unerwünschte Hintergrund-Werbung unter Win 8.1 - Malware?

Yountimer · 02.06.2014, 00:54

FRST.txt, Teil 2

Code:

ATTFilter

2014-05-15 12:10 - 2014-05-15 11:31 - 00024768 _____ () C:\WINDOWS\diagwrn.xml
2014-05-15 12:10 - 2014-05-15 11:31 - 00024768 _____ () C:\WINDOWS\diagerr.xml
2014-05-15 12:10 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-05-15 12:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-05-15 12:09 - 2014-05-15 12:09 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-15 12:09 - 2014-05-15 12:09 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-15 12:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-05-15 12:08 - 2014-05-15 12:08 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-15 12:08 - 2014-05-15 12:08 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-15 12:08 - 2014-05-15 12:08 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-15 12:08 - 2014-05-15 12:08 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-15 12:08 - 2014-05-15 12:08 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-15 12:08 - 2014-05-15 12:08 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-15 12:08 - 2014-05-15 12:08 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-15 12:08 - 2014-05-15 12:08 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-15 12:08 - 2014-05-15 12:08 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-15 12:08 - 2014-05-15 12:08 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-15 12:06 - 2014-05-15 12:06 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-15 12:06 - 2014-05-15 12:06 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-05-15 12:06 - 2014-05-15 12:06 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-15 12:06 - 2014-05-15 12:06 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-15 12:06 - 2014-05-15 12:06 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-15 12:06 - 2014-05-15 12:06 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-15 12:06 - 2014-05-15 12:06 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-15 12:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-05-15 12:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-05-15 12:05 - 2014-05-15 12:05 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-15 12:05 - 2014-05-15 12:05 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-15 12:05 - 2014-05-15 12:05 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-15 12:05 - 2014-05-15 12:05 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-15 12:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-05-15 12:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-05-15 12:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-15 12:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-15 12:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-15 12:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-15 12:04 - 2014-05-15 12:04 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 03359744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-05-15 12:04 - 2014-05-15 12:04 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-05-15 12:04 - 2014-05-15 12:04 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-05-15 12:04 - 2014-05-15 12:04 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-05-15 12:04 - 2014-05-15 12:04 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-05-15 12:04 - 2014-05-15 12:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-15 12:04 - 2014-05-15 12:04 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-15 12:02 - 2014-05-15 12:02 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-05-15 12:01 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-05-15 12:01 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-15 11:59 - 2014-05-15 11:59 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-05-15 11:59 - 2014-05-15 11:59 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-15 11:59 - 2014-05-15 11:59 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-15 11:59 - 2014-05-15 11:59 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-05-15 11:59 - 2014-05-15 11:59 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-05-15 11:59 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-05-15 11:59 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-05-15 11:51 - 2013-08-22 16:44 - 00410040 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-15 11:48 - 2014-04-16 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-15 11:48 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-05-15 11:48 - 2014-03-15 00:43 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-05-15 11:48 - 2014-03-05 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-15 11:48 - 2013-12-19 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-05-15 11:48 - 2013-12-06 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-05-15 11:48 - 2013-12-06 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-15 11:48 - 2013-09-26 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF 2 Word Converter
2014-05-15 11:48 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2014-05-15 11:48 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-05-15 11:48 - 2013-01-23 10:01 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Online Backup
