Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 28.02.2014, 00:38   #1
globelblade
 
Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) - Standard

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)



Hallo nettes Trojaner - Board - Team,

ich hoffe Ihr könnt mir helfen, weil das Problem habe ich seit Weihnachten nicht im Griff bekommen

ich probiere mal zu erläutern:

Ich habe was auf dem Rechner!was sich nicht entfernen läßt trotzt: Formation/WriteZero/NeuInstallation/Windows usw..

wie komme ich drauf???also habe Daten durchforstet auf meinen Rechner die zb. heisen: Windows Schadow,Remote/virtuell/Visuell C++2005 ($) ,Script usw...

zudem meine Vermutung!!Daten auf Platte die sich nicht entfernen lassen wollen!!!

Problem an der ganzen Sache, ich habe keine Rechte(Admin) trotze Befehle wie (c:\net User Admin..)
zudem wurde der Router manipuliert, sowie alle erdenkliche Software wie /Windows/Viren und Treiber!!)

Ich bin Rat und Sprachlos!!!

hier aktuelle Log:

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-28 00:14:07
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD5000LPVT-22G33T0 rev.01.01A01 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\ADMINI~1.SVE\AppData\Local\Temp\kxldypog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002e02000 45 bytes [00, 00, 16, 02, 4E, 74, 66, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80002e0202f 29 bytes [00, 01, 00, 06, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe[2072] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075411465 2 bytes [41, 75]
.text C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe[2072] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754114bb 2 bytes [41, 75]
.text ... * 2
.text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075411465 2 bytes [41, 75]
.text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754114bb 2 bytes [41, 75]
.text ... * 2

---- Threads - GMER 2.1 ----

Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [4692:1888] 000007fefbdd2a7c
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:1676] 0000000075427587
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:5012] 00000000636a758a
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:524] 00000000779b2e65
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:5716] 00000000779b3e85
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:5148] 00000000779b3e85
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:4256] 00000000779b3e85

---- Registry - GMER 2.1 ----

Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager@PendingFileRenameOperations ????s_??????????????????.i??????? ??????????????r???????????????????????????0???? ???????????????????????????????????????????????????? ????????????t????????????????????????????????????????? D??/????????????????\???????????????s?????kerberos?msv1_0?schannel?wdigest?tspkg?pku2u?????????????????????????s?????????/???????????/?/????,??:???i?????evi???????,??? ????????????????????????????????,??????????r??? ??????????????????????????????D????????r????"??????k??????n???? ??????????????????????????????D???????r???? D??+??????????r???fvevol?rdyboost??t????N??????S?????eoo??@%SystemRoot%\system32\wiaservc.dll,-9?tem???+?+?+???????????????????????????????????????m????????????????????????s?????credssp.dll?????? ?????????????????????????????????????????????????????t???(??????P???????W????????????????????? ??????????? ???????P???????W???????P???????W???????????????????4???????????????????????????????? ??????????????????????????????????????????????????????????????????4?? ?????????? ????\???????????????????? ??????????????
Reg HKLM\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller@Events
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74e5431ddf8f
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Type 2
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Start 3
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Tag 3
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@ImagePath \??\C:\Windows\system32\drivers\mbamchameleon.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@DisplayName mbamchameleon
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Group FSFilter Activity Monitor
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@WOW64 1
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Protected C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances@DefaultInstance mbamchameleon Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances\mbamchameleon Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances\mbamchameleon Instance@Altitude 400900
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances\mbamchameleon Instance@Flags 0
Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@Type 2
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@Start 3
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@ImagePath \??\C:\Windows\system32\drivers\mbam.sys
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@Group FSFilter Anti-Virus
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@DependOnService FltMgr?
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@WOW64 1
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances@DefaultInstance MBAMProtector Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance@Altitude 328800
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance@Flags 0
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@Type 16
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@Start 2
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@ImagePath "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@WOW64 1
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@ObjectName LocalSystem
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@Description Malwarebytes Anti-Malware scheduler
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@Type 16
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@Start 2
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@ErrorControl 1
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@ImagePath "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@DependOnService MBAMProtector?
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@WOW64 1
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@ObjectName LocalSystem
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@Description Malwarebytes Anti-Malware service
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@DelayedAutostart 0
Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService
Reg HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller@Start 3
Reg HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74e5431ddf8f (not active ControlSet)
---- EOF - GMER 2.1 ----

bitte um Hilfe!!!

Alt 28.02.2014, 07:57   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) - Standard

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 02.03.2014, 01:36   #3
globelblade
 
Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) - Standard

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)



Wow Dankeschön für Deine Mühe...also:
FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-03-2014
Ran by Devil (administrator) on WOHNUNG on 04-01-2014 01:08:19
Running from C:\Users\Devil\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-08] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2886416 2012-03-02] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [InstantUpdate] - C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-06] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2014-01-03] (AVAST Software)
HKLM-x32\...\Runonce: [GrpConv] - grpconv -o [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3296752609-3879483925-2616702320-1001\...\Run: [HijackThis startup scan] - C:\Users\Devil\Desktop\HijackThis.exe /startupscan
HKU\S-1-5-21-3296752609-3879483925-2616702320-1001\...\MountPoints2: E - E:\pcwstart.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260928 2012-03-05] (NVIDIA Corporation)
IFEO\taskmgr.exe: [Debugger] "C:\Program Files\Process Hacker 2\ProcessHacker.exe"
Startup: C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_75627215.lnk
ShortcutTarget: _uninst_75627215.lnk -> C:\Users\Devil\AppData\Local\Temp\_uninst_75627215.bat ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\h477be72.default
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software)
S4 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-16] (Intel Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S4 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
S4 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-27] (Atheros)

