Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 18.05.2014, 11:11   #1
Terxus
 
Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion - Standard

Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion



Hallo,

mein Vater hat vor einigen Tagen eine mail von abuse@telekom erhalten, die uns auf eine Aktivität des zbot Trojaners über unseren Anschluss hinwies. Es befinden sich im Haushalt derzeit 3 PCs aktiv im Gebrauch (+ ein weiterer der schon seit längerer Zeit nicht benutzt wurde), weshalb ich nicht weiß, welcher genau betroffen ist.

Ich fange einfach mal mit meinem an:

FRST Log:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-05-2014
Ran by Maik (administrator) on MAIK-PC on 18-05-2014 11:06:11
Running from C:\Users\Maik\Desktop
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe
(Dropbox, Inc.) C:\Users\Maik\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(BitTorrent Inc.) C:\Users\Maik\AppData\Roaming\uTorrent\uTorrent.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11930696 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM\...\Run: [IMSS] => C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation)
HKLM\...\Run: [USB3MON] => C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-11] (Intel Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-09] (AVAST Software)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2201032 2014-04-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [1081112 2014-04-02] (NVIDIA Corporation)
HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\Run: [chromium] => C:\Program Files\Google\Chrome\Application\chrome.exe [841032 2014-05-08] (Google Inc.)
HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\Run: [HP Photosmart 6520 series (NET)] => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\MountPoints2: {43d59fc9-89e0-11e3-aeed-806e6f6e6963} - E:\ASRSetup.exe
HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\MountPoints2: {7ff10c4c-89b0-11e3-aca0-806e6f6e6963} - E:\ASRSetup.exe
Startup: C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Maik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

