50} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms} BHO: ShoppingChip - {15913038-0EF1-583B-129C-342D218DBC4C} - C:\Program Files (x86)\ShoppingChip\_5H747NV.x64.dll No File BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) BHO: TauBeItAdBlockFrr - {5E50B8AA-7158-4229-3E4B-327FA83238DF} - C:\ProgramData\TauBeItAdBlockFrr\Fg9U.x64.dll No File BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{7D8FB911-34C2-41CC-A67F-C5B9FFD16891}: [NameServer] Tcpip\..\Interfaces\{F9DA5CDE-A652-4B4B-9F9B-536B53A607BF}: [NameServer] FireFox: ======== FF ProfilePath: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default FF Homepage: https://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\1392523442_xpi [2014-02-16] FF Extension: Adblock Plus - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-17] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-02-14] (Advanced Micro Devices, Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-22] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] () R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) ==================== Drivers (Whitelisted) ==================== R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.) S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-22 13:33 - 2014-02-22 13:33 - 02154496 _____ (Farbar) C:\Users\Andreas\Desktop\FRST64(1).exe 2014-02-22 13:29 - 2014-02-22 13:29 - 00027455 _____ () C:\ComboFix.txt 2014-02-22 13:10 - 2014-02-22 13:29 - 00000000 ____D () C:\ComboFix 2014-02-22 12:46 - 2014-02-22 12:46 - 00001306 _____ () C:\Users\Andreas\Desktop\JRT.txt 2014-02-22 12:25 - 2014-02-22 12:25 - 00000000 ____D () C:\Windows\ERUNT 2014-02-22 12:24 - 2014-02-22 12:24 - 01037734 _____ (Thisisu) C:\Users\Andreas\Desktop\JRT.exe 2014-02-22 12:15 - 2014-02-22 12:17 - 00000000 ____D () C:\AdwCleaner 2014-02-22 12:14 - 2014-02-22 12:14 - 01241834 _____ () C:\Users\Andreas\Desktop\adwcleaner.exe 2014-02-22 11:26 - 2014-02-22 11:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Malwarebytes 2014-02-22 11:25 - 2014-02-22 11:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-22 11:25 - 2014-02-22 11:25 - 00001069 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-22 11:25 - 2014-02-22 11:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-22 11:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-22 11:24 - 2014-02-22 11:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andreas\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-19 22:07 - 2014-02-20 16:44 - 05183886 ____R (Swearware) C:\Users\Andreas\Desktop\ComboFix.exe 2014-02-19 20:44 - 2014-02-22 13:29 - 00000000 ____D () C:\Qoobox 2014-02-19 20:44 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-02-19 20:44 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-02-19 20:44 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-02-19 20:44 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-02-19 20:44 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-02-19 20:44 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-02-19 20:44 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-02-19 20:44 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-02-19 20:43 - 2014-02-20 16:37 - 00000000 ____D () C:\Windows\erdnt 2014-02-19 20:42 - 2014-02-19 20:42 - 05183254 ____R (Swearware) C:\Users\Andreas\Downloads\ComboFix.exe 2014-02-17 20:39 - 2014-02-17 20:39 - 00122605 _____ () C:\Users\Andreas\Downloads\FRST.txt 2014-02-17 18:26 - 2014-02-17 18:27 - 00028647 _____ () C:\Users\Andreas\Desktop\Addition.txt 2014-02-17 18:23 - 2014-02-22 13:33 - 00013946 _____ () C:\Users\Andreas\Desktop\FRST.txt 2014-02-17 18:22 - 2014-02-22 13:33 - 00000000 ____D () C:\FRST 2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe 2014-02-16 22:21 - 2014-02-22 12:19 - 00001579 _____ () C:\Windows\setupact.log 2014-02-16 22:21 - 2014-02-22 12:02 - 00025250 _____ () C:\Windows\PFRO.log 2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-15 03:03 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-15 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-15 03:01 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-15 03:01 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-15 03:01 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-15 03:01 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-15 03:01 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-15 03:01 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-15 03:01 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-15 03:01 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-15 03:01 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-15 03:01 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-15 03:01 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-15 03:01 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-15 03:01 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-15 03:01 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-15 03:01 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-15 03:01 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-15 03:01 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-15 03:01 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-15 03:01 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-15 03:01 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-15 03:01 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-15 03:01 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-15 03:01 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-15 03:01 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-15 03:01 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-15 03:01 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-15 03:01 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-15 03:01 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-15 03:01 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-15 03:01 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-15 03:01 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-15 03:01 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-15 03:01 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-15 03:01 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-15 03:01 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-15 03:01 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-15 03:01 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-15 03:01 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-15 03:01 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 ___RD () C:\MSOCache 2014-02-15 00:31 - 2014-02-15 00:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-14 23:59 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi 2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi 2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip 2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk 2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} 2014-02-14 22:26 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-14 22:26 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-14 22:26 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-14 22:26 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-14 22:26 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-14 22:26 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-14 22:26 