==================== Drivers (Whitelisted) ====================

R1 A2DDA; C:\EEK\RUN\a2ddax64.sys [26176 2013-09-24] (Emsisoft GmbH)
R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2014-01-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2014-01-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-03] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2014-01-03] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2014-01-03] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2014-01-03] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2014-01-03] ()
S3 cleanhlp; C:\EEK\Run\cleanhlp64.sys [57024 2013-09-24] (Emsisoft GmbH)
R1 KProcessHacker2; C:\Program Files\Process Hacker 2\kprocesshacker.sys [40088 2013-10-30] (wj32)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 06:21 - 2014-01-04 06:20 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-01-04 06:21 - 2014-01-04 06:20 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-01-04 06:21 - 2014-01-04 00:26 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-01-04 06:21 - 2014-01-04 00:26 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\de
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\0407
2014-01-04 06:14 - 2014-01-04 06:14 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2014-01-04 06:14 - 2014-01-03 22:05 - 00001964 _____ () C:\Windows\Patch.log
2014-01-04 06:13 - 2014-01-04 06:14 - 00005845 _____ () C:\Windows\WisGAPas.log
2014-01-04 06:13 - 2014-01-04 06:13 - 17790464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 12282368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 10887168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 09705472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-04 06:13 - 2014-01-04 06:13 - 02308096 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 02144256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01798656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01792000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-04 06:13 - 2014-01-04 06:13 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-04 06:13 - 2014-01-04 06:13 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01127424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01103360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00818688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00000918 _____ () C:\Windows\MOD01SET74DE0N0005.XML
2014-01-04 06:13 - 2014-01-03 22:11 - 00000267 _____ () C:\Windows\LaunApp.ini
2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-04 06:09 - 2014-01-04 06:09 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-04 06:09 - 2014-01-04 06:09 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-04 06:09 - 2014-01-04 06:09 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-04 06:09 - 2014-01-04 06:09 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-04 06:09 - 2012-06-14 08:49 - 00001586 __RSH () C:\Patch.rev
2014-01-04 06:09 - 2006-10-19 06:27 - 00000000 _____ () C:\Windows\SysWOW64\Drivers\1025_ACER_Acer_Aspire V5-571G.mrk
2014-01-04 06:09 - 2006-10-19 06:27 - 00000000 _____ () C:\Windows\system32\Drivers\1025_ACER_Acer_Aspire V5-571G.mrk
2014-01-04 06:06 - 2011-05-26 03:55 - 00281680 _____ (Dritek System Inc.) C:\Windows\UNINSTLMv4.EXE
2014-01-04 06:05 - 2012-03-02 02:39 - 00707856 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00425232 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys
2014-01-04 06:05 - 2012-03-02 02:39 - 00392464 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCOM.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00280336 _____ (Synaptics Incorporated) C:\Windows\system32\SynCtrl.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00229648 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00224528 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCtrl.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00172304 _____ (Synaptics Incorporated) C:\Windows\system32\SynGlwPadShlExt.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00150800 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo9.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00113936 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPCOM.dll
2014-01-04 06:05 - 2012-03-02 02:39 - 00068880 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPEnhPS.dll
2014-01-04 06:05 - 2011-09-15 04:11 - 01048576 _____ () C:\Windows\system32\syndata.bin
2014-01-04 06:04 - 2012-02-27 12:01 - 00788760 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-01-04 06:04 - 2012-02-27 12:01 - 00356120 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-01-04 06:04 - 2012-02-27 12:01 - 00016152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-01-04 06:04 - 2011-11-11 02:04 - 00060184 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-01-04 06:04 - 2009-07-14 22:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-01-04 06:03 - 2012-04-23 06:25 - 05888792 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00509720 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00439064 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00398616 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00276248 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00250136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00184600 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-01-04 06:03 - 2012-04-23 06:25 - 00170264 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2014-01-04 06:03 - 2012-03-27 04:42 - 00018656 _____ () C:\Windows\system32\iglhxs64.vp
2014-01-04 06:03 - 2012-03-27 04:25 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2712.dll
2014-01-04 06:03 - 2012-03-27 04:09 - 14748416 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-01-04 06:03 - 2012-03-27 04:09 - 08087040 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2014-01-04 06:03 - 2012-03-27 04:08 - 00963912 _____ () C:\Windows\SysWOW64\igkrng600.bin
2014-01-04 06:03 - 2012-03-27 04:08 - 00963912 _____ () C:\Windows\system32\igkrng600.bin
2014-01-04 06:03 - 2012-03-27 04:08 - 00261208 _____ () C:\Windows\SysWOW64\igfcg600m.bin
2014-01-04 06:03 - 2012-03-27 04:08 - 00261208 _____ () C:\Windows\system32\igfcg600m.bin
2014-01-04 06:03 - 2012-03-27 04:08 - 00145804 _____ () C:\Windows\SysWOW64\igcompkrng600.bin
2014-01-04 06:03 - 2012-03-27 04:08 - 00145804 _____ () C:\Windows\system32\igcompkrng600.bin
2014-01-04 06:03 - 2012-03-27 04:08 - 00079360 _____ () C:\Windows\system32\igdde64.dll
2014-01-04 06:03 - 2012-03-27 04:05 - 06121472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2014-01-04 06:03 - 2012-03-27 04:03 - 00058880 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-01-04 06:03 - 2012-03-27 03:58 - 09605632 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2014-01-04 06:03 - 2012-03-27 03:47 - 07795200 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2014-01-04 06:03 - 2012-03-27 03:05 - 18137088 _____ () C:\Windows\system32\ig4icd64.dll
2014-01-04 06:03 - 2012-03-27 02:47 - 13212672 _____ () C:\Windows\SysWOW64\ig4icd32.dll
2014-01-04 06:03 - 2012-03-27 02:40 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00430592 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2014-01-04 06:03 - 2012-03-27 02:40 - 00221877 _____ () C:\Windows\system32\Gfxres.th-TH.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00208522 _____ () C:\Windows\system32\Gfxres.el-GR.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00192378 _____ () C:\Windows\system32\Gfxres.ru-RU.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00164821 _____ () C:\Windows\system32\Gfxres.ar-SA.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00162150 _____ () C:\Windows\system32\Gfxres.ja-JP.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00157713 _____ () C:\Windows\system32\Gfxres.he-IL.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00148461 _____ () C:\Windows\system32\Gfxres.it-IT.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00147116 _____ () C:\Windows\system32\Gfxres.ko-KR.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00146125 _____ () C:\Windows\system32\Gfxres.es-ES.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00146008 _____ () C:\Windows\system32\Gfxres.de-DE.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00144790 _____ () C:\Windows\system32\Gfxres.ro-RO.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00144267 _____ () C:\Windows\system32\Gfxres.fr-FR.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00143564 _____ () C:\Windows\system32\Gfxres.tr-TR.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00143112 _____ () C:\Windows\system32\Gfxres.pt-BR.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00142797 _____ () C:\Windows\system32\Gfxres.nl-NL.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00142606 _____ () C:\Windows\system32\Gfxres.hu-HU.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00142079 _____ () C:\Windows\system32\Gfxres.pt-PT.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00141854 _____ () C:\Windows\system32\Gfxres.sv-SE.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00141421 _____ () C:\Windows\system32\Gfxres.pl-PL.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00141282 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00140949 _____ () C:\Windows\system32\Gfxres.fi-FI.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00140548 _____ () C:\Windows\system32\Gfxres.sk-SK.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00139901 _____ () C:\Windows\system32\Gfxres.hr-HR.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00136850 _____ () C:\Windows\system32\Gfxres.sl-SI.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00136778 _____ () C:\Windows\system32\Gfxres.nb-NO.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00136261 _____ () C:\Windows\system32\Gfxres.da-DK.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00131674 _____ () C:\Windows\system32\Gfxres.en-US.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2014-01-04 06:03 - 2012-03-27 02:40 - 00125306 _____ () C:\Windows\system32\Gfxres.zh-TW.resources