Chrome: 
=======
CHR StartupUrls: "hxxp://www.sweet-page.com/?type=hp&ts=1393676136&from=cor&uid=ST3360320AS_6QF3KHRJXXXX6QF3KHRJ"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.137\pdf.dll ()
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
CHR Plugin: (         "name": "",) - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (         "name": "",) - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-03-30]
CHR Extension: (Google Docs) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-30]
CHR Extension: (Google Drive) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-30]
CHR Extension: (WOT) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-17]
CHR Extension: (NeoGAF Live Thread) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbfgndoggabppkoehpipfadjelcofmp [2014-01-30]
CHR Extension: (YouTube) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-30]
CHR Extension: (Google-Suche) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-30]
CHR Extension: (AdBlock) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-30]
CHR Extension: (avast! Online Security) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-30]
CHR Extension: (GWT Developer Plugin) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjpnpmbddbjkfaccnmhnkdgjideieim [2014-04-03]
CHR Extension: (Animal Crossing Music) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldjcaihhhmemeidcfbcadilcmfdaikkg [2014-01-30]
CHR Extension: (Google Wallet) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-30]
CHR Extension: (ScriptSafe) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2014-01-30]
CHR Extension: (Click&Clean App) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2014-03-30]
CHR Extension: (Google Mail) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-30]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-05-09]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-09] (AVAST Software)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [583680 2013-02-13] (Intel(R) Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [637912 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation)
S3 iumsvc; C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1615192 2014-04-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19405768 2014-04-02] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-09] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-05-15] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-09] ()
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-31] (Disc Soft Ltd)
R0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [538608 2013-04-30] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [26608 2013-04-30] (Intel Corporation)
R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-04-11] (Intel Corporation)
R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [359408 2013-04-11] (Intel Corporation)
R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [792560 2013-04-11] (Intel Corporation)
R3 MBfilt; C:\Windows\System32\drivers\MBfilt32.sys [24664 2009-11-18] (Creative Technology Ltd.)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [56432 2013-03-12] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-21] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-18 11:06 - 2014-05-18 11:06 - 00016847 _____ () C:\Users\Maik\Desktop\FRST.txt
2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\FRST
2014-05-18 11:05 - 2014-05-17 15:33 - 01056768 _____ (Farbar) C:\Users\Maik\Desktop\FRST.exe
2014-05-18 11:04 - 2014-05-18 11:04 - 00000540 _____ () C:\Users\Maik\Desktop\defogger_disable.log
2014-05-18 11:04 - 2014-05-18 11:04 - 00000156 _____ () C:\Users\Maik\defogger_reenable
2014-05-18 11:03 - 2014-05-17 15:31 - 00050477 _____ () C:\Users\Maik\Desktop\Defogger.exe
2014-05-17 18:49 - 2014-05-17 18:49 - 00017654 _____ () C:\Users\Maik\Downloads\Game Center CX Season 06.torrent
2014-05-17 17:33 - 2014-05-17 17:33 - 00014308 _____ () C:\Users\Maik\Downloads\Game Center CX Season 05.torrent
2014-05-17 15:12 - 2014-05-17 15:12 - 00657408 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50475.msi
2014-05-17 15:11 - 2014-05-17 15:11 - 00655360 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50471.msi
2014-05-17 14:49 - 2014-05-17 20:30 - 00000000 ____D () C:\Users\Maik\Desktop\zbotremoval
2014-05-17 07:13 - 2014-05-17 07:15 - 00000000 ____D () C:\Users\Maik\Desktop\Business Applications
2014-05-15 08:47 - 2014-05-15 08:47 - 00018840 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 06 [EB52DFA3].mkv.torrent
2014-05-15 08:47 - 2014-05-15 08:47 - 00012039 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 06 [769F0D72].mkv.torrent
2014-05-15 03:01 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 03:01 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 03:01 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 13:04 - 2014-05-14 13:04 - 00000000 ____D () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30
2014-05-14 13:03 - 2014-05-14 13:03 - 04058136 _____ () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30.zip
2014-05-14 13:02 - 2014-05-14 13:02 - 00000000 ____D () C:\Program Files\MySQL
2014-05-14 13:00 - 2014-05-14 13:01 - 06348288 _____ () C:\Users\Maik\Desktop\mysql-connector-java-gpl-5.1.30.msi
2014-05-14 04:13 - 2014-05-09 09:06 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 04:13 - 2014-05-09 09:04 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 04:13 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 04:13 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 04:13 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 04:13 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 04:13 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 04:13 - 2014-04-12 04:11 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 04:13 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 04:13 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 04:13 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-05-14 04:13 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 04:13 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 04:13 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 04:13 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wwPacker
2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Program Files\wwPacker
2014-05-12 20:55 - 2014-05-12 20:55 - 00000000 ____D () C:\Users\Maik\AppData\Local\Microsoft_Corporation
2014-05-12 20:50 - 2014-05-12 20:50 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\NuGet
2014-05-12 20:41 - 2014-05-12 20:48 - 00000000 ____D () C:\Users\Maik\Documents\Visual Studio 2013
2014-05-12 20:39 - 2014-05-15 07:09 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-12 20:39 - 2014-05-14 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-12 20:38 - 2014-05-12 20:38 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-05-12 20:35 - 2014-05-12 20:36 - 00000000 ____D () C:\Program Files\Windows Kits
2014-05-12 20:30 - 2014-05-12 20:30 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer
2014-05-12 20:29 - 2014-05-17 15:42 - 00000000 ____D () C:\Windows\system32\1031
2014-05-12 20:29 - 2014-05-12 20:29 - 00000000 ____D () C:\Windows\system32\1033
2014-05-12 20:26 - 2014-05-17 15:48 - 00000000 ____D () C:\Program Files\Microsoft SDKs
2014-05-12 20:25 - 2014-05-17 15:48 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0
2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143.sdx
2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143 (1).sdx
2014-05-12 18:55 - 2014-05-12 18:55 - 00090823 _____ () C:\Users\Maik\Downloads\delicious-123.zip
2014-05-12 18:32 - 2014-05-12 18:32 - 00000183 _____ () C:\Users\Maik\Downloads\100292801522.sdx
2014-05-12 11:54 - 2014-05-12 11:54 - 00000000 ____D () C:\Users\Maik\Downloads\PinkHourEn-v1063
2014-05-12 11:53 - 2014-05-12 11:53 - 01155893 _____ () C:\Users\Maik\Downloads\PinkHourEn-v1063.zip
2014-05-11 22:18 - 2014-05-11 22:44 - 00000000 ____D () C:\Users\Maik\Desktop\Daimler Bewerbung
2014-05-09 20:34 - 2014-05-09 20:34 - 00020626 _____ () C:\Users\Maik\Downloads\[T-N]GameCenterCX2ndSeason.torrent
