Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 20.05.2014, 16:09   #1
botfly
 
Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Hallo zusammen, habe heute mit AdwCleaner 3.210 eine Suche gestartet und ein paar Ergebnisse erhalten.

Code:
ATTFilter
# AdwCleaner v3.210 - Bericht erstellt am 20/05/2014 um 16:33:25
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Uwe - UWE_PC
# Gestartet von : I:\AdwCleaner\adwcleaner_3.210.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\Profiles\s93ejzf1.default\user.js
Datei Gefunden : C:\Windows\System32\Tasks\FoxTab
Datei Gefunden : C:\Windows\Tasks\Digital Sites.job
Datei Gefunden : C:\Windows\Tasks\FoxTab.job
Ordner Gefunden : C:\Users\Uwe\AppData\Roaming\DigitalSites

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\dsiteproducts
Schlüssel Gefunden : [x64] HKCU\Software\dsiteproducts

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\Profiles\s93ejzf1.default\prefs.js ]

Zeile gefunden : user_pref("iminent.ShowThankyouPixel", "0");
Zeile gefunden : user_pref("iminent.displayFavLinks", "1");
Zeile gefunden : user_pref("iminent.registerToolbarEvent102", "1376592884104");
Zeile gefunden : user_pref("iminent.version", "7.33.3.1");
Zeile gefunden : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.33.3.1\",\"InstallEventCTime\":1376589391018,\"InstallEvent\":\"True\"}");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v1");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "0");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1375361692684");
Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1376203532231");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1376483410855");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1375137678813");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1375137678818");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1375201452295");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1375137678823");
Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent134", "1376486755265");

*************************

AdwCleaner[R0].txt - [4381 octets] - [20/05/2014 15:42:44]
AdwCleaner[R1].txt - [4418 octets] - [20/05/2014 15:54:43]
AdwCleaner[R2].txt - [4478 octets] - [20/05/2014 16:10:38]
AdwCleaner[R3].txt - [4394 octets] - [20/05/2014 16:33:25]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [4454 octets] ##########
         
Was mache ich denn damit?

Kann mit FoxTab und DigitalSites und vor allen Dingen mit den ganzen Einträgen im Firefox nichts anfangen. Kann das alles gelöscht werden?

Mich irritiert, dass AdwCleaner manche Sachen findet, die Kaspersky IS 2014 und Malwarebytes unbedenklich zu finden scheinen.

Über Hilfe würde ich mich freuen.

LG
Uwe

Alt 20.05.2014, 16:24   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 20.05.2014, 16:41   #3
botfly
 
Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Hallo schrauber,

hier die Log-Files:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Uwe (administrator) on UWE_PC on 20-05-2014 17:35:23
Running from J:\Installation\Programme\FarbarRecoveryScanToolFRST64
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(DonationCoder) I:\ScreenshotCaptor\ScreenshotCaptor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Foxit Corporation) I:\FoxitReader\Foxit Cloud\FCUpdateService.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Samsung Electronics.) I:\SamsungMagician\Samsung Magician.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Mozilla Corporation) I:\Firefox\firefox.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\Run: [Screenshot Captor] => I:\ScreenshotCaptor\ScreenshotCaptor.exe [7963832 2014-05-14] (DonationCoder)
HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\MountPoints2: {0cf8ded1-82a8-11e3-85c5-806e6f6e6963} - L:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk
ShortcutTarget: i1Profiler Tray.lnk -> I:\x-write_i1Display\i1Profiler\i1ProfilerTray.exe ()
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk
ShortcutTarget: Samsung Magician.lnk -> I:\SamsungMagician\Samsung Magician.exe (Samsung Electronics.)

==================== Internet (Whitelisted) ====================

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Java\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1481056539-1685603913-1254335098-1000\FireFox
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - I:\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - I:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - I:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-04-17]
FF StartMenuInternet: FIREFOX.EXE - I:\Firefox\firefox.exe

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 FoxitCloudUpdateService; I:\FoxitReader\Foxit Cloud\FCUpdateService.exe [241728 2014-03-11] (Foxit Corporation)
R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
S3 SandraAgentSrv; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\RpcAgentSrv.exe [72344 2008-03-24] (SiSoftware)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [82800 2013-07-02] (X-Rite Inc.)