2014-01-04 06:03 - 2012-03-27 02:40 - 00123778 _____ () C:\Windows\system32\Gfxres.zh-CN.resources
2014-01-04 06:03 - 2012-03-27 02:39 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2014-01-04 06:03 - 2012-03-27 02:39 - 00386560 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2014-01-04 06:03 - 2012-03-27 02:39 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2014-01-04 06:03 - 2012-03-27 02:39 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-01-04 06:03 - 2012-03-27 02:38 - 00434688 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2014-01-04 06:03 - 2012-03-27 02:38 - 00172032 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2014-01-04 06:03 - 2012-03-27 02:38 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2014-01-04 06:03 - 2012-03-27 02:38 - 00009216 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2014-01-04 06:03 - 2012-03-27 02:37 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2014-01-04 06:03 - 2012-03-27 02:37 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2014-01-04 06:03 - 2012-03-27 02:37 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2014-01-04 06:03 - 2012-03-27 02:36 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-01-04 06:03 - 2012-03-27 02:35 - 00325120 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 02967040 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 02321408 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 01981696 _____ () C:\Windows\system32\iglhxa64.cpa
2014-01-04 06:03 - 2012-03-27 02:33 - 00524800 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00519680 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00237056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00213504 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00193024 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00177152 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00059425 _____ () C:\Windows\system32\iglhxo64.vp
2014-01-04 06:03 - 2012-03-27 02:33 - 00059398 _____ () C:\Windows\system32\iglhxg64.vp
2014-01-04 06:03 - 2012-03-27 02:33 - 00059230 _____ () C:\Windows\system32\iglhxc64.vp
2014-01-04 06:03 - 2012-03-27 02:33 - 00059104 _____ () C:\Windows\system32\iglhxc64_dev.vp
2014-01-04 06:03 - 2012-03-27 02:33 - 00058796 _____ () C:\Windows\system32\iglhxg64_dev.vp
2014-01-04 06:03 - 2012-03-27 02:33 - 00058109 _____ () C:\Windows\system32\iglhxo64_dev.vp
2014-01-04 06:03 - 2012-03-27 02:33 - 00001074 _____ () C:\Windows\system32\iglhxa64.vp
2014-01-04 06:03 - 2011-12-06 13:23 - 00331264 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-01-04 06:03 - 2011-12-06 13:22 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2014-01-04 06:02 - 2014-01-04 06:02 - 00951680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-01-04 06:02 - 2014-01-03 22:26 - 00000226 _____ () C:\Windows\User.xml
2014-01-04 06:01 - 2014-01-04 06:25 - 00001375 _____ () C:\Windows\WPatchProgress.ini
2014-01-04 06:01 - 2014-01-04 06:13 - 00344171 _____ () C:\Windows\CapsuleDll.log
2014-01-04 06:01 - 2014-01-03 22:18 - 00000225 _____ () C:\Windows\Factory.xml
2014-01-04 06:01 - 2011-12-27 02:02 - 00519208 _____ (Wistron Corp.) C:\Windows\WGRegOfPEX64.exe
2014-01-04 06:01 - 2011-07-23 23:12 - 00434728 _____ (Wistron Corp.) C:\Windows\WisGAPasx64.exe
2014-01-04 06:01 - 2011-07-23 23:12 - 00357416 _____ (Wistron Corp.) C:\Windows\WisGAPas.exe
2014-01-04 06:01 - 2011-05-10 08:36 - 00494632 _____ (Wistron Corp.) C:\Windows\WISMVIMG.EXE
2014-01-04 06:01 - 2009-10-27 19:46 - 00342560 _____ (Acer Inc.) C:\Windows\ParseModule_X64.exe
2014-01-04 06:01 - 2009-10-27 19:46 - 00231968 _____ (Acer Inc.) C:\Windows\ParseModule_X86.exe
2014-01-04 06:01 - 2009-10-20 15:49 - 00333088 _____ (Wistron Corp.) C:\Windows\CAPSULE.DLL
2014-01-04 01:08 - 2014-01-04 01:08 - 00009823 _____ () C:\Users\Devil\Downloads\FRST.txt
2014-01-04 01:08 - 2014-01-04 01:08 - 00000000 ____D () C:\FRST
2014-01-04 01:07 - 2014-01-04 01:07 - 00000000 ____D () C:\Users\Devil\Desktop\tools
2014-01-04 01:00 - 2014-01-04 01:00 - 03645064 _____ (Piriform Ltd) C:\Users\Devil\Downloads\ccsetup410_slim.exe
2014-01-04 00:58 - 2014-01-04 00:58 - 02155520 _____ (Farbar) C:\Users\Devil\Downloads\FRST64.exe
2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Malwarebytes
2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 00:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-04 00:43 - 2014-01-04 00:43 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-01-04 00:36 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-04 00:36 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-01-04 00:36 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-04 00:36 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-01-04 00:36 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-01-04 00:36 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-04 00:36 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-01-04 00:36 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-01-04 00:36 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-01-04 00:22 - 2014-01-04 00:28 - 00000000 ____D () C:\Users\Devil\Documents\Bluetooth Folder
2014-01-04 00:22 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\Devil\AppData\Local\BMExplorer
2014-01-03 23:57 - 2014-01-03 23:57 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Process Hacker 2
2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\Users\Devil\Documents\Neuer Ordner
2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\ProgramData\LockHunter
2014-01-03 23:51 - 2014-01-03 23:51 - 00000000 ____D () C:\Program Files\Process Hacker 2
2014-01-03 23:42 - 2014-01-03 23:42 - 00003544 ____N () C:\bootsqm.dat
2014-01-03 23:10 - 2014-01-04 00:38 - 00000000 ____D () C:\Users\Devil\AppData\Local\Mozilla
2014-01-03 23:10 - 2014-01-03 23:11 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Mozilla
2014-01-03 23:08 - 2014-01-04 00:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-03 23:08 - 2014-01-03 23:08 - 00014602 _____ () C:\HijackPatrol.log
2014-01-03 23:08 - 2014-01-03 23:08 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\WinPatrol
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\Mozilla
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\BillP Studios
2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\LockHunter
2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Program Files\LockHunter
2014-01-03 23:00 - 2014-01-03 23:00 - 00000550 _____ () C:\Users\Devil\Desktop\Emsisoft Emergency Kit.lnk
2014-01-03 22:59 - 2014-01-03 23:00 - 00000000 ____D () C:\EEK
2014-01-03 22:59 - 2014-01-03 22:59 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\AVAST Software
2014-01-03 22:58 - 2014-01-03 22:58 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-01-03 22:57 - 2014-01-03 22:57 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-03 22:57 - 2014-01-03 22:57 - 00205320 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-03 22:57 - 2014-01-03 22:57 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-03 22:57 - 2014-01-03 22:57 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job
2014-01-03 22:57 - 2014-01-03 22:57 - 00000000 ____D () C:\Program Files\AVAST Software
2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\uomaedfu.sys
2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\ftegstgg.sys
2014-01-03 22:55 - 2014-01-03 22:56 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Adobe
2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Local\Adobe
2014-01-03 22:25 - 2014-01-03 22:25 - 00002609 _____ () C:\Users\Public\Desktop\eBay.lnk
2014-01-03 22:25 - 2014-01-03 22:25 - 00001736 _____ () C:\Users\Public\Desktop\Online kaufen.lnk
2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files\Accessory Store
