| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win8: Grün unterstrichene Wörter mit Werbelinks und Pop-UpsWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
28.02.2014, 21:24
| #1 |
 |  Win8: Grün unterstrichene Wörter mit Werbelinks und Pop-UpsCode:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 21:11 on 28/02/2014 by Dieter
Administrator - Elevation successful
========== filefind ==========
Searching for "*Re-Markable*"
C:\Program Files (x86)\Re-Markable\Re-Markable154.bin --a---- 288 bytes [23:26 17/02/2014] [23:26 17/02/2014] 9C3DCAAA6F8D4A1F168DC99409D3D101
C:\Program Files (x86)\Re-Markable\Re-Markable154.exe --a---- 181248 bytes [14:42 26/02/2014] [14:42 26/02/2014] 6B64E8AF47C932D70F82335F34EA0DD4
C:\Program Files (x86)\Re-Markable\Re-Markable154.ini --a---- 194 bytes [14:42 26/02/2014] [13:20 28/02/2014] 4DB5337321300A31D1C89D1864F2775B
C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe --a---- 93184 bytes [14:42 26/02/2014] [14:42 26/02/2014] 3B80592E227092997A71B6C4C67CCA74
C:\Windows\Prefetch\RE-MARKABLE154.EXE-D9D811C3.pf --a---- 21710 bytes [20:49 27/02/2014] [20:49 27/02/2014] 5F97DDF950C897523F290EE05F893433
C:\Windows\Prefetch\RE-MARKABLE_WD.EXE-B6527FB3.pf --a---- 20906 bytes [21:53 27/02/2014] [13:20 28/02/2014] 180D2440E9F36F72D8FA9C8B15EB5453
C:\Windows\System32\Tasks\Re-Markable_wd --a---- 2988 bytes [14:42 26/02/2014] [14:42 26/02/2014] 3A5794EE8704E112E0F1F6360BB3EAA5
C:\Windows\Tasks\Re-Markable_wd.job --a---- 406 bytes [14:42 26/02/2014] [14:43 28/02/2014] 7726D61A744D43D448C5110ED96487E0
========== folderfind ==========
Searching for "*Re-Markable*"
C:\Program Files (x86)\Re-Markable d------ [14:42 26/02/2014]
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Re-Markable154.e_ab813e695b94faa4d621a3349dd7f1411e78380_115bbf90_03d4712e d----c- [12:47 27/02/2014]
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_Re-Markable154.e_ab813e695b94faa4d621a3349dd7f1411e78380_115bbf90_03d4712e d----c- [12:47 27/02/2014]
========== regfind ==========
Searching for "Re-Markable"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug]
"StoreLocation"="C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Re-Markable154.e_ab813e695b94faa4d621a3349dd7f1411e78380_115bbf90_03d4712e"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{724139F9-BF63-4B4E-88EB-C9FDBBD3CA52}]
"Path"="\Re-Markable_wd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Re-Markable_wd]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Re-Markable]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Re-Markable]
"ImagePath"="C:\Program Files (x86)\Re-Markable\Re-Markable154.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Re-Markable]
"DisplayName"="Re-Markable"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Re-Markable]
"Description"="Re-Markable"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Re-Markable]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Re-Markable]
"ImagePath"="C:\Program Files (x86)\Re-Markable\Re-Markable154.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Re-Markable]
"DisplayName"="Re-Markable"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Re-Markable]
"Description"="Re-Markable"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Windows Error Reporting\Debug]
"StoreLocation"="C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Re-Markable154.e_ab813e695b94faa4d621a3349dd7f1411e78380_115bbf90_cab_1739a8bb"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\Windows Error Reporting\Debug]
"StoreLocation"="C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Re-Markable154.e_ab813e695b94faa4d621a3349dd7f1411e78380_115bbf90_cab_1739a8bb"
-= EOF =-
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by Dieter (administrator) on DIMARIKSPC on 28-02-2014 21:06:06
Running from C:\Users\Dieter\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\WINDOWS\system32\atiesrxx.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\AppStats\MfeASUM.exe
(McAfee, Inc.) C:\windows\system32\mfevtps.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files (x86)\Re-Markable\Re-Markable154.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
() C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Acer) C:\Program Files (x86)\Acer Remote\ArcServer.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Nero AG) c:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe
(McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe
(Spotify Ltd) C:\Users\Dieter\AppData\Roaming\Spotify\Spotify.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
(Blizzard Entertainment) D:\World of Warcraft Public Test\Wow-64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Dieter\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13425224 2013-03-05] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtPreLoad.exe [64640 2012-11-09] ()
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)
HKLM-x32\...\Run: [EaseUS EPM tray] - C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-508315818-1361950476-6160035-1001\...\Run: [Spotify Web Helper] - C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-15] (Spotify Ltd)
HKU\S-1-5-21-508315818-1361950476-6160035-1001\...\Run: [EADM] - D:\Origin\Origin.exe [3598680 2014-02-15] (Electronic Arts)
Startup: C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR HomePage: https://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-27]
CHR Extension: (Google Drive) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-30]
CHR Extension: (YouTube) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-30]
CHR Extension: (Google-Suche) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-30]
CHR Extension: (Google Wallet) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-30]
CHR Extension: (Google Mail) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-30]
==================== Services (Whitelisted) =================
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [231040 2012-11-09] (Qualcomm Atheros Commnucations)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-11-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 MfeASUM; C:\Program Files\McAfee\AppStats\MfeASUM.exe [335216 2013-12-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-12-05] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [184800 2013-12-05] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation)
R2 Re-Markable; C:\Program Files (x86)\Re-Markable\Re-Markable154.exe [181248 2014-02-26] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [94208 2013-02-14] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-11-09] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-12-05] (McAfee, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-02-11] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-12-05] (McAfee, Inc.)