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-14 22:26 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-14 22:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-14 22:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-14 22:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-14 22:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-14 22:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-14 22:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-14 22:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-14 22:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-14 22:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-14 22:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-14 22:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-14 22:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-14 22:26 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-14 22:26 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-06 01:01 - 2014-02-06 21:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-02 12:01 - 2014-02-17 10:10 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340} 2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia 2014-02-02 06:48 - 2014-02-02 06:49 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe 2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC 2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-01 11:07 - 2014-02-01 11:08 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe 2014-01-31 21:48 - 2014-02-22 11:57 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr 2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl 2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-01-31 21:27 - 2014-02-16 05:10 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla 2014-01-31 21:19 - 2014-02-17 13:13 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job 2014-01-31 21:19 - 2014-02-17 10:10 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas 2014-01-31 21:15 - 2014-01-31 21:12 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-01-31 21:14 - 2014-01-31 21:16 - 00002400 _____ () C:\RHDSetup.log 2014-01-31 21:14 - 2014-01-31 21:12 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-01-31 21:14 - 2014-01-31 21:12 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-01-31 21:14 - 2014-01-31 21:12 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-01-31 21:14 - 2014-01-31 21:12 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork 2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira 2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-01-31 18:52 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-31 18:52 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-31 18:52 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-31 18:52 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-31 18:29 - 2014-01-31 18:50 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe 2014-01-31 17:38 - 2014-02-16 22:40 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-01-26 11:24 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-01-26 11:24 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-01-26 11:24 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-01-26 11:24 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-01-26 03:08 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-26 01:53 - 2014-02-16 05:05 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole 2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype 2014-01-26 00:55 - 2014-02-16 22:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-26 00:55 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla 2014-01-26 00:55 - 2014-01-26 01:06 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-25 20:05 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-01-25 20:05 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-01-25 20:05 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-01-25 20:05 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-25 17:15 - 2014-02-17 03:06 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-25 15:15 - 2014-02-01 18:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps 2014-01-25 15:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-01-25 15:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-01-25 15:14 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-01-25 15:14 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-01-25 15:14 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-01-25 15:14 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-01-25 15:14 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-01-25 15:14 - 2013-02-15 07:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-01-25 15:14 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-01-25 15:14 - 2013-02-15 05:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-01-25 15:14 - 2013-02-15 05:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-01-25 15:14 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-01-25 15:13 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-01-25 15:13 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-01-25 15:13 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-01-25 15:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-01-25 15:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-01-25 15:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-01-25 15:13 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-01-25 15:13 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-01-25 15:13 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-01-25 15:13 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-01-25 15:13 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-01-25 15:13 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-01-25 15:13 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-01-25 15:13 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-01-25 15:13 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-01-25 15:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-25 15:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-25 15:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-01-25 15:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-01-25 15:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-01-25 15:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-01-25 15:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-01-25 15:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-01-25 15:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-01-25 15:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-01-25 15:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-01-25 15:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-01-25 15:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-01-25 15:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-01-25 15:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-01-25 15:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-01-25 15:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-01-25 15:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-01-25 15:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-01-25 15:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-01-25 15:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-01-25 15:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-01-25 15:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-01-25 15:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-01-25 15:12 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-01-25 15:12 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-01-25 15:12 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-01-25 15:12 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-01-25 15:12 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-01-25 15:12 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-01-25 15:12 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-01-25 15:12 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-01-25 15:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-01-25 15:12 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-01-25 15:12 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-01-25 15:12 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-01-25 15:12 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-01-25 15:12 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2014-01-25 15:12 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-01-25 15:12 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2014-01-25 15:12 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-01-25 15:12 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-01-25 15:12 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-01-25 15:12 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-01-25 15:12 - 2013-04-01 07:03 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll 2014-01-25 15:12 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-01-25 15:11 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-01-25 15:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-01-25 15:11 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-01-25 15:11 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-01-25 15:11 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-01-25 15:11 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-01-25 15:11 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-01-25 15:11 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-01-25 15:11 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-25 15:11 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-25 15:11 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-25 15:11 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-25 15:11 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-01-25 15:11 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-01-25 15:11 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-01-25 15:11 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-01-25 15:11 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-01-25 15:11 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-01-25 15:11 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-01-25 15:11 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-01-25 15:11 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-01-25 15:11 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-01-25 15:11 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-01-25 15:11 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-01-25 15:11 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-01-25 15:11 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-01-25 15:11 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-01-25 15:11 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-01-25 15:11 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-01-25 15:11 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-01-25 15:11 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-01-25 15:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-25 15:01 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-25 15:01 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-01-25 15:01 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-25 15:01 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-01-25 15:01 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-01-25 15:01 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-01-25 15:01 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-01-25 15:01 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-25 15:01 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-25 15:01 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-01-25 15:01 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-01-25 15:01 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-01-25 15:01 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-01-25 15:01 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-01-25 15:01 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-01-25 15:01 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-01-25 15:01 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-01-25 15:00 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-01-25 15:00 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-01-25 15:00 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-01-25 14:59 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-01-25 14:59 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-01-25 14:59 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-01-25 14:59 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-01-25 14:59 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-01-25 14:59 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-01-25 14:59 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-01-25 14:59 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-01-25 14:58 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-01-25 14:58 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-01-25 14:58 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-01-25 14:58 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-01-25 14:58 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2014-01-25 14:58 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2014-01-25 14:58 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-01-25 14:58 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2014-01-25 14:58 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-01-25 14:58 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-01-25 14:58 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-01-25 14:57 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-01-25 14:57 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-01-25 14:57 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-01-25 14:57 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-01-25 14:57 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-01-25 14:57 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-01-25 14:57 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-01-25 14:57 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-01-25 14:57 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-01-25 14:57 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-01-25 14:57 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-01-25 14:57 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-01-25 14:57 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-01-25 14:57 - 2013-08-01 10:19 - 00984512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-01-25 14:57 - 2013-08-01 10:19 - 00265152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-01-25 14:55 