2014-05-09 12:41 - 2014-05-09 12:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-09 12:41 - 2014-05-09 12:41 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-07 03:01 - 2014-05-15 03:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 15:05 - 2014-05-06 15:05 - 00013139 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 05 [A26F06D2].mkv.torrent
2014-05-06 14:00 - 2014-05-06 14:00 - 01063705 _____ () C:\Users\Maik\Downloads\01-1-DatenModellierung.pptx
2014-05-05 21:05 - 2014-05-05 21:05 - 03104214 _____ () C:\Users\Maik\Documents\OLAP.xlsx
2014-05-04 21:53 - 2014-05-04 21:53 - 00015119 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 04 [3837093A].mkv.torrent
2014-05-04 21:52 - 2014-05-04 21:52 - 00011300 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 05 [C0D8C172].mkv.torrent
2014-05-04 13:04 - 2014-05-04 13:04 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-01 10:38 - 2014-05-01 10:38 - 00909257 _____ () C:\Users\Maik\Downloads\Devices_HiRes_Web_All.zip
2014-04-30 10:42 - 2014-03-21 21:43 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2014-04-30 10:37 - 2014-04-30 10:43 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA Corporation
2014-04-30 10:36 - 2014-04-30 10:38 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA
2014-04-30 10:36 - 2014-04-02 15:27 - 01081112 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-04-30 10:35 - 2014-05-18 08:15 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-30 10:35 - 2014-04-30 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-30 10:35 - 2014-04-30 10:35 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-04-30 10:35 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-04-30 10:34 - 2014-03-04 16:29 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-04-30 10:34 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-04-30 10:34 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-04-30 10:34 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-04-30 10:34 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-04-30 10:34 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-04-30 10:34 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-04-30 10:34 - 2014-03-04 07:35 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-04-30 10:31 - 2014-03-21 21:43 - 00033568 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 23716640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 17559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 15783992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 14709720 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 10523480 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-04-30 10:31 - 2014-03-04 16:29 - 09728064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 09690424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 02956632 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 02715264 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 02411976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233523.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00894296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233523.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00865224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00847136 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00832936 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshim.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00305600 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00148016 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll
2014-04-30 10:31 - 2014-03-04 16:29 - 00019204 _____ () C:\Windows\system32\nvinfo.pb
2014-04-30 10:31 - 2013-11-28 15:38 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-04-30 10:31 - 2013-11-28 15:38 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-04-30 10:31 - 2013-11-22 10:36 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-04-28 08:47 - 2014-04-28 08:47 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-28 08:47 - 2014-04-28 08:47 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-28 08:47 - 2014-04-28 08:47 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-28 08:47 - 2014-04-28 08:47 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-28 08:47 - 2014-04-28 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-28 08:45 - 2014-04-28 08:46 - 00921512 _____ (Oracle Corporation) C:\Users\Maik\Downloads\chromeinstall-7u55.exe
2014-04-28 08:36 - 2014-04-28 08:36 - 00000000 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-04-27 16:48 - 2014-05-17 17:23 - 00000000 ____D () C:\Users\Maik\Documents\Praktikum
2014-04-27 16:33 - 2014-05-04 16:49 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\HpUpdate
2014-04-27 16:33 - 2014-04-27 16:33 - 00002248 _____ () C:\Users\Public\Desktop\HP Photosmart 6520 series.lnk
2014-04-27 16:33 - 2014-04-27 16:33 - 00001180 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 6520 series.lnk
2014-04-27 16:33 - 2014-04-27 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-04-27 16:33 - 2012-10-17 04:04 - 00580712 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMAF11.dll
2014-04-27 16:32 - 2014-04-27 16:35 - 00000000 ____D () C:\Users\Maik\AppData\Local\HP
2014-04-27 16:32 - 2014-04-27 16:33 - 00000000 ____D () C:\Program Files\HP
2014-04-27 16:32 - 2014-04-27 16:32 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-04-27 16:32 - 2014-04-27 16:32 - 00000000 ____D () C:\ProgramData\HP
2014-04-27 16:27 - 2014-04-27 16:29 - 72335864 _____ () C:\Users\Maik\Downloads\PS6520_1315.exe
2014-04-26 20:53 - 2014-04-26 20:53 - 00018880 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 04 [F7AB09E3].mkv.torrent
2014-04-25 11:51 - 2014-04-25 11:57 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\ImgBurn
2014-04-25 11:17 - 2014-04-25 11:17 - 00001827 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2014-04-25 11:17 - 2014-04-25 11:17 - 00001815 _____ () C:\Users\Public\Desktop\ImgBurn.lnk
2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\Program Files\ImgBurn
2014-04-25 11:12 - 2014-04-25 11:14 - 03469871 _____ (LIGHTNING UK!) C:\Users\Maik\Downloads\SetupImgBurn_2.5.8.0.exe
2014-04-25 10:45 - 2014-05-12 19:45 - 00014072 _____ () C:\Users\Maik\Downloads\SecureDownloadManager.log
2014-04-25 10:45 - 2014-04-25 10:45 - 00000183 _____ () C:\Users\Maik\Downloads\100288449952.sdx
2014-04-25 10:44 - 2014-04-25 10:44 - 00720896 _____ () C:\Users\Maik\Downloads\SDM_DE.msi
2014-04-25 10:44 - 2014-04-25 10:44 - 00003133 _____ () C:\Users\Maik\Desktop\Secure Download Manager.lnk
2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\e-academy Inc
2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Local\e-academy Inc
2014-04-25 02:16 - 2014-04-25 02:16 - 01070232 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX
2014-04-23 03:01 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-23 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-23 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-23 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-23 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-23 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-23 03:01 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 03:01 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-23 03:01 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-23 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-23 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-23 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-23 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-23 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-23 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-23 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-23 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-23 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-21 21:53 - 2014-04-21 21:53 - 00013097 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 03 [A0A2B473].mkv.torrent
2014-04-20 19:35 - 2014-04-20 19:35 - 00015718 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 03 [4553DD44].mkv.torrent