R1 MfeASKM; C:\Program Files\McAfee\AppStats\MfeASKM.sys [31408 2013-12-31] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-12-05] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-12-05] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-12-05] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782616 2013-12-05] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-12-05] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R2 RtkIOAC60; C:\Windows\system32\DRIVERS\RtkIOAC60.sys [38504 2012-04-16] (Windows (R) Codename Longhorn DDK provider)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-02-11] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-28 21:05 - 2014-02-28 21:05 - 02155520 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64 (1).exe
2014-02-27 23:27 - 2014-02-27 23:27 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-27 23:26 - 2014-02-27 23:03 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-02-27 23:06 - 2014-02-27 23:28 - 00007626 _____ () C:\zoek-results.log
2014-02-27 23:03 - 2014-02-27 23:23 - 00000000 ____D () C:\zoek_backup
2014-02-27 22:57 - 2014-02-27 23:03 - 01284608 _____ () C:\Users\Dieter\Downloads\zoek.exe
2014-02-27 22:48 - 2014-02-27 22:49 - 01244192 _____ () C:\Users\Dieter\Downloads\adwcleaner (3).exe
2014-02-27 22:47 - 2014-02-27 22:55 - 00003133 _____ () C:\Users\Dieter\Desktop\JRT.txt
2014-02-27 22:32 - 2014-02-27 22:33 - 01037734 _____ (Thisisu) C:\Users\Dieter\Downloads\JRT (2).exe
2014-02-27 22:26 - 2014-02-27 22:26 - 01244192 _____ () C:\Users\Dieter\Downloads\adwcleaner (2).exe
2014-02-27 22:23 - 2014-02-27 22:23 - 01037734 _____ (Thisisu) C:\Users\Dieter\Downloads\JRT (1).exe
2014-02-27 22:22 - 2014-02-27 22:22 - 01244192 _____ () C:\Users\Dieter\Downloads\adwcleaner (1).exe
2014-02-27 19:34 - 2014-02-27 19:34 - 00035985 _____ () C:\Users\Dieter\Downloads\Shortcut.txt
2014-02-27 19:32 - 2014-02-27 19:34 - 00038805 _____ () C:\Users\Dieter\Downloads\Addition.txt
2014-02-27 19:29 - 2014-02-28 21:07 - 00015432 _____ () C:\Users\Dieter\Downloads\FRST.txt
2014-02-27 19:29 - 2014-02-28 21:06 - 00000000 ____D () C:\FRST
2014-02-27 19:29 - 2014-02-27 19:29 - 02155520 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64.exe
2014-02-27 19:23 - 2014-02-27 19:23 - 00987425 _____ () C:\Users\Dieter\Downloads\SecurityCheck (1).exe
2014-02-27 13:37 - 2014-02-27 13:37 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu (3).exe
2014-02-27 00:51 - 2014-02-27 00:51 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu (2).exe
2014-02-27 00:46 - 2014-02-27 00:46 - 00987425 _____ () C:\Users\Dieter\Downloads\SecurityCheck.exe
2014-02-26 23:57 - 2014-02-26 23:58 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu (1).exe
2014-02-26 20:35 - 2014-02-26 20:36 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu.exe
2014-02-26 20:17 - 2014-02-26 20:17 - 01037734 _____ (Thisisu) C:\Users\Dieter\Downloads\JRT.exe
2014-02-26 20:17 - 2014-02-26 20:17 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-26 20:08 - 2014-02-27 22:51 - 00000000 ____D () C:\AdwCleaner
2014-02-26 20:08 - 2014-02-26 20:08 - 01241834 _____ () C:\Users\Dieter\Downloads\adwcleaner.exe
2014-02-26 20:03 - 2014-02-27 22:55 - 00000246 _____ () C:\Users\Dieter\Desktop\o.txt
2014-02-26 16:56 - 2014-02-26 16:56 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-26 16:56 - 2014-02-26 16:56 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Malwarebytes
2014-02-26 16:56 - 2014-02-26 16:56 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-26 16:56 - 2014-02-26 16:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-26 16:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-02-26 16:55 - 2014-02-26 16:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dieter\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-26 16:03 - 2014-02-26 16:03 - 00231337 _____ () C:\Users\Dieter\Downloads\Warframe Platinum Hack - HyperHacks.rar
2014-02-26 15:42 - 2014-02-28 15:43 - 00000406 _____ () C:\WINDOWS\Tasks\Re-Markable_wd.job
2014-02-26 15:42 - 2014-02-26 15:42 - 00002988 _____ () C:\WINDOWS\System32\Tasks\Re-Markable_wd
2014-02-26 15:42 - 2014-02-26 15:42 - 00000000 ____D () C:\Program Files (x86)\Re-Markable
2014-02-26 15:27 - 2014-02-26 15:28 - 03358087 _____ () C:\Users\Dieter\Downloads\Warframe Free Platinum.rar
2014-02-24 12:39 - 2014-02-24 12:39 - 00001327 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-02-24 12:37 - 2014-02-24 12:37 - 34888568 _____ (Riot Games) C:\Users\Dieter\Downloads\LeagueofLegends_EUW_Installer_06_12_13 (2).exe
2014-02-24 12:36 - 2014-02-24 12:36 - 34888568 _____ (Riot Games) C:\Users\Dieter\Downloads\LeagueofLegends_EUW_Installer_06_12_13 (1).exe
2014-02-18 22:16 - 2014-02-18 22:16 - 00109479 _____ () C:\Users\Dieter\Downloads\ReforgeLite-v1.37.zip
2014-02-16 15:47 - 2014-02-26 20:02 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Deployment
2014-02-16 01:36 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-02-16 01:36 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-02-16 01:36 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-02-16 01:36 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-02-16 01:35 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-02-16 01:35 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-02-16 01:35 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-02-16 01:35 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-02-16 01:35 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-02-16 01:35 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-02-16 01:35 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-02-16 01:35 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-02-16 01:35 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-02-16 01:35 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-02-16 01:35 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-02-16 01:35 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-02-16 01:35 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-02-16 01:35 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-02-16 01:35 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-02-16 01:35 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-02-16 01:35 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-02-16 01:35 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-02-16 01:35 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-02-16 01:35 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-02-16 01:35 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-02-16 01:35 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-02-16 01:35 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-02-16 01:35 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-02-16 01:35 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-02-16 01:35 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-02-16 01:35 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-02-16 01:35 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-02-16 01:35 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-02-16 01:35 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-02-16 01:35 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-02-16 01:35 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-02-16 01:35 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-02-16 01:35 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-02-16 01:35 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-02-16 01:35 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-02-16 01:35 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-02-16 01:35 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-02-16 01:35 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-02-16 01:35 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-02-16 01:35 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-02-16 01:35 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-02-16 01:35 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-02-16 01:35 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-02-16 01:35 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-02-16 01:35 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-02-16 01:35 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-02-16 01:35 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-02-16 01:35 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-02-16 01:35 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-02-16 01:35 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-02-15 23:44 - 2014-02-15 23:44 - 00000000 ____D () C:\Users\Dieter\Documents\Respawn