==================== Drivers (Whitelisted) ====================

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-17] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-04-17] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-04-17] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-04-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-04-17] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 SANDRA; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
U5 UnlockerDriver5; I:\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-03-25] (Oracle Corporation)
R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2013-07-10] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2013-07-10] (Nicomsoft Ltd.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-20 17:34 - 2014-05-20 17:35 - 00000000 ____D () C:\FRST
2014-05-20 15:42 - 2014-05-20 16:33 - 00000000 ____D () C:\AdwCleaner
2014-05-20 15:38 - 2014-05-20 15:38 - 00000588 _____ () C:\Windows\PFRO.log
2014-05-20 15:38 - 2014-05-20 15:38 - 00000056 _____ () C:\Windows\setupact.log
2014-05-20 15:38 - 2014-05-20 15:38 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR
2014-05-20 01:14 - 2014-05-20 17:13 - 00043009 _____ () C:\Windows\WindowsUpdate.log
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation
2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk
2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel
2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-05-18 12:01 - 2014-05-18 12:02 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt
2014-05-18 09:54 - 2014-05-20 16:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk
2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 09:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-18 09:54 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-18 09:54 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk
2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk
2014-05-15 16:53 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 16:53 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 16:53 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 16:53 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 16:53 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 16:53 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 13:07 - 2014-05-15 17:46 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA
2014-05-15 12:22 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 12:22 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 12:22 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 12:22 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 12:22 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 12:22 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 12:22 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 12:22 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 12:22 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 12:22 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 12:22 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 12:22 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 12:22 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 12:22 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 12:22 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 12:22 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 12:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 12:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 12:22 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 12:22 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder
2014-05-14 15:59 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-05-14 15:59 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-05-14 15:57 - 2014-05-14 15:58 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-14 15:57 - 2014-04-30 20:29 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-05-14 15:57 - 2014-04-30 20:29 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-05-14 15:57 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-14 15:56 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-14 15:56 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-05-14 15:56 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-05-14 15:56 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-05-14 15:56 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss
2014-05-14 15:38 - 2014-05-20 15:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-14 15:36 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-05-14 15:36 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-05-14 15:36 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-05-14 15:36 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-05-14 15:36 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-05-14 15:36 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-05-14 15:36 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-05-14 15:01 - 2013-07-03 20:05 - 00552760 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-05-14 15:01 - 2006-01-12 09:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek
2014-05-14 14:52 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-05-14 14:52 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-05-14 14:52 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-05-14 14:52 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-05-14 14:52 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-05-14 14:52 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-05-14 14:52 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-05-14 14:52 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-05-14 14:52 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-05-14 14:52 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-05-14 14:52 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-05-14 14:51 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-05-14 14:51 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-05-14 14:51 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-05-14 14:51 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-05-14 14:51 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-05-14 14:51 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-05-14 14:51 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-05-14 14:51 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-05-14 14:51 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-05-14 14:51 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-05-14 14:51 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-05-14 14:51 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-05-14 14:51 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-05-14 14:51 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-05-14 14:51 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-05-14 14:51 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-05-14 14:51 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-05-14 14:51 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2014-05-14 14:51 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2014-05-14 14:51 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-05-14 14:51 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-05-14 14:51 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-05-14 14:51 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-05-14 14:51 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-05-14 14:51 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2014-05-14 14:51 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-05-14 14:51 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-05-14 14:51 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-05-14 14:51 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-05-14 14:51 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-05-14 14:51 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-05-14 14:51 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-05-14 14:51 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-05-14 14:51 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-05-14 14:51 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-05-14 14:51 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-05-14 14:51 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-05-14 14:51 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-05-14 14:51 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-05-14 14:51 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-05-14 14:51 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-05-14 14:51 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-05-14 14:51 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-14 14:49 - 2013-05-30 02:54 - 00495376 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys
2014-05-14 14:49 - 2013-05-10 21:48 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
2014-05-14 14:49 - 2013-03-01 22:42 - 00101152 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
2014-05-14 14:49 - 2012-01-06 08:03 - 00003114 _____ () C:\Windows\system32\e1d62x64.din
2014-05-14 14:49 - 2009-05-26 04:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk
2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk
2014-05-11 12:23 - 2014-05-11 12:22 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk
2014-05-07 08:26 - 2014-05-14 14:29 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-07 08:26 - 2014-05-14 14:29 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft
2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini
2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 09:36 - 2009-07-21 15:32 - 01560064 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll
2014-05-04 09:36 - 2009-02-24 14:01 - 00082944 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll
2014-05-04 09:36 - 2009-02-24 12:52 - 00058368 ____N (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll
2014-05-04 09:36 - 2009-02-24 12:52 - 00047616 ____N (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll
2014-05-04 09:36 - 2008-10-17 20:04 - 00179712 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5b.dll
2014-05-04 09:36 - 2008-08-23 19:17 - 00118784 ____N (Brother Industries,LTD.) C:\Windows\SysWOW64\BrMfNt.dll
2014-05-04 09:36 - 2008-06-17 15:35 - 00207872 ____N (brother) C:\Windows\system32\NSSRH64.dll
2014-05-04 09:36 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2014-05-04 09:36 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2014-05-04 09:36 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2014-05-04 09:36 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2014-05-04 09:36 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2014-05-04 09:36 - 2006-07-07 12:40 - 00073728 ____N (Brother Industories Ltd. P&S Company) C:\Windows\SysWOW64\BRCrypt.dll
2014-05-04 09:36 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2014-05-04 09:36 - 2003-11-28 18:57 - 00000000 _____ () C:\Windows\brdfxspd.dat
2014-05-04 09:36 - 2002-11-26 13:43 - 00106496 ____N () C:\Windows\SysWOW64\BrMuSNMP.dll
2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance
2014-05-04 09:30 - 2014-05-04 09:38 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11
2014-05-04 09:30 - 2008-03-28 13:24 - 00031864 _____ () C:\Windows\maxlink.ini
2014-05-04 09:29 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother
2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk
2014-05-02 14:31 - 2014-05-15 16:54 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-22 00:54 - 2010-04-13 12:54 - 00131072 _____ (SafeNet Inc.) C:\Windows\system32\Drivers\aksfridge.sys
2014-04-22 00:54 - 2010-04-12 13:29 - 00074496 _____ (SafeNet Inc.) C:\Windows\system32\Drivers\aksdf.sys
2014-04-22 00:54 - 2009-12-16 17:44 - 03750400 _____ (SafeNet Inc.) C:\Windows\system32\hasplms.exe
2014-04-22 00:54 - 2009-12-16 17:44 - 03750400 _____ (SafeNet Inc.) C:\Windows\system32\aksllmtp.exe
2014-04-22 00:54 - 2009-03-13 11:55 - 00318464 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\Drivers\hardlock.sys
2014-04-22 00:53 - 2014-05-20 15:38 - 00001316 ____H () C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job
2014-04-22 00:53 - 2014-05-05 08:00 - 00000388 _____ () C:\Windows\Tasks\X-Rite Device Services Software Updater.job
2014-04-22 00:53 - 2014-04-22 00:53 - 00003486 _____ () C:\Windows\System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}
2014-04-22 00:53 - 2014-04-22 00:53 - 00002866 _____ () C:\Windows\System32\Tasks\X-Rite Device Services Software Updater
2014-04-22 00:53 - 2014-04-22 00:53 - 00000832 _____ () C:\Users\Public\Desktop\i1Profiler.lnk
2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\X-Rite
2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\Program Files (x86)\X-Rite
2014-04-22 00:53 - 2013-07-10 10:55 - 00145920 _____ (Nicomsoft Ltd.) C:\Windows\system32\DDCHelper.dll
2014-04-22 00:53 - 2013-07-10 10:55 - 00131584 _____ (Nicomsoft Ltd.) C:\Windows\SysWOW64\DDCHelper.dll
2014-04-22 00:53 - 2013-07-10 10:55 - 00125440 _____ (Nicomsoft Ltd.) C:\Windows\system32\DDCHelperX.dll
2014-04-22 00:53 - 2013-07-10 10:55 - 00108032 _____ (Nicomsoft Ltd.) C:\Windows\SysWOW64\DDCHelperX.dll
2014-04-22 00:53 - 2013-07-10 10:55 - 00020832 _____ (Nicomsoft Ltd.) C:\Windows\system32\Drivers\DDCDrv.sys
2014-04-22 00:53 - 2013-07-10 10:55 - 00010240 _____ (Nicomsoft Ltd.) C:\Windows\SysWOW64\Drivers\DDCDrv.sys
2014-04-21 12:03 - 2014-05-16 09:50 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\X-Rite
2014-04-21 11:58 - 2014-04-21 12:07 - 00000000 ____D () C:\ProgramData\X-Rite