==================== One Month Modified Files and Folders =======

2014-05-18 11:06 - 2014-05-18 11:06 - 00016847 _____ () C:\Users\Maik\Desktop\FRST.txt
2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\FRST
2014-05-18 11:06 - 2014-01-30 18:33 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\uTorrent
2014-05-18 11:04 - 2014-05-18 11:04 - 00000540 _____ () C:\Users\Maik\Desktop\defogger_disable.log
2014-05-18 11:04 - 2014-05-18 11:04 - 00000156 _____ () C:\Users\Maik\defogger_reenable
2014-05-18 11:04 - 2014-01-30 21:03 - 00000000 ____D () C:\Users\Maik
2014-05-18 11:03 - 2014-01-30 17:21 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Skype
2014-05-18 10:48 - 2014-01-30 21:06 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-18 09:57 - 2014-01-30 21:03 - 01617228 _____ () C:\Windows\WindowsUpdate.log
2014-05-18 08:23 - 2009-07-14 06:34 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-18 08:23 - 2009-07-14 06:34 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-18 08:22 - 2014-01-31 16:14 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-18 08:21 - 2014-02-03 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-05-18 08:18 - 2014-01-30 17:15 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 08:17 - 2014-01-30 17:19 - 00000000 ___RD () C:\Users\Maik\Dropbox
2014-05-18 08:17 - 2014-01-30 17:17 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Dropbox
2014-05-18 08:15 - 2014-04-30 10:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-18 08:15 - 2014-01-30 21:06 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-18 08:15 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-18 08:15 - 2009-07-14 06:39 - 00040278 _____ () C:\Windows\setupact.log
2014-05-17 20:30 - 2014-05-17 14:49 - 00000000 ____D () C:\Users\Maik\Desktop\zbotremoval
2014-05-17 19:10 - 2014-01-30 17:28 - 00000000 ____D () C:\Users\Maik\Desktop\Maik
2014-05-17 18:49 - 2014-05-17 18:49 - 00017654 _____ () C:\Users\Maik\Downloads\Game Center CX Season 06.torrent
2014-05-17 17:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-17 17:33 - 2014-05-17 17:33 - 00014308 _____ () C:\Users\Maik\Downloads\Game Center CX Season 05.torrent
2014-05-17 17:23 - 2014-04-27 16:48 - 00000000 ____D () C:\Users\Maik\Documents\Praktikum
2014-05-17 15:58 - 2010-11-20 23:01 - 01621742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-17 15:49 - 2014-01-30 18:21 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-17 15:49 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-17 15:48 - 2014-05-12 20:26 - 00000000 ____D () C:\Program Files\Microsoft SDKs
2014-05-17 15:48 - 2014-05-12 20:25 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0
2014-05-17 15:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-17 15:43 - 2014-02-03 18:08 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-17 15:42 - 2014-05-12 20:29 - 00000000 ____D () C:\Windows\system32\1031
2014-05-17 15:33 - 2014-05-18 11:05 - 01056768 _____ (Farbar) C:\Users\Maik\Desktop\FRST.exe
2014-05-17 15:31 - 2014-05-18 11:03 - 00050477 _____ () C:\Users\Maik\Desktop\Defogger.exe
2014-05-17 15:12 - 2014-05-17 15:12 - 00657408 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50475.msi
2014-05-17 15:11 - 2014-05-17 15:11 - 00655360 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50471.msi
2014-05-17 07:15 - 2014-05-17 07:13 - 00000000 ____D () C:\Users\Maik\Desktop\Business Applications
2014-05-16 08:53 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-15 22:51 - 2014-01-30 17:11 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-15 17:05 - 2014-01-30 17:05 - 00777488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-05-15 17:05 - 2014-01-30 17:05 - 00411680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-05-15 17:05 - 2014-01-30 17:05 - 00068312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-15 09:00 - 2014-03-13 09:48 - 00000000 ____D () C:\Users\Maik\Desktop\Plauschangriff
2014-05-15 08:47 - 2014-05-15 08:47 - 00018840 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 06 [EB52DFA3].mkv.torrent
2014-05-15 08:47 - 2014-05-15 08:47 - 00012039 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 06 [769F0D72].mkv.torrent
2014-05-15 08:30 - 2014-04-03 12:54 - 00000000 ____D () C:\Users\Maik\AppData\Local\Eclipse
2014-05-15 08:30 - 2014-04-03 12:50 - 00000000 ____D () C:\Program Files\eclipse
2014-05-15 07:09 - 2014-05-12 20:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-15 03:26 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 03:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-05-15 03:03 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2014-05-14 13:44 - 2014-04-03 12:54 - 00000000 ____D () C:\Users\Maik\workspace
2014-05-14 13:35 - 2014-04-05 22:12 - 00000000 ____D () C:\Users\Maik\git
2014-05-14 13:04 - 2014-05-14 13:04 - 00000000 ____D () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30
2014-05-14 13:03 - 2014-05-14 13:03 - 04058136 _____ () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30.zip
2014-05-14 13:02 - 2014-05-14 13:02 - 00000000 ____D () C:\Program Files\MySQL
2014-05-14 13:01 - 2014-05-14 13:00 - 06348288 _____ () C:\Users\Maik\Desktop\mysql-connector-java-gpl-5.1.30.msi
2014-05-14 03:02 - 2014-05-12 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-13 22:35 - 2014-01-30 17:19 - 00001013 _____ () C:\Users\Maik\Desktop\Dropbox.lnk
2014-05-13 22:35 - 2014-01-30 17:18 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wwPacker
2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Program Files\wwPacker
2014-05-12 20:55 - 2014-05-12 20:55 - 00000000 ____D () C:\Users\Maik\AppData\Local\Microsoft_Corporation
2014-05-12 20:55 - 2014-02-03 18:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-05-12 20:50 - 2014-05-12 20:50 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\NuGet
2014-05-12 20:48 - 2014-05-12 20:41 - 00000000 ____D () C:\Users\Maik\Documents\Visual Studio 2013
2014-05-12 20:38 - 2014-05-12 20:38 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-05-12 20:36 - 2014-05-12 20:35 - 00000000 ____D () C:\Program Files\Windows Kits
2014-05-12 20:30 - 2014-05-12 20:30 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer
2014-05-12 20:29 - 2014-05-12 20:29 - 00000000 ____D () C:\Windows\system32\1033
2014-05-12 20:27 - 2014-01-30 17:52 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-05-12 19:45 - 2014-04-25 10:45 - 00014072 _____ () C:\Users\Maik\Downloads\SecureDownloadManager.log
2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143.sdx
2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143 (1).sdx
2014-05-12 18:55 - 2014-05-12 18:55 - 00090823 _____ () C:\Users\Maik\Downloads\delicious-123.zip
2014-05-12 18:32 - 2014-05-12 18:32 - 00000183 _____ () C:\Users\Maik\Downloads\100292801522.sdx