2014-02-14 20:06 - 2014-02-14 20:06 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-02-13 13:22 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-13 13:22 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-13 13:22 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-13 13:22 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-13 13:22 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-13 13:22 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-13 13:22 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-13 13:22 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-13 13:22 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-13 13:22 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-13 13:22 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-13 13:22 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-13 13:22 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-13 13:22 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-13 13:22 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-13 13:22 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-13 13:22 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-13 13:22 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-13 13:22 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-13 13:22 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-13 13:22 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-13 13:22 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-13 13:22 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-13 13:22 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-13 13:22 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-13 13:22 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-13 13:22 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-13 13:22 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-13 13:22 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-13 13:22 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-13 13:22 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-13 13:22 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-13 13:22 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-13 13:22 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-13 13:22 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-13 13:22 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-13 13:22 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-13 13:22 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-02-13 13:22 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-02-13 13:22 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-02-13 13:22 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-02-13 13:22 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-02-13 13:22 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-02-13 13:22 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-02-13 13:22 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-02-13 13:21 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-02-13 13:21 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-02-13 13:21 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-02-13 13:21 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-02-13 13:20 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-02-13 13:20 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-02-13 13:20 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-02-13 13:20 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-02-13 13:20 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-02-13 13:20 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-02-13 13:20 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-02-13 13:20 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-02-13 13:20 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-02-13 13:20 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-02-13 13:20 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-02-13 13:20 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-02-13 13:20 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-02-13 13:20 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-02-13 13:20 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-02-13 13:20 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-02-13 13:20 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-02-13 13:20 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-02-13 13:20 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-02-13 13:20 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-02-13 13:20 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-02-13 13:20 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-02-12 13:00 - 2014-02-12 13:00 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Nero
2014-02-12 13:00 - 2014-02-12 13:00 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Nero
2014-02-12 12:59 - 2014-02-12 12:59 - 00002929 _____ () C:\Users\Public\Desktop\Nero 2014.lnk
2014-02-12 12:51 - 2014-02-12 12:51 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-12 12:32 - 2014-02-12 12:48 - 288658136 _____ (Nero AG) C:\Users\Dieter\Downloads\Nero2014-15.0.07700_trial.exe
2014-02-11 18:01 - 2014-02-28 21:06 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf274af91a566a.job
2014-02-11 18:01 - 2014-02-11 18:01 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cf274af91a566a
2014-02-11 15:44 - 2014-02-28 14:31 - 00000000 __RDO () C:\Users\Dieter\SkyDrive
2014-02-11 15:42 - 2014-02-11 15:43 - 00000000 ____D () C:\Users\Dieter\AppData\Local\PackageStaging
2014-02-11 15:41 - 2014-02-26 15:42 - 00001450 _____ () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-11 15:41 - 2014-02-11 15:41 - 00000020 ___SH () C:\Users\Dieter\ntuser.ini
2014-02-11 14:36 - 2014-02-28 19:27 - 01128052 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-11 14:35 - 2014-02-11 14:35 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-02-11 14:11 - 2014-02-11 14:11 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-02-11 14:10 - 2014-02-27 13:32 - 00000000 ____D () C:\Users\Dieter
2014-02-11 14:10 - 2014-02-11 14:36 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-02-11 14:10 - 2014-02-11 14:36 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-02-11 14:10 - 2014-02-11 14:11 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Vorlagen
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Startmenü
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Netzwerkumgebung
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Lokale Einstellungen
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Eigene Dateien
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Druckumgebung
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Documents\Eigene Musik
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Documents\Eigene Bilder
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\AppData\Local\Verlauf