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-01-25 14:55 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-01-25 14:48 - 2014-02-18 21:21 - 00000000 ____D () C:\Program Files (x86)\Supporter 2014-01-25 14:47 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$ 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator 2014-01-25 14:34 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-01-25 14:24 - 2014-02-17 10:10 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk 2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager 2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-01-25 14:07 - 2012-04-26 04:04 - 00450048 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys 2014-01-25 14:07 - 2012-04-23 02:58 - 00238080 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00104448 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys 2014-01-25 14:07 - 2012-04-23 02:57 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys 2014-01-25 14:07 - 2011-12-31 02:20 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys 2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll 2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll 2014-01-25 14:07 - 2010-10-08 09:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys 2014-01-25 14:07 - 2010-09-26 11:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys 2014-01-25 14:07 - 2010-08-06 00:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys 2014-01-25 14:07 - 2010-07-27 02:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys 2014-01-25 14:07 - 2010-03-20 05:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys 2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile 2014-01-25 14:05 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\DatacardService 2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf ==================== One Month Modified Files and Folders ======= 2014-02-22 13:34 - 2014-02-17 18:23 - 00013946 _____ () C:\Users\Andreas\Desktop\FRST.txt 2014-02-22 13:33 - 2014-02-22 13:33 - 02154496 _____ (Farbar) C:\Users\Andreas\Desktop\FRST64(1).exe 2014-02-22 13:33 - 2014-02-17 18:22 - 00000000 ____D () C:\FRST 2014-02-22 13:29 - 2014-02-22 13:29 - 00027455 _____ () C:\ComboFix.txt 2014-02-22 13:29 - 2014-02-22 13:10 - 00000000 ____D () C:\ComboFix 2014-02-22 13:29 - 2014-02-19 20:44 - 00000000 ____D () C:\Qoobox 2014-02-22 13:23 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-02-22 12:46 - 2014-02-22 12:46 - 00001306 _____ () C:\Users\Andreas\Desktop\JRT.txt 2014-02-22 12:46 - 2012-04-05 17:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-22 12:46 - 2012-04-05 17:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-22 12:46 - 2012-04-05 17:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-22 12:46 - 2012-04-05 17:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-22 12:41 - 2012-12-01 12:16 - 01192768 _____ () C:\Windows\WindowsUpdate.log 2014-02-22 12:29 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-22 12:29 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-22 12:25 - 2014-02-22 12:25 - 00000000 ____D () C:\Windows\ERUNT 2014-02-22 12:24 - 2014-02-22 12:24 - 01037734 _____ (Thisisu) C:\Users\Andreas\Desktop\JRT.exe 2014-02-22 12:19 - 2014-02-16 22:21 - 00001579 _____ () C:\Windows\setupact.log 2014-02-22 12:19 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-22 12:17 - 2014-02-22 12:15 - 00000000 ____D () C:\AdwCleaner 2014-02-22 12:14 - 2014-02-22 12:14 - 01241834 _____ () C:\Users\Andreas\Desktop\adwcleaner.exe 2014-02-22 12:02 - 2014-02-16 22:21 - 00025250 _____ () C:\Windows\PFRO.log 2014-02-22 11:57 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr 2014-02-22 11:26 - 2014-02-22 11:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Malwarebytes 2014-02-22 11:26 - 2014-02-22 11:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-22 11:25 - 2014-02-22 11:25 - 00001069 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-22 11:25 - 2014-02-22 11:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-22 11:24 - 2014-02-22 11:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andreas\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-22 11:09 - 2012-12-01 14:20 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2B17A51A-F578-4FA4-B1A1-080F9A0ECE95} 2014-02-20 23:23 - 2012-12-01 17:41 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SoftGrid Client 2014-02-20 16:44 - 2014-02-19 22:07 - 05183886 ____R (Swearware) C:\Users\Andreas\Desktop\ComboFix.exe 2014-02-20 16:41 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-02-20 16:37 - 2014-02-19 20:43 - 00000000 ____D () C:\Windows\erdnt 2014-02-19 20:42 - 2014-02-19 20:42 - 05183254 ____R (Swearware) C:\Users\Andreas\Downloads\ComboFix.exe 2014-02-18 21:21 - 2014-01-25 14:48 - 00000000 ____D () C:\Program Files (x86)\Supporter 2014-02-17 20:39 - 2014-02-17 20:39 - 00122605 _____ () C:\Users\Andreas\Downloads\FRST.txt 2014-02-17 18:27 - 2014-02-17 18:26 - 00028647 _____ () C:\Users\Andreas\Desktop\Addition.txt 2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe 2014-02-17 13:22 - 2012-02-24 02:22 - 00000000 ____D () C:\Program Files\Hewlett-Packard 2014-02-17 13:13 - 2014-01-31 21:19 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job 2014-02-17 10:10 - 2014-02-02 12:01 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340} 2014-02-17 10:10 - 2014-01-31 21:19 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas 2014-02-17 10:10 - 2014-01-25 14:24 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-02-17 10:10 - 2012-12-01 17:11 - 00003546 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-02-17 10:10 - 2012-12-01 14:17 - 00003770 _____ () C:\Windows\System32\Tasks\Registration 2014-02-17 10:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-17 03:06 - 2014-01-25 17:15 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 03:01 - 2012-12-07 18:38 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 22:40 - 2014-01-31 17:38 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-02-16 22:32 - 2012-04-06 02:24 - 00654610 _____ () C:\Windows\system32\perfh007.dat 2014-02-16 22:32 - 2012-04-06 02:24 - 00130192 _____ () C:\Windows\system32\perfc007.dat 2014-02-16 22:32 - 2009-07-14 06:13 - 01500018 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-16 22:21 - 2014-01-26 00:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-16 05:10 - 2014-01-31 21:27 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-16 05:10 - 2012-12-01 14:20 - 00001421 _____ () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-16 05:09 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-16 05:05 - 2014-01-26 01:53 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole 2014-02-15 22:55 - 2012-12-01 17:24 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype 2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 ___RD () C:\MSOCache 2014-02-15 00:32 - 2014-02-15 00:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-14 23:57 - 2014-02-14 23:59 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi 2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi 2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip 2014-02-14 23:51 - 2012-04-05 17:57 - 00000000 ____D () C:\ProgramData\WinZip 2014-02-14 22:57 - 2012-04-05 18:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk 2014-02-14 22:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-02-14 