2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-01-03 22:24 - 2014-01-04 00:43 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 22:24 - 2014-01-03 22:24 - 00059968 _____ () C:\Users\Devil\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 22:24 - 2014-01-03 22:24 - 00002078 _____ () C:\Users\Public\Desktop\Eurosport Player.lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00001447 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00001413 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00000995 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Synaptics
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Screensaver
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Atheros
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files\Preload
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-01-03 22:23 - 2014-01-03 22:25 - 00002614 _____ () C:\Windows\WisGRegOffer.log
2014-01-03 22:23 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil
2014-01-03 22:23 - 2014-01-03 22:23 - 00000122 _____ () C:\Windows\WLangUpt.log
2014-01-03 22:23 - 2014-01-03 22:23 - 00000020 ___SH () C:\Users\Devil\ntuser.ini
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Vorlagen
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Startmenü
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Netzwerkumgebung
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Lokale Einstellungen
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Eigene Dateien
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Druckumgebung
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Musik
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Bilder
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Verlauf
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Anwendungsdaten
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Anwendungsdaten
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 ____D () C:\Users\Devil\AppData\Local\VirtualStore
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _____ () C:\Users\Devil\agent.log
2014-01-03 22:23 - 2012-06-05 16:08 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Macromedia
2014-01-03 22:23 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-03 22:23 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Programme
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 __SHD () C:\Recovery
2014-01-03 22:10 - 2014-01-03 22:10 - 00000000 ____D () C:\ProgramData\EgisTec
2014-01-03 22:06 - 2014-01-03 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ___HD () C:\BOOK
2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ____D () C:\Windows\System32\Tasks\Recovery Management
2014-01-03 22:03 - 2014-01-03 22:03 - 00062776 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDVDisk.sys
2014-01-03 22:03 - 2014-01-03 22:03 - 00022648 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDFilter.sys
2014-01-03 22:03 - 2014-01-03 22:03 - 00020520 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDNserv.sys
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\ProgramData\EgisTec IPS
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files\EgisTec IPS
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec Shredder
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLocker
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec IPS
2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLockerSuite
2014-01-03 21:59 - 2014-01-03 21:59 - 00003200 _____ () C:\Windows\System32\Tasks\DeviceDetector
2014-01-03 21:56 - 2014-01-03 21:58 - 00000000 ____D () C:\Program Files (x86)\Cyberlink
2014-01-03 21:55 - 2014-01-03 21:55 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Photo.lnk
2014-01-03 21:55 - 2014-01-03 21:55 - 00000032 _____ () C:\ProgramData\PS.log
2014-01-03 21:54 - 2014-01-03 21:55 - 00000000 ____D () C:\ProgramData\CLSK
2014-01-03 21:54 - 2014-01-03 21:54 - 00000000 ____D () C:\ProgramData\install_clap
2014-01-03 21:53 - 2014-01-03 21:56 - 00002454 _____ () C:\ProgramData\clear.fiSDK20.log
2014-01-03 21:53 - 2014-01-03 21:56 - 00000000 ____D () C:\ProgramData\CyberLink
2014-01-03 21:53 - 2014-01-03 21:55 - 00000000 ____D () C:\ProgramData\clear.fi
2014-01-03 21:53 - 2014-01-03 21:53 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Media.lnk
2014-01-03 21:52 - 2014-01-03 21:52 - 00000000 ____D () C:\ProgramData\Synaptics
2014-01-03 21:50 - 2014-01-03 21:50 - 00000184 _____ () C:\Windows\LMv4.UNI
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Program Files (x86)\Launch Manager
2014-01-03 21:50 - 2012-02-02 02:06 - 09888872 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsBaStorIcon.dll
2014-01-03 21:50 - 2012-02-02 02:06 - 00292968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2014-01-03 21:49 - 2014-01-04 00:22 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-03 21:49 - 2014-01-03 21:49 - 00006874 _____ () C:\Windows\DPINST.LOG
2014-01-03 21:49 - 2014-01-03 21:49 - 00001360 _____ () C:\Windows\Synaptics.log
2014-01-03 21:49 - 2014-01-03 21:49 - 00000032 _____ () C:\Windows\SysWOW64\setup.log
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Windows\system32\nn-NO
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files\Synaptics
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files (x86)\Atheros
2014-01-03 21:49 - 2012-02-27 19:19 - 00442528 _____ (Atheros) C:\Windows\system32\athihvs.dll
2014-01-03 21:49 - 2012-02-27 19:19 - 00063648 _____ (Atheros) C:\Windows\system32\athihvui.dll
2014-01-03 21:49 - 2012-02-24 00:56 - 03545088 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-01-03 21:48 - 2014-01-03 21:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf
2014-01-03 21:46 - 2014-01-03 23:56 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-03 21:44 - 2014-01-03 21:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-01-03 21:44 - 2012-02-27 12:00 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Dolby PCEE4
2014-01-03 21:43 - 2012-03-10 05:41 - 00685160 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-01-03 21:43 - 2012-03-10 05:41 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-01-03 21:43 - 2012-03-10 05:41 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-01-03 21:42 - 2014-01-04 01:06 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-01-03 21:42 - 2014-01-03 21:52 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2014-01-03 21:42 - 2014-01-03 21:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-01-03 21:42 - 2014-01-03 21:42 - 00003492 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2014-01-03 21:42 - 2014-01-03 21:42 - 00003188 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon
2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\ProgramData\Intel
2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Realtek
2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Intel
2014-01-03 21:42 - 2012-03-22 00:38 - 00147746 _____ () C:\Windows\system32\Drivers\RtPCEE4.DAT
2014-01-03 21:42 - 2012-03-07 15:28 - 00015128 _____ () C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-01-03 21:42 - 2012-02-22 07:09 - 02657896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-03 21:42 - 2012-02-22 06:25 - 04756200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-03 21:42 - 2012-02-22 04:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-01-03 21:42 - 2012-02-21 23:26 - 02528832 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-01-03 21:42 - 2012-02-21 22:35 - 03847272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-03 21:42 - 2012-02-20 23:57 - 00238744 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-03 21:42 - 2012-02-20 23:52 - 02729472 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-01-03 21:42 - 2012-02-18 04:53 - 00102504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-03 21:42 - 2012-02-18 00:54 - 00396632 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-01-03 21:42 - 2012-02-14 09:05 - 08363864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-01-03 21:42 - 2012-02-14 07:35 - 00978776 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-03 21:42 - 2012-01-30 20:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-01-03 21:42 - 2012-01-24 07:30 - 00537456 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-01-03 21:42 - 2012-01-24 07:30 - 00524656 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-01-03 21:42 - 2012-01-24 07:30 - 00449392 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-01-03 21:42 - 2012-01-10 19:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-01-03 21:42 - 2011-12-23 22:30 - 00823912 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-03 21:42 - 2011-12-21 00:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-01-03 21:42 - 2011-12-20 14:43 - 00220776 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-01-03 21:42 - 2011-12-19 02:58 - 02131288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-01-03 21:42 - 2011-12-19 02:58 - 01247576 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-01-03 21:42 - 2011-12-15 22:16 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-01-03 