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\AppData\Local\Anwendungsdaten
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Anwendungsdaten
2014-02-11 14:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 14:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-02-11 14:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\Program Files\Realtek
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\Program Files\AMD
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\AMD
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-02-11 14:03 - 2014-02-12 00:00 - 00000000 ___DC () C:\WINDOWS\Panther
2014-02-11 14:03 - 2014-02-11 14:03 - 00000000 __SHD () C:\Recovery
2014-02-11 14:01 - 2014-02-11 14:01 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-02-11 14:01 - 2014-02-11 14:01 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-02-11 14:01 - 2014-02-11 14:01 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-02-11 13:59 - 2014-02-11 13:59 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-02-11 13:59 - 2014-02-11 13:59 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-02-11 13:59 - 2014-02-11 13:59 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-02-11 13:57 - 2014-02-11 13:57 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files\MSBuild
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-02-11 13:54 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-02-11 13:54 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-11 13:54 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-02-11 13:54 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-02-11 13:54 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-11 13:54 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-02-11 13:17 - 2014-02-11 14:36 - 00006602 _____ () C:\WINDOWS\comsetup.log
2014-02-09 17:37 - 2014-02-09 17:37 - 00000979 _____ () C:\Users\Public\Desktop\WinRAR.lnk
2014-02-09 17:37 - 2014-02-09 17:37 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\WinRAR
2014-02-09 17:36 - 2014-02-09 17:36 - 02083288 _____ () C:\Users\Dieter\Downloads\winrar-x64-501d.exe
2014-02-09 17:36 - 2014-02-09 17:36 - 01498298 _____ () C:\Users\Dieter\Downloads\Warframe Platinum Hack v1.4 (1).rar
2014-02-09 17:36 - 2014-02-09 17:36 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-09 17:35 - 2014-02-09 17:35 - 01498298 _____ () C:\Users\Dieter\Downloads\Warframe Platinum Hack v1.4.rar
2014-02-09 17:08 - 2014-02-28 19:24 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Warframe
2014-02-09 17:08 - 2014-02-11 14:11 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warframe
2014-02-09 17:08 - 2014-02-09 17:08 - 00002309 _____ () C:\Users\Dieter\Desktop\Warframe.lnk
2014-02-09 17:07 - 2014-02-09 17:07 - 00311296 _____ () C:\Users\Dieter\Downloads\Warframe.msi
2014-02-04 15:20 - 2014-02-04 15:20 - 34888568 _____ (Riot Games) C:\Users\Dieter\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-02-03 18:25 - 2014-02-03 18:25 - 00000000 ____D () C:\Users\Dieter\PicStream
2014-02-03 18:24 - 2014-02-03 18:24 - 00000000 ____D () C:\Users\Public\OEM
2014-02-03 18:24 - 2014-02-03 18:24 - 00000000 ____D () C:\Users\Dieter\Documents\clear.fi
2014-01-31 22:18 - 2014-01-31 22:18 - 00000000 ____D () C:\Users\Dieter\Documents\BioWare
2014-01-31 22:05 - 2014-01-31 22:05 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-31 16:12 - 2014-01-31 16:14 - 00000000 ____D () C:\Users\Dieter\Documents\Syndicate
==================== One Month Modified Files and Folders =======
2014-02-28 21:07 - 2014-02-27 19:29 - 00015432 _____ () C:\Users\Dieter\Downloads\FRST.txt
2014-02-28 21:06 - 2014-02-27 19:29 - 00000000 ____D () C:\FRST
2014-02-28 21:06 - 2014-02-11 18:01 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf274af91a566a.job
2014-02-28 21:05 - 2014-02-28 21:05 - 02155520 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64 (1).exe
2014-02-28 21:02 - 2013-12-30 14:05 - 00000000 ____D () C:\Users\Dieter\AppData\Local\PMB Files
2014-02-28 21:02 - 2013-12-30 14:05 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-28 21:02 - 2013-12-30 13:56 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Battle.net
2014-02-28 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-28 19:42 - 2013-12-30 18:24 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Spotify
2014-02-28 19:27 - 2014-02-11 14:36 - 01128052 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-28 19:24 - 2014-02-09 17:08 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Warframe
2014-02-28 18:11 - 2013-12-30 13:49 - 00003590 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-508315818-1361950476-6160035-1001
2014-02-28 18:06 - 2013-12-30 13:52 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 18:06 - 2013-12-30 13:51 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 16:38 - 2013-04-03 07:32 - 00001864 _____ () C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk
2014-02-28 15:43 - 2014-02-26 15:42 - 00000406 _____ () C:\WINDOWS\Tasks\Re-Markable_wd.job
2014-02-28 14:31 - 2014-02-11 15:44 - 00000000 __RDO () C:\Users\Dieter\SkyDrive
2014-02-28 14:26 - 2014-01-06 13:21 - 00005148 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for DIMARIKSPC-Dieter DimariksPC
2014-02-28 14:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-28 14:24 - 2013-11-14 08:27 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-28 14:24 - 2013-11-14 08:11 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-28 14:24 - 2013-11-14 08:11 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-28 14:19 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-28 14:19 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-27 23:28 - 2014-02-27 23:06 - 00007626 _____ () C:\zoek-results.log
2014-02-27 23:27 - 2014-02-27 23:27 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-27 23:27 - 2013-11-13 23:18 - 00014198 _____ () C:\WINDOWS\PFRO.log
2014-02-27 23:23 - 2014-02-27 23:03 - 00000000 ____D () C:\zoek_backup
2014-02-27 23:03 - 2014-02-27 23:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-02-27 23:03 - 2014-02-27 22:57 - 01284608 _____ () C:\Users\Dieter\Downloads\zoek.exe
2014-02-27 22:55 - 2014-02-27 22:47 - 00003133 _____ () C:\Users\Dieter\Desktop\JRT.txt
2014-02-27 22:55 - 2014-02-26 20:03 - 00000246 _____ () C:\Users\Dieter\Desktop\o.txt
2014-02-27 22:51 - 2014-02-26 20:08 - 00000000 ____D () C:\AdwCleaner
2014-02-27 22:49 - 2014-02-27 22:48 - 01244192 _____ () C:\Users\Dieter\Downloads\adwcleaner (3).exe
2014-02-27 22:33 - 2014-02-27 22:32 - 01037734 _____ (Thisisu) C:\Users\Dieter\Downloads\JRT (2).exe
2014-02-27 22:26 - 2014-02-27 22:26 - 01244192 _____ () C:\Users\Dieter\Downloads\adwcleaner (2).exe
2014-02-27 22:23 - 2014-02-27 22:23 - 01037734 _____ (Thisisu) C:\Users\Dieter\Downloads\JRT (1).exe
2014-02-27 22:22 - 2014-02-27 22:22 - 01244192 _____ () C:\Users\Dieter\Downloads\adwcleaner (1).exe
2014-02-27 21:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-27 19:34 - 2014-02-27 19:34 - 00035985 _____ () C:\Users\Dieter\Downloads\Shortcut.txt
2014-02-27 19:34 - 2014-02-27 19:32 - 00038805 _____ () C:\Users\Dieter\Downloads\Addition.txt
2014-02-27 19:29 - 2014-02-27 19:29 - 02155520 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64.exe
2014-02-27 19:23 - 2014-02-27 19:23 - 00987425 _____ () C:\Users\Dieter\Downloads\SecurityCheck (1).exe
2014-02-27 17:17 - 2014-01-01 19:31 - 00000000 ____D () C:\ProgramData\Origin
2014-02-27 13:37 - 2014-02-27 13:37 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu (3).exe
2014-02-27 13:32 - 2014-02-11 14:10 - 00000000 ____D () C:\Users\Dieter
2014-02-27 00:51 - 2014-02-27 00:51 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu (2).exe
2014-02-27 00:46 - 2014-02-27 00:46 - 00987425 _____ () C:\Users\Dieter\Downloads\SecurityCheck.exe