2014-05-12 11:54 - 2014-05-12 11:54 - 00000000 ____D () C:\Users\Maik\Downloads\PinkHourEn-v1063
2014-05-12 11:53 - 2014-05-12 11:53 - 01155893 _____ () C:\Users\Maik\Downloads\PinkHourEn-v1063.zip
2014-05-11 22:44 - 2014-05-11 22:18 - 00000000 ____D () C:\Users\Maik\Desktop\Daimler Bewerbung
2014-05-09 20:34 - 2014-05-09 20:34 - 00020626 _____ () C:\Users\Maik\Downloads\[T-N]GameCenterCX2ndSeason.torrent
2014-05-09 12:42 - 2014-01-30 17:05 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-09 12:41 - 2014-05-09 12:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-09 12:41 - 2014-05-09 12:41 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-09 12:41 - 2014-01-30 17:05 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1400166343318
2014-05-09 12:41 - 2014-01-30 17:05 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1400166343318
2014-05-09 12:41 - 2014-01-30 17:05 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-09 12:41 - 2014-01-30 17:05 - 00180632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-09 12:41 - 2014-01-30 17:05 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-09 12:41 - 2014-01-30 17:05 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-09 12:41 - 2014-01-30 17:05 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-09 09:06 - 2014-05-14 04:13 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 09:04 - 2014-05-14 04:13 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 15:05 - 2014-05-06 15:05 - 00013139 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 05 [A26F06D2].mkv.torrent
2014-05-06 14:00 - 2014-05-06 14:00 - 01063705 _____ () C:\Users\Maik\Downloads\01-1-DatenModellierung.pptx
2014-05-06 05:25 - 2014-05-15 03:01 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 05:07 - 2014-05-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 04:10 - 2014-05-15 03:01 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-05 21:05 - 2014-05-05 21:05 - 03104214 _____ () C:\Users\Maik\Documents\OLAP.xlsx
2014-05-04 21:53 - 2014-05-04 21:53 - 00015119 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 04 [3837093A].mkv.torrent
2014-05-04 21:52 - 2014-05-04 21:52 - 00011300 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 05 [C0D8C172].mkv.torrent
2014-05-04 18:13 - 2014-01-30 21:15 - 00000000 ____D () C:\ProgramData\Intel
2014-05-04 16:49 - 2014-04-27 16:33 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\HpUpdate
2014-05-04 13:04 - 2014-05-04 13:04 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-04 13:04 - 2014-01-30 21:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-04 13:04 - 2014-01-30 21:07 - 00000000 ____D () C:\Program Files\Intel
2014-05-01 15:12 - 2014-04-02 18:58 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\TS3Client
2014-05-01 10:38 - 2014-05-01 10:38 - 00909257 _____ () C:\Users\Maik\Downloads\Devices_HiRes_Web_All.zip
2014-04-30 10:49 - 2014-04-30 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-30 10:43 - 2014-04-30 10:37 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA Corporation
2014-04-30 10:42 - 2014-01-30 16:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-30 10:42 - 2014-01-30 16:54 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-30 10:38 - 2014-04-30 10:36 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA
2014-04-30 10:35 - 2014-04-30 10:35 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-04-30 10:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-04-28 08:47 - 2014-04-28 08:47 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-28 08:47 - 2014-04-28 08:47 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-28 08:47 - 2014-04-28 08:47 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-28 08:47 - 2014-04-28 08:47 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-28 08:47 - 2014-04-28 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-28 08:47 - 2014-02-06 17:36 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-28 08:46 - 2014-04-28 08:45 - 00921512 _____ (Oracle Corporation) C:\Users\Maik\Downloads\chromeinstall-7u55.exe
2014-04-28 08:36 - 2014-04-28 08:36 - 00000000 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-04-28 08:36 - 2014-01-30 18:38 - 00000000 ____D () C:\Program Files\Java
2014-04-28 00:31 - 2014-02-04 14:07 - 00009606 _____ () C:\Users\Maik\Documents\Spieleliste2014.xlsx
2014-04-27 20:57 - 2010-11-20 23:48 - 00115868 _____ () C:\Windows\PFRO.log
2014-04-27 18:14 - 2014-01-30 19:01 - 00000000 ____D () C:\Users\Maik\Documents\Studium
2014-04-27 16:35 - 2014-04-27 16:32 - 00000000 ____D () C:\Users\Maik\AppData\Local\HP
2014-04-27 16:33 - 2014-04-27 16:33 - 00002248 _____ () C:\Users\Public\Desktop\HP Photosmart 6520 series.lnk
2014-04-27 16:33 - 2014-04-27 16:33 - 00001180 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 6520 series.lnk
2014-04-27 16:33 - 2014-04-27 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-04-27 16:33 - 2014-04-27 16:32 - 00000000 ____D () C:\Program Files\HP
2014-04-27 16:32 - 2014-04-27 16:32 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-04-27 16:32 - 2014-04-27 16:32 - 00000000 ____D () C:\ProgramData\HP
2014-04-27 16:32 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32
2014-04-27 16:29 - 2014-04-27 16:27 - 72335864 _____ () C:\Users\Maik\Downloads\PS6520_1315.exe
2014-04-26 20:53 - 2014-04-26 20:53 - 00018880 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 04 [F7AB09E3].mkv.torrent
2014-04-26 09:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Cursors
2014-04-25 11:57 - 2014-04-25 11:51 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\ImgBurn
2014-04-25 11:17 - 2014-04-25 11:17 - 00001827 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2014-04-25 11:17 - 2014-04-25 11:17 - 00001815 _____ () C:\Users\Public\Desktop\ImgBurn.lnk
2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\Program Files\ImgBurn
2014-04-25 11:14 - 2014-04-25 11:12 - 03469871 _____ (LIGHTNING UK!) C:\Users\Maik\Downloads\SetupImgBurn_2.5.8.0.exe
2014-04-25 10:45 - 2014-04-25 10:45 - 00000183 _____ () C:\Users\Maik\Downloads\100288449952.sdx
2014-04-25 10:44 - 2014-04-25 10:44 - 00720896 _____ () C:\Users\Maik\Downloads\SDM_DE.msi
2014-04-25 10:44 - 2014-04-25 10:44 - 00003133 _____ () C:\Users\Maik\Desktop\Secure Download Manager.lnk
2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\e-academy Inc
2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Local\e-academy Inc
2014-04-25 02:16 - 2014-04-25 02:16 - 01070232 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX
2014-04-21 21:53 - 2014-04-21 21:53 - 00013097 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 03 [A0A2B473].mkv.torrent
2014-04-20 19:35 - 2014-04-20 19:35 - 00015718 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 03 [4553DD44].mkv.torrent