==================== One Month Modified Files and Folders =======

2014-05-20 17:35 - 2014-05-20 17:34 - 00000000 ____D () C:\FRST
2014-05-20 17:19 - 2014-01-29 17:07 - 00000288 _____ () C:\Windows\Tasks\FoxTab.job
2014-05-20 17:13 - 2014-05-20 01:14 - 00043009 _____ () C:\Windows\WindowsUpdate.log
2014-05-20 17:00 - 2014-01-29 17:07 - 00000300 _____ () C:\Windows\Tasks\Digital Sites.job
2014-05-20 16:33 - 2014-05-20 15:42 - 00000000 ____D () C:\AdwCleaner
2014-05-20 16:17 - 2014-05-18 09:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-20 16:09 - 2014-04-17 23:20 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-20 15:43 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-20 15:43 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-20 15:42 - 2009-07-14 19:58 - 00700454 _____ () C:\Windows\system32\perfh007.dat
2014-05-20 15:42 - 2009-07-14 19:58 - 00150092 _____ () C:\Windows\system32\perfc007.dat
2014-05-20 15:42 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-20 15:38 - 2014-05-20 15:38 - 00000588 _____ () C:\Windows\PFRO.log
2014-05-20 15:38 - 2014-05-20 15:38 - 00000056 _____ () C:\Windows\setupact.log
2014-05-20 15:38 - 2014-05-20 15:38 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-20 15:38 - 2014-05-14 15:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-20 15:38 - 2014-04-22 00:53 - 00001316 ____H () C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job
2014-05-20 15:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-20 13:15 - 2014-04-16 10:23 - 00000000 ____D () C:\Users\Uwe\.VirtualBox
2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation
2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk
2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel
2014-05-20 00:19 - 2014-01-22 02:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\gtk-2.0
2014-05-20 00:19 - 2014-01-22 02:36 - 00000000 ____D () C:\Users\Uwe\.gimp-2.8
2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-05-18 12:02 - 2014-05-18 12:01 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt
2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk
2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-16 12:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 10:15 - 2014-03-21 03:52 - 00000000 ___RD () C:\gurm
2014-05-16 09:52 - 2014-01-22 00:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Blender Foundation
2014-05-16 09:51 - 2014-03-31 22:23 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\krita
2014-05-16 09:51 - 2014-01-23 13:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\inkscape
2014-05-16 09:51 - 2014-01-21 16:58 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Mozilla
2014-05-16 09:50 - 2014-04-21 12:03 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\X-Rite
2014-05-16 09:50 - 2014-03-19 17:51 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\WTablet
2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk
2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk
2014-05-15 17:46 - 2014-05-15 13:07 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA
2014-05-15 16:54 - 2014-05-02 14:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ____D () C:\Users\Uwe
2014-05-15 16:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 16:53 - 2014-01-21 15:14 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 16:52 - 2010-02-10 00:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder
2014-05-14 15:59 - 2014-01-21 16:37 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA Corporation
2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-14 15:58 - 2014-05-14 15:57 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-14 15:57 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss
2014-05-14 15:50 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 15:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-05-14 15:01 - 2014-01-21 15:01 - 00000000 ____D () C:\Program Files\Intel
2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-14 14:54 - 2014-01-21 16:24 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek
2014-05-14 14:51 - 2014-01-21 16:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-14 14:29 - 2014-05-07 08:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 14:29 - 2014-05-07 08:26 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 11:08 - 2014-02-05 17:36 - 00004560 _____ () C:\Users\Uwe\AppData\Roaming\CamStudio.cfg
2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamShapes.ini
2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamLayout.ini
2014-05-13 11:08 - 2014-02-05 17:36 - 00000138 _____ () C:\Users\Uwe\AppData\Roaming\Camdata.ini
2014-05-13 11:05 - 2014-02-05 17:35 - 00000096 _____ () C:\Users\Uwe\AppData\Roaming\version2.xml
2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk
2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk
2014-05-12 12:48 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-11 12:22 - 2014-05-11 12:23 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk
2014-05-11 12:13 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-11 12:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-11 11:26 - 2014-02-15 16:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\vlc
2014-05-09 08:14 - 2014-05-15 12:22 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 12:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 13:41 - 2014-01-21 16:16 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Adobe
2014-05-07 08:26 - 2014-01-21 18:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Adobe
2014-05-06 06:40 - 2014-05-15 16:53 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 16:53 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 16:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 16:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 08:00 - 2014-04-22 00:53 - 00000388 _____ () C:\Windows\Tasks\X-Rite Device Services Software Updater.job
2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-05-04 09:40 - 2014-01-21 16:26 - 00064496 _____ () C:\Users\Uwe\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft
2014-05-04 09:39 - 2009-07-14 06:45 - 00294736 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-04 09:38 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini
2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance
2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11
2014-05-04 09:30 - 2014-05-04 09:29 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother
2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk
2014-04-30 20:29 - 2014-05-14 15:57 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-04-30 20:29 - 2014-05-14 15:57 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-04-28 16:36 - 2014-04-16 10:26 - 00000000 ____D () C:\Users\Uwe\VirtualBox VMs
2014-04-28 09:32 - 2014-03-22 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2014-04-25 08:40 - 2014-01-22 15:27 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-25 08:40 - 2014-01-22 15:27 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-25 08:40 - 2014-01-22 15:27 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-25 08:40 - 2014-01-22 15:27 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-25 08:40 - 2014-01-22 15:27 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-24 23:59 - 2014-01-21 19:05 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Foxit Software
2014-04-22 00:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-04-22 00:53 - 2014-04-22 00:53 - 00003486 _____ () C:\Windows\System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}
2014-04-22 00:53 - 2014-04-22 00:53 - 00002866 _____ () C:\Windows\System32\Tasks\X-Rite Device Services Software Updater
2014-04-22 00:53 - 2014-04-22 00:53 - 00000832 _____ () C:\Users\Public\Desktop\i1Profiler.lnk
2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\X-Rite
2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\Program Files (x86)\X-Rite
2014-04-22 00:48 - 2014-03-19 17:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2014-04-22 00:47 - 2014-03-19 17:50 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-04-22 00:47 - 2014-03-19 17:50 - 00000000 ____D () C:\Program Files\Tablet
2014-04-22 00:47 - 2014-03-19 17:50 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-04-22 00:47 - 2014-01-22 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-22 00:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-21 12:07 - 2014-04-21 11:58 - 00000000 ____D () C:\ProgramData\X-Rite