21:42 - 2011-12-15 22:16 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-01-03 21:42 - 2011-12-15 22:16 - 00137056 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-01-03 21:42 - 2011-12-15 22:16 - 00120160 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-01-03 21:42 - 2011-12-15 22:16 - 00075104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-01-03 21:42 - 2011-12-14 01:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-01-03 21:42 - 2011-12-13 20:01 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-01-03 21:42 - 2011-11-23 01:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-01-03 21:42 - 2011-09-27 07:41 - 00000024 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-01-03 21:42 - 2011-09-02 23:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-01-03 21:42 - 2011-09-02 23:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-01-03 21:42 - 2011-09-02 23:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-01-03 21:42 - 2011-08-24 02:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-01-03 21:42 - 2011-07-23 04:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-01-03 21:42 - 2011-05-31 18:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-01-03 21:42 - 2011-03-17 21:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-01-03 21:42 - 2011-03-08 02:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-01-03 21:42 - 2010-11-08 16:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-01-03 21:42 - 2010-11-08 16:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-01-03 21:42 - 2010-11-08 16:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-01-03 21:42 - 2010-11-08 16:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-01-03 21:42 - 2010-11-08 16:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-01-03 21:42 - 2010-11-08 16:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-01-03 21:42 - 2010-11-04 03:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-01-03 21:42 - 2010-10-03 22:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-01-03 21:42 - 2010-09-27 18:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-03 21:42 - 2010-09-24 02:21 - 00039672 _____ () C:\Windows\system32\Drivers\RtPCEE3.DAT
2014-01-03 21:42 - 2010-07-23 01:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-01-03 21:42 - 2010-07-23 01:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-03 21:42 - 2010-03-22 22:21 - 00247560 _____ () C:\Windows\system32\Drivers\RTConvEQ.dat
2014-01-03 21:42 - 2010-03-22 22:21 - 00001448 _____ () C:\Windows\system32\Drivers\RtHdatEx.dat
2014-01-03 21:42 - 2010-02-12 00:45 - 00000176 _____ () C:\Windows\system32\Drivers\RTHDAEQ1.dat
2014-01-03 21:42 - 2010-01-27 06:52 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX3.dat
2014-01-03 21:42 - 2009-11-24 18:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-01-03 21:42 - 2009-11-24 18:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-01-03 21:42 - 2009-11-24 18:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-01-03 21:42 - 2009-11-24 18:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-01-03 21:42 - 2009-11-18 03:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-03 21:42 - 2008-08-21 22:43 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX2.dat
2014-01-03 21:42 - 2005-06-27 14:29 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX1.dat
2014-01-03 21:42 - 2005-06-27 14:29 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat
2014-01-03 21:41 - 2014-01-03 21:52 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-01-03 21:41 - 2014-01-03 21:52 - 00000000 ____D () C:\Windows\system32\NV
2014-01-03 21:40 - 2014-01-03 21:41 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-03 21:40 - 2014-01-03 21:40 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-01-03 21:40 - 2012-06-05 16:08 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-01-03 21:40 - 2012-03-04 23:04 - 03090752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-03 21:40 - 2012-03-04 23:03 - 06083392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-03 21:40 - 2012-03-04 23:02 - 02944183 _____ () C:\Windows\system32\nvcoproc.bin
2014-01-03 21:40 - 2012-03-04 23:02 - 02561856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-03 21:40 - 2012-03-04 23:02 - 00889664 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-03 21:40 - 2012-03-04 23:02 - 00850752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-01-03 21:40 - 2012-03-04 23:02 - 00118080 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-03 21:40 - 2012-03-04 23:02 - 00063296 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-03 21:40 - 2012-03-04 23:02 - 00055616 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-01-03 21:40 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-03 21:40 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-03 21:39 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-03 21:39 - 2014-01-03 21:40 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-03 21:39 - 2014-01-03 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-03 21:39 - 2012-03-05 13:22 - 25555776 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 25222464 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 19456320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 17663296 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 17543488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 15028544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 14332224 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-03 21:39 - 2012-03-05 13:22 - 09732416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 08038208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 07726912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 05920064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 02873664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 02677568 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 02673984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 02518336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 02438464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 02316608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 01737536 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 01466176 _____ (NVIDIA Corporation) C:\Windows\system32\nvgenco64.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00963392 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00813376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00364352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdecodemft.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00301376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdecodemft.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00260928 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00215360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-03 21:39 - 2012-03-05 13:22 - 00028992 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-01-03 21:39 - 2012-03-05 13:22 - 00012780 _____ () C:\Windows\system32\nvinfo.pb
2014-01-03 21:37 - 2012-03-21 23:39 - 00121344 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-01-03 21:37 - 2012-03-21 23:39 - 00020992 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-03 21:37 - 2012-03-21 23:33 - 00086528 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-01-03 21:37 - 2012-03-21 23:32 - 00017920 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-03 21:36 - 2014-01-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-01-03 21:34 - 2011-11-29 19:40 - 00568600 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2014-01-03 21:33 - 2014-01-03 21:44 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-03 21:33 - 2014-01-03 21:36 - 00000000 ___HD () C:\Intel
2014-01-03 21:33 - 2012-01-16 11:06 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-01-03 21:32 - 2012-02-10 07:36 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-03 21:32 - 2012-02-10 06:38 - 01077248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-01-03 21:32 - 2012-02-03 05:34 - 03145728 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-03 21:32 - 2012-01-25 07:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-01-03 21:32 - 2012-01-25 07:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-01-03 21:32 - 2012-01-25 07:33 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-01-03 21:32 - 2011-11-19 16:20 - 05559152 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-03 21:32 - 2011-11-19 15:50 - 03968368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-01-03 21:32 - 2011-11-19 15:50 - 03913584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-01-03 21:31 - 2014-01-04 01:08 - 01766010 _____ () C:\Windows\WindowsUpdate.log
2014-01-03 21:31 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-01-03 21:31 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-01-03 21:31 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-01-03 21:31 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