Some content of TEMP:
====================
C:\Users\Maik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpap9cgr.dll
C:\Users\Maik\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Maik\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Maik\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Maik\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Maik\AppData\Local\Temp\nvStInst.exe
C:\Users\Maik\AppData\Local\Temp\ose00000.exe
C:\Users\Maik\AppData\Local\Temp\ose00001.exe
C:\Users\Maik\AppData\Local\Temp\PidGenX.dll
C:\Users\Maik\AppData\Local\Temp\Quarantine.exe
C:\Users\Maik\AppData\Local\Temp\vcredist_2013_x86.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe
[2014-05-14 04:13] - [2014-03-04 11:17] - 0304128 ____A (Microsoft Corporation) 998507B046BA314CE8245364C686FA67

C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 02:37

==================== End Of Log ============================
         
Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version:17-05-2014
Ran by Maik at 2014-05-18 11:06:40
Running from C:\Users\Maik\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.31139 - BitTorrent Inc.)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2018 - Avast Software)
Battle.net (HKLM\...\Battle.net) (Version:  - Blizzard Entertainment)
Blender (HKLM\...\Blender) (Version: 2.70 - Blender Foundation)
CrystalDiskInfo 6.1.1 (HKLM\...\CrystalDiskInfo_is1) (Version: 6.1.1 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{341FFD7F-3127-466D-88F7-CE4DE78A48F1}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)
Entity Framework Tools for Visual Studio 2013 (HKLM\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
Erforderliche Komponenten für SSDT  (HKLM\...\{3FF082A7-A5DE-4BDA-B56A-1D2BEFD617A3}) (Version: 11.1.3000.0 - Microsoft Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Hearthstone (HKLM\...\Hearthstone) (Version:  - Blizzard Entertainment)
HP Photosmart 6520 series - Grundlegende Software für das Gerät (HKLM\...\{EE3D7A4C-CEA2-4ECA-A456-7A3F3F7D3270}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.6.0.1033 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.102 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
KCP-0.5.5.4 (HKLM\...\Kawaii Codec Pack_is1) (Version: 0.5.5.4 - Haruhichan.com)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM\...\{21B0F482-5EF9-45DA-8840-340AFE705A6C}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft AppLocale (HKLM\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.1 (HKLM\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (Version: 2.1.21005 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.1 Sprachpaket - DEU (HKLM\...\Microsoft Help Viewer 2.1 Sprachpaket - DEU) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 Sprachpaket - DEU (Version: 2.1.21005 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{E41DF93D-DC9B-4B22-A968-07077C574E43}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{D4E30517-FE6F-491E-942F-AE10E1B18F38}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{7401A902-8F22-4C66-9FE4-CAC3373DFD06}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM\...\{EC75BD20-F9CA-4E77-825F-ABD77E95BE91}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{CAAD4A3A-27DE-4506-93AB-A016D9064945}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{387C998E-3990-4503-91BF-88A7D5873EEB}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL-Sprachdienst  (HKLM\...\{1D812D86-D8EF-41AC-A518-BA12E1913747}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 DEU (HKLM\...\{7CC4FADE-70AC-4560-9418-639D71A4767C}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (12.0.30919.1) (HKLM\...\{7CC03C58-3471-43D2-A251-EC9AE225E772}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM\...\{D434E072-F482-4F52-AB97-7B19DD5DAEB5}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version:  - )
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM\...\{43341417-7882-4F34-8390-53DFD00F6C0F}) (Version: 11.1.3366.16 - Microsoft Corporation)
MySQL Connector J (HKLM\...\{9B0DB369-396B-4A81-94FE-5631916D6C6F}) (Version: 5.1.30 - Oracle Corporation)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.55 (Version: 12.4.55 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.55 (Version: 12.4.55 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.55 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.22 (Version: 1.2.22 - NVIDIA Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation)
PCSX2 - Playstation 2 Emulator (HKLM\...\pcsx2-r5875) (Version:  - )
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.68.201.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.)
Secure Download Manager (HKLM\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.)
SHIELD Streaming (Version: 1.8.323 - NVIDIA Corporation) Hidden
Skype™ 6.13 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.13.104 - Skype Technologies S.A.)
Steam (HKLM\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer)
The Binding of Isaac (HKLM\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)
Update for  (KB2504637) (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition (HKLM\...\{90150000-0015-0407-0000-0000000FF1CE}_Office15.PROPLUS_{02DD2FBD-76D9-4B8B-AAE6-657542F4F6E6}) (Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FB31ABE4-BB41-4E9A-A252-1A4BC9DC8C43}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{F15AA550-A0B9-44AD-9067-2294CCA51F1C}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7FBE2D23-9F3C-4983-B927-2A4BF600B7A7}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2880980) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A10C00F8-0A83-4A74-86C5-3D0F9879E101}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2880980) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{A10C00F8-0A83-4A74-86C5-3D0F9879E101}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F307363-49DA-4AE7-9D9D-DAA1FF59274F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6E6B2968-B9D7-40C9-9FC2-8E729DDBB39C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{49893259-C896-4972-9B6C-6B75790945F1}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AFDC9BDD-5608-4A21-8066-13E2ACE1EDB4}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F8AD68D-9F41-446E-AA81-C43BF88671BF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCD0EA38-A8FB-4F3D-B04E-DFFB38BC7849}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9E03AB38-EF60-4DE6-92FB-656E23403BFA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{E58009CD-D950-4CAE-89B4-E97C3B78319B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{03FC8649-9511-4FB1-BE34-67A442505DCF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B299B17D-874D-43DD-84AA-414BD9C70021}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{65D789FD-9118-45AF-8DE4-F49F358A8525}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{B9DB28D9-15D0-4DDE-A123-C9B82AC9A579}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5EFADE14-CE0B-43BF-ADD2-850FCB79485F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{8E942418-D7DE-48A4-8210-AD994006EFAA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{188DFB16-BA3F-4AD3-9432-45C8FA64EC8B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B7EA8070-C37F-4617-82F4-52CF3304595A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C5CF8938-646A-41A5-A4E6-6EEE4205CBA4}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{954A0EA5-CCCB-4B4E-8664-40E2CC8BBCBB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4B1A48FA-CAE2-49BB-A912-6F96AE7875D9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9BC5FF1D-9626-44D7-BC7F-EB44BD8BDB9F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863825) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{96754DD8-5AF9-4CF8-A5A9-19770CD9AFBC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863844) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{8AEAF88E-A488-4C1E-B10D-F00143BA650F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{06EF2BF7-7351-4D70-A0D5-588FCCF9808D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880476) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{DDF64A37-8E32-406E-A94C-9F5B03661A21}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2880480) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7655E7AA-268C-4F74-AC05-8D56F75C664A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2880480) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7655E7AA-268C-4F74-AC05-8D56F75C664A}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUS_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2878315) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{47A62B15-D0BF-4A2E-BCE2-939DB491D387}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2878315) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{47A62B15-D0BF-4A2E-BCE2-939DB491D387}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2726952) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{173C8CEB-B73E-4C38-AF3A-05EA5BB860D4}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2726952) 32-Bit Edition (HKLM\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUS_{173C8CEB-B73E-4C38-AF3A-05EA5BB860D4}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{166909FC-6736-4EE5-9491-1BF9A4EE84E7}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A7CD05CC-CA85-428C-91FD-74A908D126E1}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
WinRAR 5.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

14-05-2014 01:00:11 Windows Update
14-05-2014 11:01:07 Installed MySQL Connector J
15-05-2014 01:01:01 Windows Update
17-05-2014 13:12:09 Installed Microsoft Fix it 50471
17-05-2014 13:30:42 Microsoft Visual Studio Professional 2013
18-05-2014 06:20:01 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {133F78AF-81D8-4F58-B1FE-EA8C4FCF9173} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {1D0E6321-4F51-403F-A798-69915083C272} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-30] (Google Inc.)
Task: {285C9968-36C7-40CD-985A-A061FEEB3F18} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {42A6AFB0-A703-4768-994A-CCE038A148ED} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {5D251ED6-AA5E-40A7-80CE-7CC4D5C1363E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-09] (AVAST Software)
Task: {AEC932FB-575F-4626-874E-D9EE9E4C42D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-30] (Google Inc.)
Task: {BBA31198-D566-477D-88F1-7427D989B4DE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {D21051FA-C113-4D06-B3C5-E5CF890B9EF8} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Maik-PC-Maik Maik-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-04-08] (Microsoft Corporation)
Task: {E9ACF4C0-F948-4362-BB37-FC55467199CF} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {FBACB863-3C46-4214-B014-7DC4BABB1EC2} - System32\Tasks\ScanToPCActivationApp.exe_{D111EF33-291B-46B8-AD6A-48A74609EAC3} => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-17 13:32 - 2014-05-17 13:32 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051700\algo.dll
2014-05-18 08:15 - 2014-05-18 08:15 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051701\algo.dll
2014-04-30 10:34 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-01-30 17:05 - 2014-01-30 17:05 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-18 08:17 - 2014-05-18 08:17 - 00041984 _____ () c:\users\maik\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpap9cgr.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Maik\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-30 21:16 - 2013-03-12 14:19 - 01199576 _____ () C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-05-15 22:50 - 2014-05-08 01:29 - 00065352 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll
2014-05-15 22:50 - 2014-05-08 01:29 - 00674632 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\libglesv2.dll
2014-05-15 22:50 - 2014-05-08 01:29 - 00093000 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\libegl.dll
2014-05-15 22:50 - 2014-05-08 01:29 - 04081480 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\pdf.dll
2014-05-15 22:50 - 2014-05-08 01:29 - 00390472 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll
2014-05-15 22:50 - 2014-05-08 01:29 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/18/2014 08:17:46 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/18/2014 08:17:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2014 11:49:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/17/2014 03:43:28 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: )
Description: Help Content Manager exited with error: NoBooksToUninstall

Error: (05/17/2014 03:41:34 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: )
Description: Der Hilfeinhalts-Manager wurde mit einem Fehler beendet: NoBooksToUninstall

Error: (05/17/2014 01:33:09 PM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/17/2014 08:02:39 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/16/2014 08:51:09 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/16/2014 08:46:57 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/15/2014 07:13:28 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127


System errors:
=============
Error: (05/18/2014 00:43:35 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/15/2014 03:12:51 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/15/2014 00:30:01 AM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (05/09/2014 00:56:22 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/09/2014 00:53:51 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/08/2014 06:42:02 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.