Files to move or delete:
====================
C:\Users\Uwe\AppData\Roaming\CamLayout.ini
C:\Users\Uwe\AppData\Roaming\CamShapes.ini
C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-15 12:22] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 00:54

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


Addition:


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by Uwe at 2014-05-20 17:35:33
Running from J:\Installation\Programme\FarbarRecoveryScanToolFRST64
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
abrMate version 1.1 (HKLM-x32\...\abrMate_is1) (Version: 1.1 - )
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Brother MFL-Pro Suite MFC-5890CN (HKLM-x32\...\{20E970DF-A7B2-4345-9DEB-72213A29645E}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CamStudio Lossless Codec v1.5 (HKLM-x32\...\camcodec) (Version: 1.5 - CamStudio)
CCleaner (HKLM\...\CCleaner) (Version: 4.06 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
ColorPicker Version 2.5 (HKLM-x32\...\{2A999A57-4530-41AC-AF6B-E5B7A28BA357}_is1) (Version: 2.5 - Cronoxyd.de)
CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.3.99.311 - Foxit Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.0.429 - Foxit Corporation)
Geeks3D FurMark 1.13.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Books Downloader version 2.3 (HKLM-x32\...\{216729B6-014A-F413-814F-F17F74FBA113}_is1) (Version: 2.3 - GBOOKSDOWNLOADER.COM)
i1Profiler (HKLM-x32\...\i1Profiler_is1) (Version: 1.5.0 - X-Rite)
Inkscape 0.48.4 (HKLM-x32\...\Inkscape) (Version: 0.48.4 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)
Intel(R) Network Connections 18.5.54.0 (Version: 18.5.54.0 - Intel) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
Krita Desktop (x64) 2.8.0.2 (HKLM\...\{301359D0-9736-4B53-B145-E7A99DDAA61A}) (Version: 2.8.0.2 - KO GmbH)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Mandelbulber 64-bit OpenCL (HKLM-x32\...\071592D0-6A2A-41B8-A86F-25977C29DAED) (Version: 1.21-1 - Krzysztof Marczak)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Firefox 29.0.1 (x86 de) (HKCU\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Oracle VM VirtualBox 4.3.10 (HKLM\...\{3EC092F5-9457-4C31-8E8A-BBE4BB2A59FF}) (Version: 4.3.10 - Oracle Corporation)
PaperPort Image Printer 64-bit (HKLM\...\{ABA4FAF1-6389-45F9-92CE-3914A4E5C471}) (Version: 1.00.0000 - Nuance Communications, Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
ScanSoft PaperPort 11 (HKLM-x32\...\{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17}) (Version: 11.2.0000 - Nuance Communications, Inc.)
Screenshot Captor 4.8.5 (HKLM-x32\...\ScreenshotCaptor_is1) (Version:  - )
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2014.SP1c (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.25.2014.4 - SiSoftware)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.7-6 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WinFF 1.5.3 (Codename EMMA) (HKLM-x32\...\WinFF_is1) (Version:  - WinFF.org)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
XMedia Recode Version 3.1.7.9 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.9 - XMedia Recode)
XnView 2.22 (HKLM-x32\...\XnView_is1) (Version: 2.22 - Gougelet Pierre-e)
XnView Shell Extension 3.5.0 (64bits) (HKLM-x32\...\XnView Shell Extension_is1) (Version: 3.5.0 - Gougelet Pierre-e)
X-Rite Device Services Manager (HKLM-x32\...\{DD8046B0-2077-4899-AFCD-A0D034E183D4}) (Version: 2.3.75 - X-Rite)

==================== Restore Points  =========================

14-05-2014 13:57:36 DirectX wurde installiert
14-05-2014 13:59:36 DirectX wurde installiert
15-05-2014 14:52:37 Windows Update
15-05-2014 15:11:41 NachBereinigung_15052014_1711
19-05-2014 23:02:08 Revo Uninstaller's restore point - Xilisoft ISO Pro
19-05-2014 23:06:03 Revo Uninstaller's restore point - Bild-Master 1.0.3.7
20-05-2014 13:38:44 NachBereinigung_20052014_1538

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1E34CEFD-6A2E-4660-B84C-62FA3788F854} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {268B3AD0-ECD5-48F7-B821-3A20AE688A4D} - System32\Tasks\X-Rite Device Services Software Updater => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe [2013-07-02] (X-Rite Inc.)
Task: {42E2A840-69A9-4A85-9F99-F88FB79251E3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {60D05BF0-8A90-4A2C-9CF0-AA58F5C1163C} - System32\Tasks\CCleanerSkipUAC => I:\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {BCACD2A9-9CBD-4BF8-9370-E3523F0D8DF0} - System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4} => C:\Users\Uwe\AppData\Local\Temp\is-0L684.tmp\XRD Manager.exe <==== ATTENTION
Task: {C0A38CC9-BBC0-4E90-872B-DAA306EE7A26} - System32\Tasks\Microsoft\LUT Loader\Lut Loader XRGamma => I:\x-write_i1Display\i1Profiler\XRGamma.exe [2011-06-21] (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
Task: {CC268F0F-929E-4C8F-93E2-DD2F0A860075} - System32\Tasks\FoxTab => C:\Users\Uwe\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe <==== ATTENTION
Task: {E6BC832D-353C-4C1F-9E2B-B1474074B2ED} - \Digital Sites No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Uwe\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe <==== ATTENTION
Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Uwe\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe <==== ATTENTION
Task: C:\Windows\Tasks\X-Rite Device Services Software Updater.job => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe
Task: C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job => C:\Users\Uwe\AppData\Local\Temp\is-0L684.tmp\XRD Manager.exe