2014-02-26 23:58 - 2014-02-26 23:57 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu (1).exe
2014-02-26 20:36 - 2014-02-26 20:35 - 02347384 _____ (ESET) C:\Users\Dieter\Downloads\esetsmartinstaller_enu.exe
2014-02-26 20:17 - 2014-02-26 20:17 - 01037734 _____ (Thisisu) C:\Users\Dieter\Downloads\JRT.exe
2014-02-26 20:17 - 2014-02-26 20:17 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-26 20:08 - 2014-02-26 20:08 - 01241834 _____ () C:\Users\Dieter\Downloads\adwcleaner.exe
2014-02-26 20:02 - 2014-02-16 15:47 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Deployment
2014-02-26 16:56 - 2014-02-26 16:56 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-26 16:56 - 2014-02-26 16:56 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Malwarebytes
2014-02-26 16:56 - 2014-02-26 16:56 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-26 16:56 - 2014-02-26 16:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-26 16:55 - 2014-02-26 16:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dieter\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-26 16:03 - 2014-02-26 16:03 - 00231337 _____ () C:\Users\Dieter\Downloads\Warframe Platinum Hack - HyperHacks.rar
2014-02-26 15:43 - 2013-12-30 13:41 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-26 15:42 - 2014-02-26 15:42 - 00002988 _____ () C:\WINDOWS\System32\Tasks\Re-Markable_wd
2014-02-26 15:42 - 2014-02-26 15:42 - 00000000 ____D () C:\Program Files (x86)\Re-Markable
2014-02-26 15:42 - 2014-02-11 15:41 - 00001450 _____ () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-26 15:28 - 2014-02-26 15:27 - 03358087 _____ () C:\Users\Dieter\Downloads\Warframe Free Platinum.rar
2014-02-25 22:53 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-25 15:27 - 2013-12-30 18:24 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Spotify
2014-02-24 12:39 - 2014-02-24 12:39 - 00001327 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-02-24 12:37 - 2014-02-24 12:37 - 34888568 _____ (Riot Games) C:\Users\Dieter\Downloads\LeagueofLegends_EUW_Installer_06_12_13 (2).exe
2014-02-24 12:36 - 2014-02-24 12:36 - 34888568 _____ (Riot Games) C:\Users\Dieter\Downloads\LeagueofLegends_EUW_Installer_06_12_13 (1).exe
2014-02-21 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-02-19 21:19 - 2013-12-30 13:41 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-19 21:18 - 2013-08-22 15:44 - 00473704 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-19 21:16 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-19 21:16 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-02-19 21:16 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-02-18 22:16 - 2014-02-18 22:16 - 00109479 _____ () C:\Users\Dieter\Downloads\ReforgeLite-v1.37.zip
2014-02-18 01:49 - 2013-12-31 00:50 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-18 01:46 - 2013-12-31 00:50 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-17 22:00 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-02-17 22:00 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-16 15:44 - 2013-08-22 15:46 - 00288140 _____ () C:\WINDOWS\setupact.log
2014-02-15 23:44 - 2014-02-15 23:44 - 00000000 ____D () C:\Users\Dieter\Documents\Respawn
2014-02-15 23:27 - 2014-01-01 03:23 - 00267667 _____ () C:\WINDOWS\DirectX.log
2014-02-14 23:12 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-02-14 23:12 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-02-14 23:12 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-02-14 20:06 - 2014-02-14 20:06 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-02-14 20:06 - 2013-12-30 13:40 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Packages
2014-02-13 17:54 - 2013-04-03 07:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-12 13:00 - 2014-02-12 13:00 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Nero
2014-02-12 13:00 - 2014-02-12 13:00 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Nero
2014-02-12 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Cursors
2014-02-12 13:00 - 2013-04-03 07:33 - 00000000 ____D () C:\ProgramData\Nero
2014-02-12 12:59 - 2014-02-12 12:59 - 00002929 _____ () C:\Users\Public\Desktop\Nero 2014.lnk
2014-02-12 12:58 - 2013-04-03 07:33 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-02-12 12:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-02-12 12:53 - 2013-04-03 07:30 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-02-12 12:51 - 2014-02-12 12:51 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-12 12:48 - 2014-02-12 12:32 - 288658136 _____ (Nero AG) C:\Users\Dieter\Downloads\Nero2014-15.0.07700_trial.exe
2014-02-12 12:44 - 2014-01-02 17:54 - 00308224 ___SH () C:\Users\Dieter\Desktop\Thumbs.db
2014-02-12 00:00 - 2014-02-11 14:03 - 00000000 ___DC () C:\WINDOWS\Panther
2014-02-11 20:32 - 2014-01-16 15:51 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\TS3Client
2014-02-11 18:01 - 2014-02-11 18:01 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cf274af91a566a
2014-02-11 18:01 - 2013-12-30 13:51 - 00003868 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 15:44 - 2014-01-02 16:48 - 00000000 ___RD () C:\Users\Dieter\SkyDrive.old
2014-02-11 15:43 - 2014-02-11 15:42 - 00000000 ____D () C:\Users\Dieter\AppData\Local\PackageStaging
2014-02-11 15:41 - 2014-02-11 15:41 - 00000020 ___SH () C:\Users\Dieter\ntuser.ini
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-11 14:36 - 2014-02-11 14:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-11 14:36 - 2014-02-11 14:10 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-02-11 14:36 - 2014-02-11 14:10 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-02-11 14:36 - 2014-02-11 13:17 - 00006602 _____ () C:\WINDOWS\comsetup.log
2014-02-11 14:36 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-02-11 14:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-11 14:36 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-02-11 14:35 - 2014-02-11 14:35 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-02-11 14:23 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-02-11 14:23 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-11 14:19 - 2014-01-16 15:51 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-02-11 14:19 - 2014-01-04 13:45 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
2014-02-11 14:19 - 2013-12-30 18:49 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-02-11 14:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-02-11 14:19 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-02-11 14:18 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-02-11 14:18 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-02-11 14:17 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-02-11 14:17 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-02-11 14:17 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-02-11 14:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-02-11 14:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-02-11 14:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-02-11 14:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-02-11 14:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-02-11 14:17 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-02-11 14:17 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-02-11 14:16 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-02-11 14:16 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-02-11 14:16 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-02-11 14:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-02-11 14:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-02-11 14:16 - 2013-04-03 05:57 - 00000000 ____D () C:\ProgramData\PRICache