Error: (05/06/2014 00:20:14 AM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (05/06/2014 00:19:31 AM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (05/04/2014 06:08:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/02/2014 06:05:39 AM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.


Microsoft Office Sessions:
=========================
Error: (05/18/2014 08:17:46 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL)

Error: (05/18/2014 08:17:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2014 11:49:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Photosmart 6520 series\DriverStore\Pipeline\amd64\hpinkinsAF11.exe

Error: (05/17/2014 03:43:28 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: )
Description: Help Content Manager exited with error: NoBooksToUninstall

Error: (05/17/2014 03:41:34 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: )
Description: Der Hilfeinhalts-Manager wurde mit einem Fehler beendet: NoBooksToUninstall

Error: (05/17/2014 01:33:09 PM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL)

Error: (05/17/2014 08:02:39 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL)

Error: (05/16/2014 08:51:09 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Microsoft Visual Studio 12.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe

Error: (05/16/2014 08:46:57 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Photosmart 6520 series\DriverStore\Pipeline\amd64\hpinkinsAF11.exe

Error: (05/15/2014 07:13:28 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL)


==================== Memory info =========================== 

Percentage of memory in use: 72%
Total physical RAM: 3535.71 MB
Available physical RAM: 972.53 MB
Total Pagefile: 7069.71 MB
Available Pagefile: 4221.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.32 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:209.86 GB) (Free:39.37 GB) NTFS
Drive d: () (Fixed) (Total:125.39 GB) (Free:23.62 GB) NTFS
Drive e: (ASRock SupportCD) (CDROM) (Total:2.97 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 335 GB) (Disk ID: 3886347C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=210 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=125 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Gmer:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-18 11:45:53
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000064 ST336032 rev.3.AA 335,35GB
Running: Gmer-19357.exe; Driver: C:\Users\Maik\AppData\Local\Temp\kxldypoc.sys


---- System - GMER 2.1 ----

SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwAddBootEntry [0x926FAAA0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwAssignProcessToJobObject [0x926FB57E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateEvent [0x927075C8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateEventPair [0x92707614]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateIoCompletion [0x927077AE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateMutant [0x92707536]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                          ZwCreateSection [0x8CB606D2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateSemaphore [0x9270757E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateThread [0x926FBAB4]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateThreadEx [0x926FBCD0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwCreateTimer [0x92707768]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwDebugActiveProcess [0x926FC36C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwDeleteBootEntry [0x926FAB06]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwDuplicateObject [0x926FFB40]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwLoadDriver [0x926FA6F2]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                          ZwMapViewOfSection [0x8CB607B2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwModifyBootEntry [0x926FAB6C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwNotifyChangeKey [0x926FFF36]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwNotifyChangeMultipleKeys [0x926FCE54]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenEvent [0x927075F2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenEventPair [0x92707636]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenIoCompletion [0x927077D2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenMutant [0x9270755C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenProcess [0x926FF43A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenSection [0x927076E6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenSemaphore [0x927075A6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenThread [0x926FF822]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwOpenTimer [0x9270778C]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                          ZwProtectVirtualMemory [0x8CB60556]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwQueryObject [0x926FCCC8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwQueueApcThreadEx [0x926FC9D6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSetBootEntryOrder [0x926FABD2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSetBootOptions [0x926FAC38]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                          ZwSetContextThread [0x8CB608AE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSetSystemInformation [0x926FA78C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSetSystemPowerState [0x926FA95E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwShutdownSystem [0x926FA8EC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSuspendProcess [0x926FC536]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSuspendThread [0x926FC698]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwSystemDebugControl [0x926FA9E6]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                          ZwTerminateProcess [0x8CB60624]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwTerminateThread [0x926FC1C6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwVdmControl [0x926FAC9E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                         ZwWriteVirtualMemory [0x926FB5DA]

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                                                        82E75A15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                          82EAF212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10CB                                                                                             82EB6460 4 Bytes  [A0, AA, 6F, 92]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1153                                                                                             82EB64E8 4 Bytes  [7E, B5, 6F, 92] {JLE 0xffffffb7; OUTS DX, DWORD [ESI]; XCHG EDX, EAX}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11A7                                                                                             82EB653C 8 Bytes  [C8, 75, 70, 92, 14, 76, 70, ...] {ENTER 0x7075, 0x92; ADC AL, 0x76; JO 0xffffff9a}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11B3                                                                                             82EB6548 4 Bytes  [AE, 77, 70, 92] {SCASB ; JA 0x73; XCHG EDX, EAX}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11CF                                                                                             82EB6564 4 Bytes  [36, 75, 70, 92] {JNZ 0x73; XCHG EDX, EAX}
.text  ...                                                                                                                             
PAGE   ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 108                                                                                     830714EF 4 Bytes  CALL 926FD517 \SystemRoot\system32\drivers\aswSnx.sys
PAGE   ntkrnlpa.exe!ZwAlpcSendWaitReceivePort + 122                                                                                    8308B357 4 Bytes  CALL 926FD52D \SystemRoot\system32\drivers\aswSnx.sys
init   C:\Windows\system32\drivers\MBfilt32.sys                                                                                        entry point in "init" section [0x9BA9D090]