==================== One Month Modified Files and Folders =======

2014-01-04 06:26 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-01-04 06:26 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-01-04 06:25 - 2014-01-04 06:01 - 00001375 _____ () C:\Windows\WPatchProgress.ini
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing
2014-01-04 06:25 - 2009-03-12 10:30 - 00000000 ____D () C:\Windows\LP
2014-01-04 06:20 - 2014-01-04 06:21 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-01-04 06:20 - 2014-01-04 06:21 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\de
2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\0407
2014-01-04 06:20 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-01-04 06:20 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-01-04 06:20 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-01-04 06:14 - 2014-01-04 06:14 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2014-01-04 06:14 - 2014-01-04 06:13 - 00005845 _____ () C:\Windows\WisGAPas.log
2014-01-04 06:13 - 2014-01-04 06:13 - 17790464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 12282368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 10887168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 09705472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-04 06:13 - 2014-01-04 06:13 - 02308096 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 02144256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01798656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01792000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-04 06:13 - 2014-01-04 06:13 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-04 06:13 - 2014-01-04 06:13 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01127424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 01103360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00818688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-04 06:13 - 2014-01-04 06:13 - 00000918 _____ () C:\Windows\MOD01SET74DE0N0005.XML
2014-01-04 06:13 - 2014-01-04 06:01 - 00344171 _____ () C:\Windows\CapsuleDll.log
2014-01-04 06:13 - 2012-06-05 15:55 - 00024913 _____ () C:\Windows\InfoBOM.xml
2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-04 06:09 - 2014-01-04 06:09 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-04 06:09 - 2014-01-04 06:09 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-04 06:09 - 2014-01-04 06:09 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-04 06:09 - 2014-01-04 06:09 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-04 06:09 - 2014-01-04 06:09 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-04 06:02 - 2014-01-04 06:02 - 00951680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-01-04 01:08 - 2014-01-04 01:08 - 00009823 _____ () C:\Users\Devil\Downloads\FRST.txt
2014-01-04 01:08 - 2014-01-04 01:08 - 00000000 ____D () C:\FRST
2014-01-04 01:08 - 2014-01-03 21:31 - 01766010 _____ () C:\Windows\WindowsUpdate.log
2014-01-04 01:08 - 2009-07-14 05:45 - 00024192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 01:08 - 2009-07-14 05:45 - 00024192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 01:07 - 2014-01-04 01:07 - 00000000 ____D () C:\Users\Devil\Desktop\tools
2014-01-04 01:06 - 2014-01-03 21:42 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-01-04 01:05 - 2012-06-05 15:50 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 01:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-01-04 01:05 - 2009-07-14 05:51 - 00043958 _____ () C:\Windows\setupact.log
2014-01-04 01:00 - 2014-01-04 01:00 - 03645064 _____ (Piriform Ltd) C:\Users\Devil\Downloads\ccsetup410_slim.exe
2014-01-04 00:58 - 2014-01-04 00:58 - 02155520 _____ (Farbar) C:\Users\Devil\Downloads\FRST64.exe
2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Malwarebytes
2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 00:47 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-04 00:43 - 2014-01-04 00:43 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-01-04 00:43 - 2014-01-03 22:24 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-04 00:38 - 2014-01-03 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Local\Mozilla
2014-01-04 00:36 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-01-04 00:28 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\Devil\Documents\Bluetooth Folder
2014-01-04 00:26 - 2014-01-04 06:21 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-01-04 00:26 - 2014-01-04 06:21 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-01-04 00:26 - 2009-07-14 06:13 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-04 00:22 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\Devil\AppData\Local\BMExplorer
2014-01-04 00:22 - 2014-01-03 21:49 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-04 00:14 - 2012-06-05 15:50 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-03 23:57 - 2014-01-03 23:57 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Process Hacker 2
2014-01-03 23:56 - 2014-01-03 21:46 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\Users\Devil\Documents\Neuer Ordner
2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\ProgramData\LockHunter
2014-01-03 23:51 - 2014-01-03 23:51 - 00000000 ____D () C:\Program Files\Process Hacker 2
2014-01-03 23:43 - 2010-11-21 04:47 - 00007702 _____ () C:\Windows\PFRO.log
2014-01-03 23:42 - 2014-01-03 23:42 - 00003544 ____N () C:\bootsqm.dat
2014-01-03 23:14 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-01-03 23:14 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-01-03 23:11 - 2014-01-03 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Mozilla
2014-01-03 23:08 - 2014-01-03 23:08 - 00014602 _____ () C:\HijackPatrol.log
2014-01-03 23:08 - 2014-01-03 23:08 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\WinPatrol
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\Mozilla
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\BillP Studios
2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\LockHunter
2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Program Files\LockHunter
2014-01-03 23:00 - 2014-01-03 23:00 - 00000550 _____ () C:\Users\Devil\Desktop\Emsisoft Emergency Kit.lnk
2014-01-03 23:00 - 2014-01-03 22:59 - 00000000 ____D () C:\EEK
2014-01-03 22:59 - 2014-01-03 22:59 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\AVAST Software
2014-01-03 22:58 - 2014-01-03 22:58 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-01-03 22:57 - 2014-01-03 22:57 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-03 22:57 - 2014-01-03 22:57 - 00205320 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-03 22:57 - 2014-01-03 22:57 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2014-01-03 22:57 - 2014-01-03 22:57 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-03 22:57 - 2014-01-03 22:57 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job
2014-01-03 22:57 - 2014-01-03 22:57 - 00000000 ____D () C:\Program Files\AVAST Software
2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\uomaedfu.sys
2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\ftegstgg.sys
2014-01-03 22:56 - 2014-01-03 22:55 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Adobe
2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Local\Adobe
2014-01-03 22:34 - 2012-06-05 15:56 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-03 22:34 - 2012-06-05 15:56 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-01-03 22:26 - 2014-01-04 06:02 - 00000226 _____ () C:\Windows\User.xml
2014-01-03 22:26 - 2012-06-05 15:24 - 01900215 _____ () C:\Windows\launApp.log
2014-01-03 22:26 - 2012-03-24 02:30 - 00000000 ___HD () C:\Elements
2014-01-03 22:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-01-03 22:25 - 2014-01-03 22:25 - 00002609 _____ () C:\Users\Public\Desktop\eBay.lnk
2014-01-03 22:25 - 2014-01-03 22:25 - 00001736 _____ () C:\Users\Public\Desktop\Online kaufen.lnk
2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files\Accessory Store
2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-01-03 22:25 - 2014-01-03 22:23 - 00002614 _____ () C:\Windows\WisGRegOffer.log
2014-01-03 22:25 - 2012-06-05 15:58 - 00000000 ____D () C:\ProgramData\oem
2014-01-03 22:24 - 2014-01-03 22:24 - 00059968 _____ () C:\Users\Devil\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 22:24 - 2014-01-03 22:24 - 00002078 _____ () C:\Users\Public\Desktop\Eurosport Player.lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00001447 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00001413 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00000995 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Synaptics
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Screensaver
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Atheros
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files\Preload
2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-01-03 22:24 - 2014-01-03 22:23 - 00000000 ____D () C:\Users\Devil
2014-01-03 22:23 - 2014-01-03 22:23 - 00000122 _____ () C:\Windows\WLangUpt.log
2014-01-03 22:23 - 2014-01-03 22:23 - 00000020 ___SH () C:\Users\Devil\ntuser.ini
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Vorlagen
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Startmenü
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Netzwerkumgebung
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Lokale Einstellungen
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Eigene Dateien
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Druckumgebung
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Musik
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Bilder
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Verlauf
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Anwendungsdaten
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Anwendungsdaten
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 ____D () C:\Users\Devil\AppData\Local\VirtualStore
2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _____ () C:\Users\Devil\agent.log
2014-01-03 22:23 - 2012-06-05 15:56 - 00000000 __SHD () C:\OEM
2014-01-03 22:23 - 2012-06-05 15:55 - 00565200 _____ () C:\Windows\PLaunch.log
2014-01-03 22:23 - 2012-06-05 15:55 - 00000218 __RSH () C:\Preload.rev
2014-01-03 22:23 - 2012-06-05 15:55 - 00000168 _____ () C:\Windows\WisLangCode.ini
2014-01-03 22:23 - 2012-06-05 15:24 - 00009090 _____ () C:\Windows\PatchFul.log
2014-01-03 22:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Programme
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 __SHD () C:\Recovery
2014-01-03 22:22 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-01-03 22:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-01-03 22:18 - 2014-01-04 06:01 - 00000225 _____ () C:\Windows\Factory.xml
2014-01-03 22:18 - 2012-06-05 15:55 - 00000225 _____ () C:\Windows\RCD.xml
2014-01-03 22:17 - 2012-03-24 02:58 - 00000000 ____D () C:\Windows\Panther
2014-01-03 22:17 - 2009-07-14 05:46 - 00005075 _____ () C:\Windows\DtcInstall.log
2014-01-03 22:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-01-03 22:11 - 2014-01-04 06:13 - 00000267 _____ () C:\Windows\LaunApp.ini
2014-01-03 22:10 - 2014-01-03 22:10 - 00000000 ____D () C:\ProgramData\EgisTec
2014-01-03 22:06 - 2014-01-03 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-03 22:05 - 2014-01-04 06:14 - 00001964 _____ () C:\Windows\Patch.log
2014-01-03 22:05 - 2011-02-12 04:43 - 00000000 ____D () C:\Windows\DeployWinRE2
2014-01-03 22:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ___HD () C:\BOOK
2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ____D () C:\Windows\System32\Tasks\Recovery Management
2014-01-03 22:04 - 2012-06-05 16:47 - 00000000 ____D () C:\Program Files\Acer
2014-01-03 22:04 - 2012-06-05 16:47 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-01-03 22:04 - 2012-06-05 15:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-03 22:03 - 2014-01-03 22:03 - 00062776 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDVDisk.sys
2014-01-03 22:03 - 2014-01-03 22:03 - 00022648 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDFilter.sys
2014-01-03 22:03 - 2014-01-03 22:03 - 00020520 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDNserv.sys
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\ProgramData\EgisTec IPS
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files\EgisTec IPS
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec Shredder
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLocker
2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec IPS
2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLockerSuite
2014-01-03 21:59 - 2014-01-03 21:59 - 00003200 _____ () C:\Windows\System32\Tasks\DeviceDetector
2014-01-03 21:58 - 2014-01-03 21:56 - 00000000 ____D () C:\Program Files (x86)\Cyberlink
2014-01-03 21:56 - 2014-01-03 21:53 - 00002454 _____ () C:\ProgramData\clear.fiSDK20.log
2014-01-03 21:56 - 2014-01-03 21:53 - 00000000 ____D () C:\ProgramData\CyberLink
2014-01-03 21:55 - 2014-01-03 21:55 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Photo.lnk
2014-01-03 21:55 - 2014-01-03 21:55 - 00000032 _____ () C:\ProgramData\PS.log
2014-01-03 21:55 - 2014-01-03 21:54 - 00000000 ____D () C:\ProgramData\CLSK
2014-01-03 21:55 - 2014-01-03 21:53 - 00000000 ____D () C:\ProgramData\clear.fi
2014-01-03 21:54 - 2014-01-03 21:54 - 00000000 ____D () C:\ProgramData\install_clap
2014-01-03 21:53 - 2014-01-03 21:53 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Media.lnk
2014-01-03 21:52 - 2014-01-03 21:52 - 00000000 ____D () C:\ProgramData\Synaptics
2014-01-03 21:52 - 2014-01-03 21:42 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2014-01-03 21:52 - 2014-01-03 21:41 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-01-03 21:52 - 2014-01-03 21:41 - 00000000 ____D () C:\Windows\system32\NV
2014-01-03 21:50 - 2014-01-03 21:50 - 00000184 _____ () C:\Windows\LMv4.UNI
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Program Files (x86)\Launch Manager
2014-01-03 21:50 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-01-03 21:49 - 2014-01-03 21:49 - 00006874 _____ () C:\Windows\DPINST.LOG
2014-01-03 21:49 - 2014-01-03 21:49 - 00001360 _____ () C:\Windows\Synaptics.log
2014-01-03 21:49 - 2014-01-03 21:49 - 00000032 _____ () C:\Windows\SysWOW64\setup.log
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Windows\system32\nn-NO
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files\Synaptics
2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files (x86)\Atheros
2014-01-03 21:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-01-03 21:48 - 2014-01-03 21:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf
2014-01-03 21:46 - 2012-03-08 16:49 - 00246804 _____ () C:\Windows\system32\Drivers\AtherosBt.bin
2014-01-03 21:46 - 2012-03-08 16:49 - 00001796 _____ () C:\Windows\system32\Drivers\ramps_0x11020000_40.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001434 _____ () C:\Windows\system32\Drivers\ramps_0x31010000_40.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001242 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x01.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001228 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x04.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001214 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x03.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001204 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x02.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001204 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001198 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_26.dfu
2014-01-03 21:46 - 2012-03-08 16:49 - 00001192 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_26_0x01.dfu
2014-01-03 21:44 - 2014-01-03 21:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-01-03 21:44 - 2014-01-03 21:33 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Dolby PCEE4
2014-01-03 21:42 - 2014-01-03 21:42 - 00003492 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2014-01-03 21:42 - 2014-01-03 21:42 - 00003188 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon
2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\ProgramData\Intel
2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Realtek
2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Intel
2014-01-03 21:42 - 2014-01-03 21:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-03 21:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-01-03 21:41 - 2014-01-03 21:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-03 21:40 - 2014-01-03 21:40 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-01-03 21:40 - 2014-01-03 21:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-03 21:39 - 2014-01-03 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-03 21:36 - 2014-01-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-01-03 21:36 - 2014-01-03 21:33 - 00000000 ___HD () C:\Intel
2014-01-03 21:35 - 2009-07-14 05:45 - 00283104 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-03 21:28 - 2012-03-24 02:00 - 00005949 _____ () C:\Windows\TSSysprep.log