2014-02-11 14:11 - 2014-02-11 14:11 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-02-11 14:11 - 2014-02-11 14:10 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-02-11 14:11 - 2014-02-09 17:08 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warframe
2014-02-11 14:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Vorlagen
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Startmenü
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Netzwerkumgebung
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Lokale Einstellungen
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Eigene Dateien
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Druckumgebung
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Documents\Eigene Musik
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Documents\Eigene Bilder
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\AppData\Local\Verlauf
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\AppData\Local\Anwendungsdaten
2014-02-11 14:10 - 2014-02-11 14:10 - 00000000 _SHDL () C:\Users\Dieter\Anwendungsdaten
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\Program Files\Realtek
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\Program Files\AMD
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 ____D () C:\AMD
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin
2014-02-11 14:05 - 2014-02-11 14:05 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-02-11 14:04 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-02-11 14:03 - 2014-02-11 14:03 - 00000000 __SHD () C:\Recovery
2014-02-11 14:02 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-02-11 14:01 - 2014-02-11 14:01 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-02-11 14:01 - 2014-02-11 14:01 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-02-11 14:01 - 2014-02-11 14:01 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-02-11 14:01 - 2014-02-11 14:01 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-02-11 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-02-11 13:59 - 2014-02-11 13:59 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-02-11 13:59 - 2014-02-11 13:59 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-02-11 13:59 - 2014-02-11 13:59 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-02-11 13:59 - 2014-02-11 13:59 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-02-11 13:59 - 2014-02-11 13:59 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-02-11 13:59 - 2014-02-11 13:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-02-11 13:59 - 2014-02-11 13:59 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-02-11 13:57 - 2014-02-11 13:57 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files\MSBuild
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-02-11 13:55 - 2014-02-11 13:55 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-02-11 13:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-02-11 13:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-02-11 13:48 - 2013-12-03 22:27 - 01788706 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-02-11 13:06 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-02-10 17:51 - 2014-01-01 19:34 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Origin
2014-02-09 17:37 - 2014-02-09 17:37 - 00000979 _____ () C:\Users\Public\Desktop\WinRAR.lnk
2014-02-09 17:37 - 2014-02-09 17:37 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\WinRAR
2014-02-09 17:36 - 2014-02-09 17:36 - 02083288 _____ () C:\Users\Dieter\Downloads\winrar-x64-501d.exe
2014-02-09 17:36 - 2014-02-09 17:36 - 01498298 _____ () C:\Users\Dieter\Downloads\Warframe Platinum Hack v1.4 (1).rar
2014-02-09 17:36 - 2014-02-09 17:36 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-09 17:35 - 2014-02-09 17:35 - 01498298 _____ () C:\Users\Dieter\Downloads\Warframe Platinum Hack v1.4.rar
2014-02-09 17:08 - 2014-02-09 17:08 - 00002309 _____ () C:\Users\Dieter\Desktop\Warframe.lnk
2014-02-09 17:07 - 2014-02-09 17:07 - 00311296 _____ () C:\Users\Dieter\Downloads\Warframe.msi
2014-02-09 00:55 - 2014-01-16 20:31 - 00000000 ____D () C:\Users\Dieter\AppData\Local\CrashDumps
2014-02-06 14:07 - 2014-01-06 13:21 - 00000000 ____D () C:\Users\Dieter\AppData\Local\clear.fi
2014-02-06 13:16 - 2014-02-13 13:22 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 13:22 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 13:22 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 13:22 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 13:22 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 13:22 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 13:22 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 13:22 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-06 11:49 - 2014-02-13 13:22 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 13:22 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 13:22 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 13:22 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 13:22 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 13:22 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 13:22 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 13:22 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 13:22 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 13:22 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 13:22 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 13:22 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 13:22 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 13:22 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 13:22 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-06 10:47 - 2014-02-13 13:22 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 13:22 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 13:22 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 13:22 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 13:22 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 13:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 13:22 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 13:22 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 13:22 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 13:22 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 13:22 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 13:22 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 13:22 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 13:22 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-04 15:20 - 2014-02-04 15:20 - 34888568 _____ (Riot Games) C:\Users\Dieter\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-02-03 18:25 - 2014-02-03 18:25 - 00000000 ____D () C:\Users\Dieter\PicStream
2014-02-03 18:24 - 2014-02-03 18:24 - 00000000 ____D () C:\Users\Public\OEM
2014-02-03 18:24 - 2014-02-03 18:24 - 00000000 ____D () C:\Users\Dieter\Documents\clear.fi
2014-01-31 22:18 - 2014-01-31 22:18 - 00000000 ____D () C:\Users\Dieter\Documents\BioWare
2014-01-31 22:05 - 2014-01-31 22:05 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-31 16:14 - 2014-01-31 16:12 - 00000000 ____D () C:\Users\Dieter\Documents\Syndicate
2014-01-31 16:12 - 2014-01-01 19:31 - 00000000 ____D () C:\ProgramData\Electronic Arts
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-27 23:44
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2014 02
Ran by Dieter at 2014-02-28 21:08:54
Running from C:\Users\Dieter\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installed Programs ======================
clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
Acer Remote (HKLM-x32\...\Acer Remote1.0) (Version: 1.0 - Acer Inc.)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2021 - Acer Incorporated)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{6F33B065-4478-44EE-8E5F-A40BBD61619F}) (Version: 20.2.45.72438 - Alcor Micro Corp.)