==================== Loaded Modules (whitelisted) =============

2014-05-14 15:36 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-04 09:36 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2014-03-19 17:50 - 2013-12-04 18:35 - 01185048 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-06-21 13:29 - 2013-06-21 13:29 - 01588224 _____ () C:\Program Files (x86)\X-Rite\Devices\rm200\GoldenEye.dll
2013-06-21 13:29 - 2013-06-21 13:29 - 02633728 _____ () C:\Program Files (x86)\X-Rite\Devices\colormunki\colormunki.dll
2014-01-21 17:04 - 2013-11-28 13:14 - 00013824 _____ () I:\SamsungMagician\SAMSUNG_SSD.dll
2014-01-21 17:04 - 2013-11-28 19:59 - 00098816 _____ () I:\SamsungMagician\PAL.dll
2014-01-21 17:04 - 2013-11-28 19:59 - 00034304 _____ () I:\SamsungMagician\SATA.dll
2014-01-21 17:04 - 2013-11-28 19:59 - 00032768 _____ () I:\SamsungMagician\SAT.dll
2014-01-21 17:04 - 2013-11-28 20:00 - 00031232 _____ () I:\SamsungMagician\SMINI.dll
2014-01-21 17:04 - 2013-11-28 19:59 - 00029696 _____ () I:\SamsungMagician\SAS.dll
2014-01-21 16:27 - 2013-09-16 13:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-05-10 10:58 - 2014-05-10 10:58 - 03839088 _____ () I:\Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^XRGamma.lnk => C:\Windows\pss\XRGamma.lnk.CommonStartup
MSCONFIG\startupreg: ControlCenter3 => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
MSCONFIG\startupreg: QuickTime Task => "I:\Quicktime\QTTask.exe" -atboottime

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/20/2014 03:58:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm mbam.exe, Version 1.0.0.500 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: db8

Startzeit: 01cf74337bc954cc

Endzeit: 0

Anwendungspfad: I:\MalwarebytesAntiMalware\mbam.exe

Berichts-ID: c2017049-e026-11e3-bdcd-94de807b9bf2

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


System errors:
=============
Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (05/20/2014 03:38:15 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (05/20/2014 03:38:15 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (05/20/2014 03:38:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/20/2014 03:38:11 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.


Microsoft Office Sessions:
=========================
Error: (05/20/2014 03:58:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: mbam.exe1.0.0.500db801cf74337bc954cc0I:\MalwarebytesAntiMalware\mbam.exec2017049-e026-11e3-bdcd-94de807b9bf2

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: 
Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


CodeIntegrity Errors:
===================================
  Date: 2014-05-20 12:40:25.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 12:40:25.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 12:40:25.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 12:40:25.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 12:40:25.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 12:40:25.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 02:03:55.021
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 02:03:55.020
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 02:03:55.019
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-05-20 02:01:07.297
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 16320.53 MB
Available physical RAM: 13714.43 MB
Total Pagefile: 16518.71 MB
Available Pagefile: 13571.19 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:80 GB) (Free:44.59 GB) NTFS
Drive d: (VirtualWin) (Fixed) (Total:80 GB) (Free:19.72 GB) NTFS
Drive e: (VirtualWin_2) (Fixed) (Total:31.79 GB) (Free:11.7 GB) NTFS
Drive f: (RUS) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS
Drive i: (Software) (Fixed) (Total:31.68 GB) (Free:28.12 GB) NTFS
Drive j: (Daten) (Fixed) (Total:1680 GB) (Free:1479.3 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: AF7F44A0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=80 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=32 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 112 GB) (Disk ID: AF7F44B8)

Partition: GPT Partition Type.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5746564E)
Partition 1: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-395142234112) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 21.05.2014, 08:30   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Funde von AdwCleaner löschen lassen.

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 24.05.2014, 13:54   #5
botfly
 
Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Hallo schrauber,

vielen Dank für die Unterstützung und Entschuldigung wegen der späten Rückmeldung.

Hier die LogFiles:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 20.05.2014
Suchlauf-Zeit: 16:18:03
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.05.20.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Uwe

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 1
Verstrichene Zeit: 0 Min, 4 Sek

Speicher: Deaktiviert
Autostart: Deaktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Uwe on 24.05.2014 at 14:37:07,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.05.2014 at 14:40:51,19
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-05-2014
Ran by Uwe (administrator) on UWE_PC on 24-05-2014 14:45:08
Running from I:\FarbarRecovery ScanToolFRST64
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Foxit Corporation) I:\FoxitReader\Foxit Cloud\FCUpdateService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(DonationCoder) I:\ScreenshotCaptor\ScreenshotCaptor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\Run: [Screenshot Captor] => I:\ScreenshotCaptor\ScreenshotCaptor.exe [7963832 2014-05-14] (DonationCoder)
HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\MountPoints2: {0cf8ded1-82a8-11e3-85c5-806e6f6e6963} - L:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk
ShortcutTarget: i1Profiler Tray.lnk -> I:\x-write_i1Display\i1Profiler\i1ProfilerTray.exe ()
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk
ShortcutTarget: Samsung Magician.lnk -> I:\SamsungMagician\Samsung Magician.exe (Samsung Electronics.)

==================== Internet (Whitelisted) ====================

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Java\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1481056539-1685603913-1254335098-1000\FireFox
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - I:\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - I:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - I:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-04-17]
FF StartMenuInternet: FIREFOX.EXE - I:\Firefox\firefox.exe

==================== Services (Whitelisted) =================

S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 FoxitCloudUpdateService; I:\FoxitReader\Foxit Cloud\FCUpdateService.exe [241728 2014-03-11] (Foxit Corporation)
R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
S3 SandraAgentSrv; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\RpcAgentSrv.exe [72344 2008-03-24] (SiSoftware)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [82800 2013-07-02] (X-Rite Inc.)