---- User code sections - GMER 2.1 ----

.text  C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe[164] kernel32.dll!GetBinaryTypeW + 70                       76346AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[548] kernel32.dll!GetBinaryTypeW + 70                                                             76346AAC 1 Byte  [62]
.text  C:\Windows\system32\wininit.exe[632] kernel32.dll!GetBinaryTypeW + 70                                                           76346AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[648] kernel32.dll!GetBinaryTypeW + 70                                                             76346AAC 1 Byte  [62]
.text  C:\Windows\system32\services.exe[696] kernel32.dll!GetBinaryTypeW + 70                                                          76346AAC 1 Byte  [62]
.text  ...                                                                                                                             
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1556] kernel32.dll!SetUnhandledExceptionFilter                               7632F5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1556] kernel32.dll!GetBinaryTypeW + 70                                       76346AAC 1 Byte  [62]
.text  C:\Windows\system32\Dwm.exe[1596] kernel32.dll!GetBinaryTypeW + 70                                                              76346AAC 1 Byte  [62]
.text  C:\Windows\system32\taskhost.exe[1608] kernel32.dll!GetBinaryTypeW + 70                                                         76346AAC 1 Byte  [62]
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1696] kernel32.dll!GetBinaryTypeW + 70                                 76346AAC 1 Byte  [62]
.text  C:\Windows\system32\nvvsvc.exe[1704] kernel32.dll!GetBinaryTypeW + 70                                                           76346AAC 1 Byte  [62]
.text  ...                                                                                                                             
.text  C:\Program Files\AVAST Software\Avast\AvastUI.exe[4696] kernel32.dll!SetUnhandledExceptionFilter                                7632F5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\AvastUI.exe[4696] kernel32.dll!GetBinaryTypeW + 70                                        76346AAC 1 Byte  [62]
.text  C:\Program Files\HP\HP Software Update\hpwuschd2.exe[4716] kernel32.dll!GetBinaryTypeW + 70                                     76346AAC 1 Byte  [62]
.text  C:\Program Files\Common Files\Java\Java Update\jusched.exe[4748] kernel32.dll!GetBinaryTypeW + 70                               76346AAC 1 Byte  [62]
.text  C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe[4912] kernel32.dll!GetBinaryTypeW + 70              76346AAC 1 Byte  [62]
.text  C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe[5080] KERNEL32.dll!GetBinaryTypeW + 70  76346AAC 1 Byte  [62]
.text  ...                                                                                                                             

---- EOF - GMER 2.1 ----
         
Und noch ein MBAM Log von vor 3 Tagen, falls es etwas nützt:
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.05.15.07

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.17107
Maik :: MAIK-PC [Administrator]

15.05.2014 18:15:52
MBAM-log-2014-05-15 (19-54-38).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 413201
Laufzeit: 1 Stunde(n), 37 Minute(n), 18 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Users\Maik\Downloads\SetupImgBurn_2.5.8.0.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir (PUP.Optional.WpManager) -> Keine Aktion durchgeführt.

(Ende)
         
Danke im Voraus für die Hilfe.

MfG

 

Themen zu Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion
administrator, antivirus, association, chromium, conduit.search, conduit.search entfernen, defender, email, fehlercode 1, installation, lightning, microsoft fix it, onedrive, outlook 2013, programm, pup.optional.conduit.a, pup.optional.iminent.a, pup.optional.opencandy, pup.optional.searchprotect.a, pup.optional.wpmanager, registry, security, services.exe, svchost.exe, sweet-page, sweet-page entfernen, vcredist, win32/conduit.searchprotect.h, win32/conduit.searchprotect.n, win32/toolbar.conduit.r, win64/conduit.searchprotect.a, windows




Ähnliche Themen: Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion


  1. Windows 7: Telekom Abuse-Team Mail wegen Zeus/ZBot
    Log-Analyse und Auswertung - 07.10.2015 (12)
  2. Zeus ZBot Infektion
    Log-Analyse und Auswertung - 03.07.2015 (18)
  3. Win 7 - Verdacht auf Zeus / ZBot laut Telekom Abuse Team
    Log-Analyse und Auswertung - 17.05.2015 (31)
  4. Zeus Trojaner eingefangen lt. email vom Abuse-Team der Telekom!
    Plagegeister aller Art und deren Bekämpfung - 11.05.2015 (10)
  5. Abuse Zeus alias ZBot
    Log-Analyse und Auswertung - 29.04.2015 (1)
  6. Warnung von Telekom bezüglich Trojaner/Botnet Infektion :(
    Log-Analyse und Auswertung - 10.04.2015 (5)
  7. Telekom Abuse Team, Infektion: generic
    Plagegeister aller Art und deren Bekämpfung - 01.03.2015 (13)
  8. urlzone2 Infektion Meldung von abuse telekom
    Log-Analyse und Auswertung - 31.10.2014 (9)
  9. Telekom Brief - ZeuS/ZBot Infektion
    Log-Analyse und Auswertung - 26.11.2013 (9)
  10. ZeuS/ZBot Abuse Sicherheitswarnung
    Log-Analyse und Auswertung - 25.11.2013 (22)
  11. Zeus/ZBot Telekom email
    Plagegeister aller Art und deren Bekämpfung - 12.09.2013 (29)
  12. Zeus/ZBot laut Telekom Abuse-Brief, der dritte Rechner XP
    Log-Analyse und Auswertung - 10.09.2013 (11)
  13. Trojaner Zeus/ZBot Telekom Abuse Brief und Mail
    Log-Analyse und Auswertung - 06.09.2013 (13)
  14. Abuse Brief von Telekom Schadprogramm ZeuS/ZBot Windows XP
    Log-Analyse und Auswertung - 04.09.2013 (11)
  15. Abuse Brief von Telekom Schadprogramm ZeuS/ZBot mehrere Geräte im Netzwerk
    Log-Analyse und Auswertung - 29.08.2013 (9)
  16. Brief von der Telekom bezüglich des ZeuS/Zbot Schädling....
    Plagegeister aller Art und deren Bekämpfung - 18.04.2013 (9)
  17. Noch ein eMail der Telekom zum Thema ZeuS/ZBot
    Plagegeister aller Art und deren Bekämpfung - 20.02.2013 (17)

Zum Thema Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion - Hallo, mein Vater hat vor einigen Tagen eine mail von abuse@telekom erhalten, die uns auf eine Aktivität des zbot Trojaners über unseren Anschluss hinwies. Es befinden sich im Haushalt derzeit - Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion...
Archiv
Du betrachtest: Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.