Alcor Micro USB Card Reader Driver (x32 Version: 20.2.45.72438 - Alcor Micro Corp.) Hidden
AMD Accelerated Video Transcoding (Version: 12.10.100.30322 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{E3AB2F4D-B540-437B-4E4F-3A3C344C3B2A}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Catalyst Control Center InstallProxy (x32 Version: 2013.0322.413.5642 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2012 - Acer Incorporated)
Crysis® 2 (HKLM-x32\...\{6033673D-2530-4587-8AD0-EB059FC263F9}) (Version: 1.0.0.0 - Electronic Arts)
Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3318_45364 - CyberLink Corp.)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3318_45364 - CyberLink Corp.) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Diablo III Beta (HKLM-x32\...\Diablo III Beta) (Version: - Blizzard Entertainment)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hotkey Utility (HKLM-x32\...\{A6DC88AD-501A-44BC-884D-57435F972E2C}) (Version: 3.00.3005 - Acer Incorporated)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Acer Incorporated)
Injustice: Gods Among Us Ultimate Edition (HKLM-x32\...\Steam App 242700) (Version: - NetherRealm Studios)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Acer Incorporated)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
McAfee Internet Security Suite (HKLM-x32\...\MSC) (Version: 12.8.908 - McAfee, Inc.)
Microsoft Office 365 Home Premium - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4551.1512 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.1.0 - Electronic Arts)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\Steam App 234670) (Version: - CyberConnect 2)
Nero 2014 (HKLM-x32\...\{0128492C-AB60-43BE-9D9A-8CA622CAF06E}) (Version: 15.0.07700 - Nero AG)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (x32 Version: 12.5.5000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.10000 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden
Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden
Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden
Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden
Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 15.1.0030 - Nero AG)
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden
Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden
Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden
Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden
Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden
Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.51r2 - Symantec Corporation)
Norton Online Backup ARA (x32 Version: 4.1.0.14 - Symantec Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{9530AE42-DAE1-4619-9594-B23487285D17}) (Version: 9.11.1107 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
Origin (HKLM-x32\...\Origin) (Version: 9.3.11.2762 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.214 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.31 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.13.314.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6859 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Syndicate™ (HKLM-x32\...\{FA602928-EB59-449c-B9F7-1FBE1291B63D}) (Version: 1.0.0.1 - Electronic Arts)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
Titanfall™-Beta (HKLM-x32\...\{E933BD1A-9B05-42A3-A1CF-3DA81C72E454}) (Version: 1.0.0.0 - Electronic Arts)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Warframe (HKLM-x32\...\{2937C578-0CDD-4936-A869-912FD029436E}) (Version: 1.0.0 - Digital Extremes)
Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Public Test (HKLM-x32\...\World of Warcraft Public Test) (Version: - Blizzard Entertainment)
==================== Restore Points =========================
21-02-2014 16:56:40 Windows Update
24-02-2014 11:38:11 Installed League of Legends
26-02-2014 15:09:42 DirectX wurde installiert
27-02-2014 22:06:41 zoek.exe restore point
==================== Hosts content: ==========================
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1D845013-79A9-4A66-8835-5E213749D171} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-30] (Google Inc.)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2F947BC4-4262-4BBF-A78F-003E94166000} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {31AD0BF1-51BA-4814-9B35-9549512E7C44} - System32\Tasks\Microsoft Office 15 Sync Maintenance for DIMARIKSPC-Dieter DimariksPC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-01-15] (Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {5577AE30-C05F-4D5A-9CF7-30335785268B} - System32\Tasks\Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [2013-02-27] (Acer Incorporated)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {724139F9-BF63-4B4E-88EB-C9FDBBD3CA52} - System32\Tasks\Re-Markable_wd => C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe [2014-02-26] ()
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7CDF7879-6A15-47D0-930A-1680DEA12EAA} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-20] (CyberLink)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {87E3AA34-B24D-4E30-BA10-72C94BF823B1} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-01-15] (Microsoft Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9043B957-D19D-48E3-B811-CEF1F6D6B32D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-01-18] (Acer Incorporated)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B7EEED8A-D272-4889-A952-91BDD9C395A0} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation)
Task: {BF7D2CCA-253F-4ECB-8C8A-A996D25CDD30} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D6E2EA7A-08BD-4BB6-82CD-4FEEDC7BD57A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-02-18] (Microsoft Corporation)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E1802522-63D9-4463-95FF-FF69BA331E25} - System32\Tasks\GoogleUpdateTaskMachineUA1cf274af91a566a => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-30] (Google Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FB46942C-D91E-4919-80C5-158CD0AE790F} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-02-22] ()
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf274af91a566a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Re-Markable_wd.job => C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe
==================== Loaded Modules (whitelisted) =============
2014-01-02 16:43 - 2013-08-23 14:45 - 00386216 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll
2014-01-02 16:43 - 2013-10-31 09:08 - 00520872 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2r64.dll
2014-01-02 16:43 - 2013-10-31 09:07 - 00618152 _____ () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll
2014-02-26 15:42 - 2014-02-26 15:42 - 00181248 _____ () C:\Program Files (x86)\Re-Markable\Re-Markable154.exe
2014-02-26 15:42 - 2014-02-26 15:42 - 00093184 _____ () C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe
2012-11-09 16:06 - 2012-11-09 16:06 - 00384128 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ContactsApi.dll
2012-11-09 16:01 - 2012-11-09 16:01 - 00020992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2012-11-09 16:04 - 2012-11-09 16:04 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2012-11-09 16:06 - 2012-11-09 16:06 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-01-02 23:06 - 2014-01-15 14:48 - 00603648 _____ () C:\Users\Dieter\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2013-02-06 10:06 - 2013-02-06 07:14 - 00055368 _____ () C:\Program Files (x86)\Acer Remote\plugins\general.dll
2013-02-06 10:06 - 2013-02-06 07:14 - 00041032 _____ () C:\Program Files (x86)\Acer Remote\plugins\ITunesBase.dll
2013-02-06 10:06 - 2013-02-06 07:14 - 00040520 _____ () C:\Program Files (x86)\Acer Remote\plugins\WinEight.dll
2013-02-06 10:06 - 2013-02-06 07:14 - 00111176 _____ () C:\Program Files (x86)\Acer Remote\plugins\WMPBase.dll
2013-02-06 10:06 - 2013-02-06 07:14 - 00041032 _____ () C:\Program Files (x86)\Acer Remote\plugins\YTBBase.dll
2014-01-02 23:06 - 2014-01-15 14:48 - 36967424 _____ () C:\Users\Dieter\AppData\Roaming\Spotify\Data\libcef.dll
2014-01-02 23:06 - 2014-01-15 14:48 - 00887808 _____ () C:\Users\Dieter\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-01-02 23:06 - 2014-01-15 14:48 - 00109568 _____ () C:\Users\Dieter\AppData\Roaming\Spotify\Data\libegl.dll
2014-02-21 18:09 - 2014-02-20 02:02 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2013-12-03 23:08 - 2013-02-20 22:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-02-21 18:09 - 2014-02-20 02:02 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libglesv2.dll
2014-02-21 18:09 - 2014-02-20 02:02 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libegl.dll
2014-02-21 18:09 - 2014-02-20 02:03 - 04060488 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-21 18:09 - 2014-02-20 02:03 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2014-02-21 18:09 - 2014-02-20 02:02 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-21 18:09 - 2014-02-20 02:03 - 13632840 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Dieter\SkyDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/28/2014 02:31:23 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073422302
Error: (02/27/2014 11:56:45 PM) (Source: Application Hang) (User: )
Description: Programm Launcher.exe, Version 2014.2.4.20 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1424
Startzeit: 01cf340edff85133
Endzeit: 0
Anwendungspfad: C:\Users\Dieter\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe
Berichts-ID: 6c78b005-a002-11e3-be85-a4db302db3f9
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (02/27/2014 11:47:59 PM) (Source: Application Hang) (User: )
Description: Programm Launcher.exe, Version 2014.2.4.20 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2664
Startzeit: 01cf340cd4812d3a
Endzeit: 0
Anwendungspfad: C:\Users\Dieter\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe
Berichts-ID: 33407a17-a001-11e3-be84-a4db302db3f9
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (02/27/2014 09:24:12 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.