2014-05-15 11:48 - 2013-01-01 11:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-15 11:48 - 2012-12-02 02:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-05-15 11:48 - 2012-12-01 22:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-15 11:48 - 2012-10-18 00:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaEspresso 6.5
2014-05-15 11:48 - 2012-10-17 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-05-15 11:48 - 2012-09-01 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-05-15 11:45 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-05-15 11:44 - 2014-05-15 11:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-15 11:43 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-05-15 11:43 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-05-15 11:43 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-05-15 11:43 - 2013-12-20 21:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-05-15 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-05-15 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-05-15 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-05-15 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-05-15 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-05-15 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-05-15 11:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-05-15 11:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-05-15 11:43 - 2012-12-02 02:08 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2014-05-15 11:43 - 2012-09-01 22:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-05-15 11:41 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-05-15 11:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-05-15 11:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-05-15 11:39 - 2014-05-15 11:15 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-15 11:39 - 2013-09-15 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Philips
2014-05-15 11:39 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-05-15 11:39 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-05-15 11:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-15 11:39 - 2012-09-01 22:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-15 11:39 - 2012-08-03 19:17 - 00000000 ____D () C:\ProgramData\PRICache
2014-05-15 11:34 - 2014-05-15 11:34 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-05-15 11:34 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-05-15 11:33 - 2014-05-15 11:31 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-15 11:33 - 2014-05-15 11:31 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Vorlagen
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Startmenü
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Netzwerkumgebung
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Lokale Einstellungen
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Eigene Dateien
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Druckumgebung
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Documents\Eigene Musik
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Documents\Eigene Bilder
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\AppData\Local\Verlauf
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\AppData\Local\Anwendungsdaten
2014-05-15 11:31 - 2014-05-15 11:31 - 00000000 _SHDL () C:\Users\Christian\Anwendungsdaten
2014-05-15 11:20 - 2014-05-15 12:11 - 00000000 __SHD () C:\Recovery
2014-05-15 11:15 - 2014-05-15 11:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-05-15 11:15 - 2014-05-15 11:15 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 11:14 - 2014-05-15 11:14 - 00000000 ____D () C:\Program Files\Elantech
2014-05-15 09:49 - 2013-01-23 10:01 - 00001862 _____ () C:\Users\Public\Desktop\McAfee Total Protection.lnk
2014-05-15 07:58 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-05-15 07:41 - 2012-12-01 22:41 - 00000000 ____D () C:\Users\Christian\AppData\Local\CrashDumps
2014-05-14 21:41 - 2012-12-01 21:53 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-14 10:32 - 2012-12-02 15:26 - 00000000 ____D () C:\Users\Christian\Documents\Steuerberater
2014-05-14 08:26 - 2012-12-01 21:52 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-05-14 08:18 - 2014-05-14 08:18 - 00000444 _____ () C:\Users\Christian\Downloads\Oliver Herrmann.vcf
2014-05-14 08:16 - 2014-05-14 08:16 - 00000433 _____ () C:\Users\Christian\Downloads\Manfred Polzer.vcf
2014-05-12 07:26 - 2014-06-01 15:16 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-01 15:16 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-01 15:16 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-05-11 13:48 - 2014-02-28 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 09:26 - 2014-05-11 09:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 10:08 - 2014-04-02 20:03 - 00004096 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cf4e9de0cc5dff
2014-05-10 10:08 - 2013-12-06 18:21 - 00003858 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 06:40 - 2014-05-17 09:07 - 23544320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-06 05:25 - 2014-05-17 09:07 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-06 05:00 - 2014-05-17 09:07 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-17 09:07 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe
[2014-05-15 12:04] - [2014-05-15 12:04] - 0407016 ____A (Microsoft Corporation) 067CB90C277DB4A737D5DEABA3055972