Files to move or delete:
====================
C:\Windows\system32\nvinitx.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-03-24 01:59

==================== End Of Log ============================
         
--- --- ---
__________________

Alt 02.03.2014, 01:38   #4
globelblade
 
Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) - Standard

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-03-2014
Ran by Devil at 2014-01-04 01:09:23
Running from C:\Users\Devil\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2728.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.2728.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Instant Update Service (HKLM\...\{36674AE9-6D3D-48D6-BC7B-209F556D65EE}) (Version: 1.00.3004 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX 64-bit (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.2.202.222 - Adobe Systems Incorporated)
Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros)
Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Atheros)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2008 - Avast Software)
Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.1.2 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.1.2 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kobo (HKLM-x32\...\Kobo) (Version: 2.1.5 - Kobo Inc.)
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 25.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 de)) (Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 25.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 296.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 296.16 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.62.312 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.7.12 (Version: 1.7.12 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)
NVIDIA Systemsteuerung 296.16 (Version: 296.16 - NVIDIA Corporation) Hidden
NVIDIA Update 1.7.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.7.12 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.7.12 - NVIDIA Corporation) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Process Hacker 2.32 (r5524) (HKLM\...\Process_Hacker2_is1) (Version: 2.32.0.5524 - wj32)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6577 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27015 - Realtek Semiconductor Corp.)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 5.5 (HKLM-x32\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.117 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.2.0 - Synaptics Incorporated)
Tales of Lagoona (x32 Version: 2.2.0.98 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 29.1.2013 - BillP Studios)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points =========================