22:52 - 2012-04-05 18:03 - 00000000 ____D () C:\Windows\System32\Tasks\Hewlett-Packard 2014-02-14 22:50 - 2012-04-05 17:29 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard 2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} 2014-02-14 22:46 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Hewlett-Packard 2014-02-14 22:45 - 2011-02-10 20:23 - 00000000 ____D () C:\SWSetup 2014-02-06 21:55 - 2014-02-06 01:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-06 13:16 - 2014-02-15 03:01 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-15 03:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-15 03:01 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-15 03:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-15 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-15 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-15 03:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-15 03:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-15 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-15 03:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-15 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-15 03:01 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-15 03:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-15 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-15 03:01 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-15 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-15 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-15 03:01 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-15 03:01 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-15 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-15 03:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-15 03:01 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-15 03:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-15 03:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-15 03:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-15 03:01 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-15 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-15 03:01 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-15 03:01 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-15 03:01 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-15 03:01 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-15 03:01 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-15 03:01 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-15 03:01 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-15 03:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-15 03:01 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-15 03:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com 2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia 2014-02-02 06:49 - 2014-02-02 06:48 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe 2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC 2014-02-01 18:47 - 2014-01-25 15:15 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps 2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-01 11:10 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Skype 2014-02-01 11:08 - 2014-02-01 11:07 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe 2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl 2014-01-31 21:48 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88 2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla 2014-01-31 21:27 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla 2014-01-31 21:19 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Hewlett-Packard 2014-01-31 21:16 - 2014-01-31 21:14 - 00002400 _____ () C:\RHDSetup.log 2014-01-31 21:15 - 2012-06-02 05:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-01-31 21:12 - 2014-01-31 21:15 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-01-31 21:12 - 2014-01-31 21:14 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-01-31 21:12 - 2014-01-31 21:14 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-01-31 21:12 - 2014-01-31 21:14 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-01-31 21:12 - 2014-01-31 21:14 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-01-31 21:12 - 2012-06-02 05:42 - 01706640 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-01-31 21:12 - 2012-06-02 05:42 - 00000712 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat 2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork 2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork 2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira 2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira 2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-01-31 18:50 - 2014-01-31 18:29 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe 2014-01-31 17:51 - 2012-12-01 14:19 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\hpqlog 2014-01-26 03:28 - 2007-01-02 02:25 - 00000000 ____D () C:\Windows\Panther 2014-01-26 03:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype 2014-01-26 01:06 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird 2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-25 22:54 - 2012-12-04 17:31 - 00000000 ____D () C:\ProgramData\VirtualizedApplications 2014-01-25 22:24 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-25 22:20 - 2009-07-14 05:45 - 00271096 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-01-25 20:02 - 2012-12-01 17:40 - 01526948 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-25 20:02 - 2012-12-01 17:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client 2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-25 16:17 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Hewlett-Packard 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$ 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo 2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator 2014-01-25 14:37 - 2012-06-02 06:00 - 00000000 ____D () C:\ProgramData\Norton 2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk 2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager 2014-01-25 14:08 - 2014-01-25 14:05 - 00000000 ____D () C:\ProgramData\DatacardService 2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile 2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf Some content of TEMP: ==================== C:\Users\Andreas\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-17 00:37 ==================== End Of Log ============================ |
23.02.2014, 11:20 | #14 |
/// the machine /// TB-Ausbilder | Windows 7 - Malware? - Fenster öffnen sich automatischESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
23.02.2014, 18:32 | #15 |
| Windows 7 - Malware? - Fenster öffnen sich automatisch Hi ! Also es sind keine verlinkten Wörter mehr zu sehen. Ich wollte jetzt die letzten Sachen erledigen, die du schriebst. Leider bleibt das erste Programm genau hier (s. Bild) immer hängen. Habe es schon 3x versucht. Firewall & Antivir sind deaktiviert .. LG! |
Themen zu Windows 7 - Malware? - Fenster öffnen sich automatisch |
antivir, anzeige, anzeigen, automatisch, blau, ebay, fenster öffnen sich, fenster öffnen sich automatisch, forum, google, kostenlos, laptop, malware, maus, neue, neue seite, nicht geladen, problem, screen, seite, sich automatisch, telekom, viren, w-lan, werbefenster, windows, öffnen, öffnet |