==================== Drivers (Whitelisted) ====================

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-17] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-04-17] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-04-17] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-04-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-04-17] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 SANDRA; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
U5 UnlockerDriver5; I:\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-03-25] (Oracle Corporation)
R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2013-07-10] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2013-07-10] (Nicomsoft Ltd.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-24 14:40 - 2014-05-24 14:40 - 00000619 _____ () C:\Users\Uwe\Desktop\JRT.txt
2014-05-24 14:24 - 2014-05-24 14:24 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 14:20 - 2014-05-24 14:20 - 00001146 _____ () C:\Users\Uwe\Desktop\mbam.txt
2014-05-24 13:53 - 2014-05-24 13:53 - 00000310 _____ () C:\Windows\PFRO.log
2014-05-24 13:27 - 2014-05-24 14:27 - 00000224 _____ () C:\Windows\setupact.log
2014-05-24 13:27 - 2014-05-24 13:27 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-23 14:40 - 2014-05-23 14:40 - 00000000 ____D () C:\Users\Uwe\Desktop\GottModus.{ED7BA470-8E54-465E-825C-99712043E01C}
2014-05-20 17:34 - 2014-05-24 14:45 - 00000000 ____D () C:\FRST
2014-05-20 15:42 - 2014-05-24 13:51 - 00000000 ____D () C:\AdwCleaner
2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR
2014-05-20 01:14 - 2014-05-24 14:27 - 00266689 _____ () C:\Windows\WindowsUpdate.log
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation
2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk
2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel
2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-05-18 12:01 - 2014-05-18 12:02 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt
2014-05-18 09:54 - 2014-05-24 14:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk
2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 09:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-18 09:54 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-18 09:54 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk
2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk
2014-05-15 16:53 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 16:53 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 16:53 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 16:53 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 16:53 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 16:53 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 13:07 - 2014-05-15 17:46 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA
2014-05-15 12:22 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 12:22 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 12:22 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 12:22 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 12:22 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 12:22 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 12:22 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 12:22 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 12:22 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 12:22 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 12:22 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 12:22 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 12:22 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 12:22 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 12:22 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 12:22 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 12:22 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 12:22 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 12:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 12:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 12:22 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 12:22 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 12:22 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder
2014-05-14 15:59 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-05-14 15:59 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-05-14 15:57 - 2014-05-14 15:58 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-14 15:57 - 2014-04-30 20:29 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-05-14 15:57 - 2014-04-30 20:29 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-05-14 15:57 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-14 15:56 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-14 15:56 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-14 15:56 - 2014-03-04 16:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-05-14 15:56 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-05-14 15:56 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-05-14 15:56 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss
2014-05-14 15:38 - 2014-05-24 14:27 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-14 15:36 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-05-14 15:36 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-05-14 15:36 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-05-14 15:36 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-05-14 15:36 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-05-14 15:36 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-05-14 15:36 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-05-14 15:01 - 2013-07-03 20:05 - 00552760 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-05-14 15:01 - 2006-01-12 09:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din
2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek
2014-05-14 14:52 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-05-14 14:52 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-05-14 14:52 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-05-14 14:52 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-05-14 14:52 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-05-14 14:52 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-05-14 14:52 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-05-14 14:52 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-05-14 14:52 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-05-14 14:52 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-05-14 14:52 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-05-14 14:52 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-05-14 14:52 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-05-14 14:51 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-05-14 14:51 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-05-14 14:51 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-05-14 14:51 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-05-14 14:51 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-05-14 14:51 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-05-14 14:51 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-05-14 14:51 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-05-14 14:51 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-05-14 14:51 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-05-14 14:51 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-05-14 14:51 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-05-14 14:51 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-05-14 14:51 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-05-14 14:51 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-05-14 14:51 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-05-14 14:51 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-05-14 14:51 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-05-14 14:51 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2014-05-14 14:51 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2014-05-14 14:51 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-05-14 14:51 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-05-14 14:51 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-05-14 14:51 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-05-14 14:51 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-05-14 14:51 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2014-05-14 14:51 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-05-14 14:51 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-05-14 14:51 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-05-14 14:51 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-05-14 14:51 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-05-14 14:51 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-05-14 14:51 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-05-14 14:51 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-05-14 14:51 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-05-14 14:51 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-05-14 14:51 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-05-14 14:51 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-05-14 14:51 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-05-14 14:51 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-05-14 14:51 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-05-14 14:51 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-05-14 14:51 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-05-14 14:51 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-05-14 14:51 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-05-14 14:51 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-05-14 14:51 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-14 14:49 - 2013-05-30 02:54 - 00495376 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys
2014-05-14 14:49 - 2013-05-10 21:48 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
2014-05-14 14:49 - 2013-03-01 22:42 - 00101152 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
2014-05-14 14:49 - 2012-01-06 08:03 - 00003114 _____ () C:\Windows\system32\e1d62x64.din
2014-05-14 14:49 - 2009-05-26 04:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk
2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk
2014-05-11 12:23 - 2014-05-11 12:22 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk
2014-05-07 08:26 - 2014-05-14 14:29 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-07 08:26 - 2014-05-14 14:29 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft
2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini
2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 09:36 - 2009-07-21 15:32 - 01560064 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll
2014-05-04 09:36 - 2009-02-24 14:01 - 00082944 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll
2014-05-04 09:36 - 2009-02-24 12:52 - 00058368 ____N (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll
2014-05-04 09:36 - 2009-02-24 12:52 - 00047616 ____N (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll
2014-05-04 09:36 - 2008-10-17 20:04 - 00179712 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5b.dll
2014-05-04 09:36 - 2008-08-23 19:17 - 00118784 ____N (Brother Industries,LTD.) C:\Windows\SysWOW64\BrMfNt.dll
2014-05-04 09:36 - 2008-06-17 15:35 - 00207872 ____N (brother) C:\Windows\system32\NSSRH64.dll
2014-05-04 09:36 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2014-05-04 09:36 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2014-05-04 09:36 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2014-05-04 09:36 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2014-05-04 09:36 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2014-05-04 09:36 - 2006-07-07 12:40 - 00073728 ____N (Brother Industories Ltd. P&S Company) C:\Windows\SysWOW64\BRCrypt.dll
2014-05-04 09:36 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2014-05-04 09:36 - 2003-11-28 18:57 - 00000000 _____ () C:\Windows\brdfxspd.dat
2014-05-04 09:36 - 2002-11-26 13:43 - 00106496 ____N () C:\Windows\SysWOW64\BrMuSNMP.dll
2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance
2014-05-04 09:30 - 2014-05-04 09:38 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11
2014-05-04 09:30 - 2008-03-28 13:24 - 00031864 _____ () C:\Windows\maxlink.ini
2014-05-04 09:29 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother
2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk
2014-05-02 14:31 - 2014-05-15 16:54 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== One Month Modified Files and Folders =======