C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-05-15 12:04] - [2014-05-15 12:04] - 0310616 ___AC (Microsoft Corporation) 4BB9BC49DEE1A319EC58274A7BBED663



LastRegBack: 2014-06-01 12:05

==================== End Of Log ============================

und zu guter letzt noch die Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2014
Ran by Christian at 2014-06-02 01:46:56
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.1925 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2008 - CyberLink Corp.) Hidden
4660_4680_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{F6100F13-F183-47A2-94A8-9AAC4976E228}) (Version: 1.00.3013 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
Acer Theft Shield (HKLM\...\{8ADB0CD2-4E5A-452F-BB3B-3A2984CAC749}) (Version: 1.01.3006 - Acer Incorporated)
AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
AirPort (HKLM-x32\...\{AA68AAAE-41F0-40B5-8896-5947F5FD6889}) (Version: 5.6.1.2 - Apple Inc.)
Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.4.0.26 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.26 - Piriform)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3108 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3108 - Acer Incorporated)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3318_45364 - CyberLink Corp.)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3318_45364 - CyberLink Corp.) Hidden
Definition update for Microsoft Office 2010 (KB982726) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E14AE329-F210-4EDD-B775-290821C66C1F}) (Version:  - Microsoft)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
eBay Worldwide (HKLM-x32\...\{A694AF57-9891-4D62-824C-7E55A1361A14}) (Version: 2.3.0630 - OEM)
ETDWare PS/2-X64 11.6.6.002_WHQL (HKLM\...\Elantech) (Version: 11.6.6.002 - ELAN Microelectronic Corp.)
ExpressCache (HKLM\...\{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}) (Version: 1.0.86 - Diskeeper Corporation)
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP OfficeJet J4600 All-In-One Series (HKLM\...\{6122CE5C-9DD3-402D-8413-57B681739FA7}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
J4680 (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3004 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
McAfee Online Backup (Version: 1.16.4.0 - McAfee, Inc.) Hidden
McAfee Online Backup (x32 Version:  - McAfee, Inc.) Hidden
McAfee Total Protection (HKLM-x32\...\MSC) (Version: 12.8.958 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
ProductContext (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.41 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6690 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Sleep Memory Optimizer (HKLM\...\{A10FCEC8-5523-4C2D-8B42-091B48EDEB55}) (Version: 1.01.3000 - Acer Incorporated)
Smart Timer (HKLM-x32\...\{89DB52FC-EA72-468F-A0C7-150AF8B7AB74}) (Version: 1.00.3007 - Acer Incorporated)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Wi-Fi MediaConnect (HKLM-x32\...\{AA58346A-A5D7-4659-91D6-38D07345BDCF}) (Version: 1.6.43 - Philips)

==================== Restore Points  =========================

28-05-2014 06:54:12 Geplanter Prüfpunkt
01-06-2014 09:37:09 eBay Worldwide wird entfernt

==================== Hosts content: ==========================

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0B8D5EB0-8CE9-4B12-A11E-E674983DEA50} - System32\Tasks\Theft Shield\AcerTheftShieldTask => C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe [2012-11-12] (Acer Incorporated)
Task: {11C8A6BB-D07D-481B-BA46-8FCD494FF068} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] ()
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {2A76F629-BBDD-4524-8C86-17C98F81CB07} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {30227AC8-15FC-4201-BE42-7FED9EE1768C} - System32\Tasks\Smart Timer Task Scheduler => C:\Program Files\Smart Timer\Smart_Timer.exe [2012-06-22] (Acer Incorporated)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4E07C5B5-A27F-4453-AF75-4E1E8825F2D6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {66DDEF69-BACC-4ED5-BD2B-922B36FC3BF0} - System32\Tasks\GoogleUpdateTaskMachineUA1cf4e9de0cc5dff => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {73B81F62-C809-4957-952A-96867D3CE499} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {7E9218C2-3202-44E3-ACCC-0655521438B1} - \ASO-OneClickCare No Task File <==== ATTENTION
Task: {7E9E0AEB-D3EE-4317-B2C9-09036D8E2EA2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {8367CA42-CC05-4ED5-8487-44D35FB3A018} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {84F18D4D-39B2-4B42-B66F-8FF0173AA01A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-05-19] (Microsoft Corporation)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {902E1DFF-C46A-4195-BC82-965272244E0D} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-22] ()
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A01219C0-0502-4B47-B2F5-B7A354F3FB77} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {AAF662AE-560F-4AA1-8BD2-825A4870F6D4} - System32\Tasks\SpyHunter4 => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
Task: {B5B84B5D-447D-4E43-8D8E-6189ABC09675} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-22] ()
Task: {B9BC0749-E52B-4662-9324-F985FF6B1836} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: {CE4EF453-8441-47D4-A522-999DE824E922} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D25DF78A-3D07-4939-9C8E-9CE6A3225E0A} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-18] (CyberLink)
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DF419382-A030-4A02-B6E3-0EF27946A7BE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.)
Task: {E3516B3A-D582-4A13-8141-491447FF0ABD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf4e9de0cc5dff.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SpyHunter4.job => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe

==================== Loaded Modules (whitelisted) =============

2013-01-28 14:45 - 2013-01-28 14:45 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-01-28 14:47 - 2013-01-28 14:47 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-05-11 09:26 - 2014-05-11 09:26 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2012-10-17 23:36 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Christian\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (06/02/2014 01:47:04 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {3c8cbf32-173c-41da-afd6-4bc249793708}


System errors:
=============
Error: (06/02/2014 01:45:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Winferno Subscription Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/02/2014 01:40:46 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/02/2014 01:40:46 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/02/2014 01:40:46 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/02/2014 01:40:45 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/02/2014 01:40:45 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/02/2014 01:17:47 AM) (Source: DCOM) (EventID: 10010) (User: S3)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (06/02/2014 01:17:17 AM) (Source: DCOM) (EventID: 10010) (User: S3)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (06/02/2014 01:16:47 AM) (Source: DCOM) (EventID: 10010) (User: S3)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (06/02/2014 01:16:17 AM) (Source: DCOM) (EventID: 10010) (User: S3)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}


Microsoft Office Sessions:
=========================
Error: (06/02/2014 01:47:04 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {3c8cbf32-173c-41da-afd6-4bc249793708}


==================== Memory info =========================== 

Percentage of memory in use: 42%
Total physical RAM: 3911.27 MB
Available physical RAM: 2246.09 MB
Total Pagefile: 4871.27 MB
Available Pagefile: 3086.63 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:452.3 GB) (Free:177.17 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 69B9847F)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 19 GB) (Disk ID: 86B0F6E6)

Partition: GPT Partition Type.

==================== End Of Log ============================

so, jetzt geh' ich ins Bett und bin gespannt auf Morgen, ob ich immer noch was falsch gemacht habe und Du nach wie vor nicht mehr mit mir sprichst...

M-K-D-B · 02.06.2014, 14:39

Zitat:

Zitat von Yountimer

so, jetzt geh' ich ins Bett und bin gespannt auf Morgen, ob ich immer noch was falsch gemacht habe und Du nach wie vor nicht mehr mit mir sprichst...

Was ist eigentlich dein Problem?
Denkst du, ich bin nur für dich hier?
Denkst du, ich habe kein Privatleben und sitze 24h pro Tag vor dem PC?

Wenn dir die Wartezeiten hier zu lange sind, dann wende dich bitte an einen Vor-Ort-Service vor Ort. Gegebenenfalls bekommst du dann so "kompetente" Antworten wie "Windows neu installieren" oder musst Geld bezahlen.

Blöd anreden lass ich mich nicht.

Yountimer · 02.06.2014, 15:27

Ups, jetzt bin ich Dir auch noch auf den Schlips getreten, ohne es zu wollen, bzw. zu wissen...mir lag es fern, Dich blöd anzureden...Du reagiertest gestern immer sehr schnell und ich fragte mich am Abend, warum plötzlich keine antwort mehr kam, also las ich mir nochmal Dein email durch und stieß auf den Hinweis in fetter Schrift, ich möge doch vom Desktop aus starten...nun hatte ich Dir anfangs auch geschrieben, dass ich gar keine Chance hatte, die Tools auf dem Desktop zu speichern...nachdem ich also - wie gesagt nichts mehr von Dir hörte, dachte ich, dass Du mir nicht mehr helfen möchtest, weil ich Deine Anweisungen nicht befolgt hatte...also habe ich mich hingesetzt und überlegt, wie ich die von Dir aufgezeigten Downloads auf den Desktop bekomme, hab's selber hinbekommen und dann nochmal alle von Dir erwähnten Schritte durchgeführt und als ich endlich fertig war, war ich auch müde und kaputt und hab' mich verabschiedet mit der Hoffnung, Du erkennst an, dass ich nun alles geliefert hatte, wie Du es gefordert hast...wenn ich Dich beleidigt haben sollte, dann verzeih' bitte, das war nicht meine Absicht, ich schreibe einfach alles, was ich denke und das ist vielleicht manchmal zu viel...
Laß mich bitte noch wissen, ob Du Dein "Helfer-Mandat" niederlegst, dann muss ich mir wirklich woanders Hilfe suchen, denn ich bin - wie von mir erwähnt - nicht begabt in diesen Dingen...