03-01-2014 23:36:02 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {318C3371-259E-4955-98FB-22D272C83B4A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {6B7EA3AB-EEEC-48DD-8E97-19681B068321} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated)
Task: {8C738521-6B6B-4AA7-BD61-DA827AE76DEF} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2012-01-18] (Acer)
Task: {9FB5491F-6BC5-4140-9098-EF474F9709EF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-05] (Adobe Systems Incorporated)
Task: {A9B74C1C-4A9D-4C31-B129-4B8FBD4BA617} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink)
Task: {C6BD63FB-72D1-4624-8F56-B0A7246EBF56} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Loaded Modules (whitelisted) =============

2009-01-21 16:45 - 2009-01-21 16:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2014-01-04 06:03 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-04-06 20:29 - 2012-04-06 20:29 - 00040552 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2012-04-06 20:29 - 2012-04-06 20:29 - 00022120 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2014-01-04 00:36 - 2014-03-01 19:29 - 02186240 _____ () C:\Program Files\AVAST Software\Avast\defs\14030102\algo.dll
2014-01-03 22:57 - 2014-01-03 22:57 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-01-03 21:42 - 2012-03-07 15:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/03/2014 11:12:23 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\servicing\TrustedInstaller.exe; Beschreibung = Windows Modules Installer; Fehler = 0x8007043c).

Error: (01/03/2014 11:10:38 PM) (Source: MsiInstaller) (User: Wohnung)
Description: Product: NTI Media Maker 9 -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.

Error: (01/03/2014 10:57:08 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708\instup.exe /sfx /sfxstorage:"C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708" /edition:1 /prod:ais ; Beschreibung = avast! antivirus system restore point; Fehler = 0x8007043c).


System errors:
=============
Error: (01/04/2014 01:04:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/03/2014 11:13:25 PM) (Source: DCOM) (User: )
Description: 1084VSS{0B5A2C52-3EB9-470A-96E2-6C6D4570E40F}

Error: (01/03/2014 11:07:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:07:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:06:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:04:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:04:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:03:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:03:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 11:03:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068


Microsoft Office Sessions:
=========================
Error: (01/03/2014 11:12:23 PM) (Source: System Restore)(User: )
Description: C:\Windows\servicing\TrustedInstaller.exeWindows Modules Installer0x8007043c

Error: (01/03/2014 11:10:38 PM) (Source: MsiInstaller)(User: Wohnung)
Description: Product: NTI Media Maker 9 -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/03/2014 10:57:08 PM) (Source: System Restore)(User: )
Description: C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708\instup.exe /sfx /sfxstorage:"C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708" /edition:1 /prod:ais avast! antivirus system restore point0x8007043c


==================== Memory info ===========================

Percentage of memory in use: 31%
Total physical RAM: 5937.6 MB
Available physical RAM: 4048.63 MB
Total Pagefile: 11873.39 MB
Available Pagefile: 9946.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:133.55 GB) (Free:95.97 GB) NTFS
Drive e: (05 Jan 2014) (CDROM) (Total:0.36 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 5B1FBFBC)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=134 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=312 GB) - (Type=07 NTFS)

==================== End ============================

Geändert von globelblade (02.03.2014 um 01:45 Uhr)

Alt 03.03.2014, 08:11   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) - Standard

Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)



Zitat:
IFEO\taskmgr.exe: [Debugger] "C:\Program Files\Process Hacker 2\ProcessHacker.exe"
Startup: C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_75627215.lnk
ShortcutTarget: _uninst_75627215.lnk -> C:\Users\Devil\AppData\Local\Temp\_uninst_75627215.bat ()
Kennst Du das? Wie genau kommst du darauf dass Du was hast was selbst Formatieren überleben sollte?

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)
entfernen, firewall, harddisk, log, malwarebytes, manipulation, ntoskrnl.exe, nvidia, object, problem, registry, rootkit, router, scan, security, shadow, software, start, system, system32, temp, treiber, trojaner, update, windows media player, winlogon, wmp




Ähnliche Themen: Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)


  1. digitale Signatur kann nicht überprüft werden bei Gmer-evtl. Rootkit?
    Log-Analyse und Auswertung - 06.04.2015 (7)
  2. Sers zusammen hab mir leider einen Trojaner auf dem Rechner eingefangen den ich auch nicht genau beschreiben kann
    Log-Analyse und Auswertung - 23.12.2013 (24)
  3. Rootkit, Bootkit, Rootkit.win32.tdss.ld4 - ich weiss nicht weiter..
    Log-Analyse und Auswertung - 18.03.2013 (1)
  4. Trojaner, evtl. Rootkit / Live Security Platinum
    Log-Analyse und Auswertung - 29.08.2012 (1)
  5. (2x) Abbild fehlerhaft bei Messenger-Start, evtl. Rootkit?
    Mülltonne - 23.07.2012 (1)
  6. Komme nicht mehr weiter - evtl. Rootkit, Avira kriegt ihn nicht weg
    Plagegeister aller Art und deren Bekämpfung - 12.07.2012 (3)
  7. Firewall schaltet sich aus, vermute Trojaner, weiss aber nicht wie ich ihn finde
    Plagegeister aller Art und deren Bekämpfung - 06.07.2012 (5)
  8. Verschlüsselungstrojaner evtl. V. 1.140 entfernt, aber Dateien verschlüsselt
    Log-Analyse und Auswertung - 10.06.2012 (4)
  9. Rootkit/Backdoor befall ist da aber nicht zu beseitigen
    Plagegeister aller Art und deren Bekämpfung - 18.11.2011 (4)
  10. habe ein virus und weiss nicht wie er heißt das einzige was ich dazu sagen kann ist das http://www1.
    Log-Analyse und Auswertung - 13.06.2011 (14)
  11. Evtl Trojaner Befall / Rootkit / a1vcwtl4.exe
    Log-Analyse und Auswertung - 09.01.2011 (2)
  12. Rootkit auf VMWare kann nicht entfernt werden
    Plagegeister aller Art und deren Bekämpfung - 02.05.2010 (1)
  13. Rootkit verdacht aber kann keine scanner installieren!
    Plagegeister aller Art und deren Bekämpfung - 23.01.2010 (16)
  14. Virus malware oder weis nicht was! kann nichts machen Sau frisst sich evtl. in Ram
    Plagegeister aller Art und deren Bekämpfung - 27.10.2009 (1)
  15. w32.Myzor.FK@yf ich weiss verbrauchtes thema aber trotzdem HILFE
    Log-Analyse und Auswertung - 21.02.2008 (2)
  16. Task(evtl. Trojaner) kann nicht beendet oder gelöscht werden
    Plagegeister aller Art und deren Bekämpfung - 12.04.2005 (13)
  17. Virus - weis nicht welches aber versuchs zu beschreiben
    Plagegeister aller Art und deren Bekämpfung - 03.02.2005 (1)

Zum Thema Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) - Hallo nettes Trojaner - Board - Team, ich hoffe Ihr könnt mir helfen, weil das Problem habe ich seit Weihnachten nicht im Griff bekommen ich probiere mal zu erläutern: Ich - Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)...
Archiv
Du betrachtest: Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.