Error: (02/27/2014 08:48:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: DIMARIKSPC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (02/27/2014 08:48:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: DIMARIKSPC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (02/27/2014 02:27:35 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/27/2014 01:44:12 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073422302
Error: (02/27/2014 01:37:52 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.
Error: (02/27/2014 01:37:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.
System errors:
=============
Error: (02/28/2014 05:18:51 PM) (Source: DCOM) (User: DIMARIKSPC)
Description: c:\PROGRA~1\mcafee\msc\mcmscsub.dll -Embedding193{9B3BEB4E-1C5E-4A5F-BB36-2F6587DD34E2}
Error: (02/28/2014 02:19:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243
Error: (02/28/2014 02:14:49 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (02/28/2014 02:36:20 AM) (Source: DCOM) (User: DIMARIKSPC)
Description: c:\PROGRA~1\mcafee\msc\mcmscsub.dll -Embedding193{9B3BEB4E-1C5E-4A5F-BB36-2F6587DD34E2}
Error: (02/27/2014 11:48:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243
Error: (02/27/2014 11:27:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243
Error: (02/27/2014 11:23:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (02/27/2014 11:23:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (02/27/2014 11:23:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (02/27/2014 11:23:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Microsoft Office Sessions:
=========================
Error: (02/28/2014 02:31:23 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073422302
Error: (02/27/2014 11:56:45 PM) (Source: Application Hang)(User: )
Description: Launcher.exe2014.2.4.20142401cf340edff851330C:\Users\Dieter\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe6c78b005-a002-11e3-be85-a4db302db3f9
Error: (02/27/2014 11:47:59 PM) (Source: Application Hang)(User: )
Description: Launcher.exe2014.2.4.20266401cf340cd4812d3a0C:\Users\Dieter\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe33407a17-a001-11e3-be84-a4db302db3f9
Error: (02/27/2014 09:24:12 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Users\Dieter\Downloads\esetsmartinstaller_enu (3).exe
Error: (02/27/2014 08:48:52 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: DIMARIKSPC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (02/27/2014 08:48:52 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: DIMARIKSPC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (02/27/2014 02:27:35 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/27/2014 01:44:12 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073422302
Error: (02/27/2014 01:37:52 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Users\Dieter\Downloads\esetsmartinstaller_enu (3).exe
Error: (02/27/2014 01:37:49 PM) (Source: SideBySide)(User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Users\Dieter\Downloads\esetsmartinstaller_enu (3).exe
==================== Memory info ===========================
Percentage of memory in use: 42%
Total physical RAM: 7613.04 MB
Available physical RAM: 4395.03 MB
Total Pagefile: 8829.04 MB
Available Pagefile: 4861.8 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:454.75 GB) (Free:412.77 GB) NTFS
Drive d: (DATA) (Fixed) (Total:455.61 GB) (Free:262.26 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9C377665)
Partition: GPT Partition Type.
==================== End Of Log ============================
|
|
01.03.2014, 10:22
| #2 | |
| /// TB-Ausbilder   | Win8: Grün unterstrichene Wörter mit Werbelinks und Pop-Ups Servus,
__________________Zitat:
 Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern. Im Anschluss daran räumen wir auf und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
() C:\Program Files (x86)\Re-Markable\Re-Markable154.exe
() C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
R2 Re-Markable; C:\Program Files (x86)\Re-Markable\Re-Markable154.exe [181248 2014-02-26] ()
C:\Program Files (x86)\Re-Markable
C:\ProgramData\boost_interprocess
C:\WINDOWS\Tasks\Re-Markable_wd.job
C:\WINDOWS\System32\Tasks\Re-Markable_wd
Task: {724139F9-BF63-4B4E-88EB-C9FDBBD3CA52} - System32\Tasks\Re-Markable_wd => C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe [2014-02-26] ()
Task: C:\WINDOWS\Tasks\Re-Markable_wd.job => C:\Program Files (x86)\Re-Markable\Re-Markable_wd.exe
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 3 ESET Online Scanner
Schritt 4 Downloade Dir bitte  SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
|
| Themen zu Win8: Grün unterstrichene Wörter mit Werbelinks und Pop-Ups |
| anklicken, awesomehp, awesomehp entfernen, browser, community, doppelt, folge, generell, hintergrund, hängen, installiert, klicken, langsamer, meldung, pop-ups, pum.bad.proxy, seitdem, sicherheit, webseite, win |
und 
und speichere die Logdatei auf Deinem Desktop.
Hybrid-Darstellung