Sorry
LG
Christian

M-K-D-B · 02.06.2014, 19:24

Servus,

hast du immer noch Hintergrundwerbung? Wenn ja, wie sieht die aus?

Kannst du mir davon mal einen Screenshot posten?

Yountimer · 02.06.2014, 19:56

Hi,

nein, Hintergrundwerbung läuft seit gestern keine mehr, war aber auch immer nur audiale Werbung und nie Pop-Up-Filmchen...aber irgendwie bin ich mit der Performance des Laptops komplett unzufrieden und zudem klappt das mit dem Firefox nicht so recht...ich nutze ihn zu 100%, doch wenn ich einen neuen Reiter öffne, springt er automatisch in die google-Startseite...und noch was...bis sich emails in Outlook öffnen oder anklicken lassen, vergeht eine Ewigkeit...kurzum: ich habe das Gefühl, hier arbeite nicht nur ich drauf, sondern da lesen zeitgleich Tausend andere mit, was ich mache...das Ding ist komplett langsam geworden...

P.S.: danke, dass Du zurück bist :-)

M-K-D-B · 03.06.2014, 18:01

Mach mal bitte hitmanpro:

Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Yountimer · 04.06.2014, 14:48

Hi, Danke für den Tipp...habe alles, wie beschrieben durchgeführt, jedoch hat mein Rechner nur ein ein.log-Datei abgespeichert und ich konnte auch nicht auf eine .txt Datei ändern.

Hier ist das file

Code:

ATTFilter


	Code: 

 ATTFilter

  
	HitmanPro 3.7.9.216
www.hitmanpro.com

   Computer name . . . . : S3
   Windows . . . . . . . : 6.3.0.9600.X64/4
   User name . . . . . . : S3\Christian
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Trial (30 days left)

   Scan date . . . . . . : 2014-06-04 15:28:30
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 5m 37s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 37

   Objects scanned . . . : 2.159.570
   Files scanned . . . . : 70.265
   Remnants scanned  . . : 923.022 files / 1.166.283 keys

Potential Unwanted Programs _________________________________________________

   HKU\S-1-5-21-2607981277-283046981-3038613418-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro) -> Deleted
   HKU\S-1-5-21-2607981277-283046981-3038613418-1001\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow (22Find) -> Deleted
   HKU\S-1-5-21-2607981277-283046981-3038613418-1001\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome (22Find) -> Deleted

Cookies _____________________________________________________________________

   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:112.2o7.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:2o7.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad-emea.doubleclick.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad.360yield.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad.ad-srv.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad.adserver01.de
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad.dyntracker.de
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad.movad.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ad.zanox.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ads.creative-serving.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ads.mediade.sk
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ads.p161.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ads.stickyadstv.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ads.yahoo.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:adtech.de
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:adtechus.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:advertising.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:atdmt.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:bs.serving-sys.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:casalemedia.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:de.sitestat.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:doubleclick.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:eas.apm.emediate.eu
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:media6degrees.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:mediaplex.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:revsci.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:ru4.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:serving-sys.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:smartadserver.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:stats.paypal.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:track.adform.net
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:tradedoubler.com
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:www.etracker.de
   C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\dvkd2e30.default-1390234382487\cookies.sqlite:www.googleadservices.com

Gruß
Christian

02.06.2014, 19:24	#4
M-K-D-B /// TB-Ausbilder	unerwünschte Hintergrund-Werbung unter Win 8.1 - Malware? Servus, hast du immer noch Hintergrundwerbung? Wenn ja, wie sieht die aus? Kannst du mir davon mal einen Screenshot posten?

unerwünschte Hintergrund-Werbung unter Win 8.1 - Malware?

Plagegeister aller Art und deren Bekämpfung: unerwünschte Hintergrund-Werbung unter Win 8.1 - Malware?