2014-05-24 14:45 - 2014-05-20 17:34 - 00000000 ____D () C:\FRST
2014-05-24 14:40 - 2014-05-24 14:40 - 00000619 _____ () C:\Users\Uwe\Desktop\JRT.txt
2014-05-24 14:32 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-24 14:32 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-24 14:31 - 2009-07-14 19:58 - 00700454 _____ () C:\Windows\system32\perfh007.dat
2014-05-24 14:31 - 2009-07-14 19:58 - 00150092 _____ () C:\Windows\system32\perfc007.dat
2014-05-24 14:31 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-24 14:30 - 2014-05-20 01:14 - 00266689 _____ () C:\Windows\WindowsUpdate.log
2014-05-24 14:27 - 2014-05-24 13:27 - 00000224 _____ () C:\Windows\setupact.log
2014-05-24 14:27 - 2014-05-14 15:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-24 14:27 - 2014-04-22 00:53 - 00001316 ____H () C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job
2014-05-24 14:27 - 2014-04-17 23:20 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-24 14:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-24 14:24 - 2014-05-24 14:24 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 14:20 - 2014-05-24 14:20 - 00001146 _____ () C:\Users\Uwe\Desktop\mbam.txt
2014-05-24 14:17 - 2014-05-18 09:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 13:53 - 2014-05-24 13:53 - 00000310 _____ () C:\Windows\PFRO.log
2014-05-24 13:51 - 2014-05-20 15:42 - 00000000 ____D () C:\AdwCleaner
2014-05-24 13:27 - 2014-05-24 13:27 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-23 17:43 - 2014-02-15 16:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\vlc
2014-05-23 17:43 - 2014-01-21 14:27 - 00000000 ____D () C:\Users\Uwe
2014-05-23 17:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-23 17:31 - 2014-04-16 10:23 - 00000000 ____D () C:\Users\Uwe\.VirtualBox
2014-05-23 14:55 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-23 14:40 - 2014-05-23 14:40 - 00000000 ____D () C:\Users\Uwe\Desktop\GottModus.{ED7BA470-8E54-465E-825C-99712043E01C}
2014-05-21 17:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-21 17:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft
2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation
2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk
2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel
2014-05-20 00:19 - 2014-01-22 02:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\gtk-2.0
2014-05-20 00:19 - 2014-01-22 02:36 - 00000000 ____D () C:\Users\Uwe\.gimp-2.8
2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-05-18 12:02 - 2014-05-18 12:01 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt
2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk
2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-16 12:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 10:15 - 2014-03-21 03:52 - 00000000 ___RD () C:\gurm
2014-05-16 09:52 - 2014-01-22 00:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Blender Foundation
2014-05-16 09:51 - 2014-03-31 22:23 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\krita
2014-05-16 09:51 - 2014-01-23 13:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\inkscape
2014-05-16 09:51 - 2014-01-21 16:58 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Mozilla
2014-05-16 09:50 - 2014-04-21 12:03 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\X-Rite
2014-05-16 09:50 - 2014-03-19 17:51 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\WTablet
2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk
2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk
2014-05-15 17:46 - 2014-05-15 13:07 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA
2014-05-15 16:54 - 2014-05-02 14:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 16:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 16:53 - 2014-01-21 15:14 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 16:52 - 2010-02-10 00:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder
2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder
2014-05-14 15:59 - 2014-01-21 16:37 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA Corporation
2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-14 15:58 - 2014-05-14 15:57 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-14 15:57 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss
2014-05-14 15:50 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 15:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-05-14 15:01 - 2014-01-21 15:01 - 00000000 ____D () C:\Program Files\Intel
2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-14 14:54 - 2014-01-21 16:24 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek
2014-05-14 14:51 - 2014-01-21 16:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-14 14:29 - 2014-05-07 08:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 14:29 - 2014-05-07 08:26 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 11:08 - 2014-02-05 17:36 - 00004560 _____ () C:\Users\Uwe\AppData\Roaming\CamStudio.cfg
2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamShapes.ini
2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamLayout.ini
2014-05-13 11:08 - 2014-02-05 17:36 - 00000138 _____ () C:\Users\Uwe\AppData\Roaming\Camdata.ini
2014-05-13 11:05 - 2014-02-05 17:35 - 00000096 _____ () C:\Users\Uwe\AppData\Roaming\version2.xml
2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk
2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk
2014-05-12 12:48 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-11 12:22 - 2014-05-11 12:23 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk
2014-05-09 08:14 - 2014-05-15 12:22 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 12:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 13:41 - 2014-01-21 16:16 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Adobe
2014-05-07 08:26 - 2014-01-21 18:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Adobe
2014-05-06 06:40 - 2014-05-15 16:53 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 16:53 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 16:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 16:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 08:00 - 2014-04-22 00:53 - 00000388 _____ () C:\Windows\Tasks\X-Rite Device Services Software Updater.job
2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-05-04 09:40 - 2014-01-21 16:26 - 00064496 _____ () C:\Users\Uwe\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft
2014-05-04 09:39 - 2009-07-14 06:45 - 00294736 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-04 09:38 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini
2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI
2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini
2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx
2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance
2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11
2014-05-04 09:30 - 2014-05-04 09:29 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother
2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk
2014-04-30 20:29 - 2014-05-14 15:57 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-04-30 20:29 - 2014-05-14 15:57 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-04-28 16:36 - 2014-04-16 10:26 - 00000000 ____D () C:\Users\Uwe\VirtualBox VMs
2014-04-28 09:32 - 2014-03-22 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2014-04-25 08:40 - 2014-01-22 15:27 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-25 08:40 - 2014-01-22 15:27 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-25 08:40 - 2014-01-22 15:27 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-25 08:40 - 2014-01-22 15:27 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-25 08:40 - 2014-01-22 15:27 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-24 23:59 - 2014-01-21 19:05 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Foxit Software

Files to move or delete:
====================
C:\Users\Uwe\AppData\Roaming\CamLayout.ini
C:\Users\Uwe\AppData\Roaming\CamShapes.ini
C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job


Some content of TEMP:
====================
C:\Users\Uwe\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 00:54

==================== End Of Log ============================
         
--- --- ---

--- --- ---

LG
Uwe


Alt 25.05.2014, 06:54   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?

Alt 26.05.2014, 16:17   #7
botfly
 
Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Hallo schrauber,

danke für deine weitere Hilfe.

Eine Frage jedoch: Was bedeutet es faktisch, wenn ich einem Online-Scanner wie ESET Zugriff auf mein System gewähre? Habe bei diesem Thema leider unmittelbar Bedenken. Verstehst du das?

Gibt es denn anhand des letzten FRST-Log Files noch Anzeichen für einen Befall und Grund, weiterzusuchen?

LG
Uwe

Alt 27.05.2014, 12:23   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



nochn paar reste, die dann zusammen mit dem Ergebnis von ESET gefixt würden. Was genau sind deine Bedenken? Der Onlinescan nimmt jede Datei in die Hand, genau wie dein AV Programm.

Der Onlinescanner lädt die Dateien aber nicht auf irgend einen Server, Du lädst den Onlinescanner mit Signaturen runter, also es wird nichts deinen PC verlassen, falls das deine Sorge ist.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.06.2014, 11:39   #9
botfly
 
Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Hallo schrauber,

finde im Moment keine Zeit, weiter zu machen. Habs aber noch im Hinterkopf.

Danke

LG
Uwe

Alt 07.06.2014, 05:51   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



ok.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 14.11.2014, 15:13   #11
botfly
 
Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



Hallo schrauber.

Das Thema kann geschlossen werden. Zu lange her.

Bei neuen Fragen schlage ich wieder hier auf.

Vielen Dank für eure Hilfe.

Alt 15.11.2014, 11:10   #12
schrauber
/// the machine
/// TB-Ausbilder
 

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Standard

Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?



ok.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?
appdata, bericht, betriebssystem, browser, c:\windows, code, dateien, digital, explorer, firefox, gelöscht, gen, hallo zusammen, internet, internet explorer, kaspersky, malwarebytes, mozilla, ordner, registrierungsdatenbank, roaming, scan, software, suche, system32, windows



Ähnliche Themen: Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?


  1. Vorbeugende Scan? Malewarebytes/Adwcleaner/Junkware
    Plagegeister aller Art und deren Bekämpfung - 21.05.2015 (1)
  2. Virus oder nicht. 3 Scanner mit unterschiedlichen Ergebnissen
    Plagegeister aller Art und deren Bekämpfung - 09.12.2014 (7)
  3. AdwCleaner vs. APPL/Downloader.Gen = alles ok! Aber wie werde ich nun AdwCleaner 3.212 wieder los?
    Plagegeister aller Art und deren Bekämpfung - 14.06.2014 (5)
  4. Scan mit Farbars Recovery Scan Tool durchgeführt, was mache ich jetzt?
    Log-Analyse und Auswertung - 14.02.2014 (1)
  5. Verständnisfrage zu Malwarebytes und den Ergebnissen
    Plagegeister aller Art und deren Bekämpfung - 18.12.2013 (3)
  6. Ungewollte Weiterleitung beim anklicken von google-Ergebnissen
    Plagegeister aller Art und deren Bekämpfung - 04.04.2013 (13)
  7. Weiterleitung von Google-Ergebnissen zu Spamseiten (Firefox)
    Plagegeister aller Art und deren Bekämpfung - 04.01.2013 (6)
  8. Nach Facebook-Link Umleitung von Google-Ergebnissen + Mozilla Toolbar mit Sexanzeigen...
    Log-Analyse und Auswertung - 09.01.2012 (7)
  9. W32/PatchLaod.A TR/ATRAPS.Gen2 Umleitung von google.de-Ergebnissen
    Plagegeister aller Art und deren Bekämpfung - 04.01.2012 (18)
  10. Weiterleitung von Google Ergebnissen auf andere Websites
    Plagegeister aller Art und deren Bekämpfung - 19.12.2011 (3)
  11. Redirect von Suchmaschinen-Ergebnissen
    Log-Analyse und Auswertung - 08.10.2010 (12)
  12. Umleitung bei Google-Ergebnissen
    Log-Analyse und Auswertung - 06.09.2010 (4)
  13. Unerwartete Verlinkung bei google Ergebnissen
    Log-Analyse und Auswertung - 07.04.2010 (15)
  14. Umleitung bei Google Ergebnissen und keine Verbindung zu Update Servern
    Plagegeister aller Art und deren Bekämpfung - 31.03.2010 (23)
  15. Wie mache ich nen Trojaner?
    Plagegeister aller Art und deren Bekämpfung - 18.06.2009 (11)
  16. Werde von Google Ergebnissen auf falsche Links weitergeleitet
    Log-Analyse und Auswertung - 09.05.2009 (12)
  17. Hilfe zu EScan-Ergebnissen
    Plagegeister aller Art und deren Bekämpfung - 30.08.2005 (9)

Zum Thema Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? - Hallo zusammen, habe heute mit AdwCleaner 3.210 eine Suche gestartet und ein paar Ergebnisse erhalten. Code: Alles auswählen Aufklappen ATTFilter # AdwCleaner v3.210 - Bericht erstellt am 20/05/2014 um 16:33:25 - Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?...
Archiv
Du betrachtest: Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.