|
Log-Analyse und Auswertung: Windows 8.1 Adware leitet um und lässt sich nicht entfernenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
13.06.2014, 14:09 | #1 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernen Folgendes Problem seit ich mir die Treiber für Samsung (Smartphone) auf den Lppi insterliert habe habe ich Probleme. Bei der Installation hatte ich zwar sämtliche hacken für zusatzsoftware entfernt aber es kam dennoch etwas. Das hatte ich dan eigentlich gelöscht dachte ich zumindest aber als ich letztens auf 9gag unterwegs war hat der Browser (Firefox) plötzlich komplett zu spinnen begonnen geschlossen wieder geöffnet und das mehrmals. Antivier ist Kaspersky Internet security Intressanter weise sind die browser addons von Kaersky nun auch aus Firfox verschwunden und die startseite wurde auf hxxp://www.delta-homes.com/?type=sc&ts=1402608147&from=wpm0612&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H gelegt was sich durch die normalen Browsermöglichkeiten auch nicht ändern lässt. Das Unerwünschte Programm heißt 337 Games das vorhin erwähnte hies wpm.exe was mich auf Sweet page umgeleitet hatte. Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 13.06.2014 Scan Time: 14:52:10 Logfile: Malwarebites log.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.06.13.05 Rootkit Database: v2014.06.02.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: Wastl Scan Type: Threat Scan Result: Completed Objects Scanned: 261333 Time Elapsed: 5 min, 44 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 4 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [de1b70073447bd79bda538a956ad6997], PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\sweet-pageSoftware, , [47b202750f6c8da90850a545fd06ef11], PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [7d7cd99e403b4de9b5ad5e83d42f3cc4], PUP.Optional.Qone8, HKU\S-1-5-21-3467414825-1045090921-3388182043-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [59a071062457ef47174a687958abfd03], Registry Values: 0 (No malicious items detected) Registry Data: 12 PUP.Optional.SweetPage.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.sweet-page.com/?type=sc&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.sweet-page.com/?type=sc&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[af4a1a5de3980531ad37066fa262c23e] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.sweet-page.com/web/?type=ds&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms}, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/web/?type=ds&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms}),,[976206712d4efc3aba2c1560d92bf20e] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[b84178ffe794db5b4d982e47877dcf31] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[18e1abccd5a652e45b8c1a5b2ed6da26] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[54a5e097e596cf6792e6b5c0c93bf30d] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.sweet-page.com/?type=sc&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.sweet-page.com/?type=sc&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[02f71166c3b80d29d311dd9832d2e31d] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.sweet-page.com/web/?type=ds&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms}, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/web/?type=ds&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms}),,[a851d1a6bdbed561ab3b2b4a857fa858] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[4dacd89faccf0a2c7570d3a27c88d42c] PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[d623b0c74734b185e8ffcaab41c3718f] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[14e5ec8beb90eb4b1e5a1c596e966997] PUP.Optional.SweetPage.A, HKU\S-1-5-21-3467414825-1045090921-3388182043-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[7d7c5d1af88336008260a1d48d7748b8] PUP.Optional.SweetPage.A, HKU\S-1-5-21-3467414825-1045090921-3388182043-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H, Good: (hxxp://www.google.com), Bad: (hxxp://www.sweet-page.com/?type=hp&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H),,[fafffd7a8af1b0865c85c0b5c83cd42c] Folders: 0 (No malicious items detected) Files: 4 PUP.Optional.SkyTech.A, C:\Users\Wastl\AppData\Local\Temp\7853484\7853484.zipDir\alilog.dll, , [f80101768dee0a2cd64d2d054eb2738d], PUP.Optional.Skytech.A, C:\Users\Wastl\AppData\Local\Temp\7853484\7853484.zipDir\UninstallManager.exe, , [27d2f483a2d99c9ad4761078e819649c], PUP.Optional.IePluginService.A, C:\Users\Wastl\AppData\Local\Temp\7853484\7853484.zipDir\tmp\SupTab_Setup302.exe, , [ad4cdc9bb8c3e155480979e05ca5fc04], PUP.Optional.WpManager, C:\Users\Wastl\AppData\Local\Temp\7853484\7853484.zipDir\tmp\wpm_v18.8.0.304.exe, , [6c8d4c2be695b97d328979ea1ae78f71], Physical Sectors: 0 (No malicious items detected) (end) |
13.06.2014, 14:49 | #2 |
/// the machine /// TB-Ausbilder | Windows 8.1 Adware leitet um und lässt sich nicht entfernen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
13.06.2014, 21:36 | #3 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernenCode:
ATTFilter can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02 Ran by Wastl (administrator) on MININT-Q7TDJTS on 13-06-2014 22:35:23 Running from C:\Users\Wastl\Desktop Platform: Windows 8.1 Pro (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe () C:\Program Files (x86)\Hotkey\Hotkey.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-30] (Synaptics Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13664984 2014-01-08] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation) HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications)) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{C855D7CE-4D71-4F75-8270-8F5405DC37F0}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1402608147&from=wpm0612&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1402608147&from=wpm0612&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1402181534&from=wld&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Tcpip\Parameters: [DhcpNameServer] 172.30.3.254 FireFox: ======== FF ProfilePath: C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: delta-homes FF SelectedSearchEngine: delta-homes FF Homepage: hxxp://www.delta-homes.com/?type=hp&ts=1402608147&from=wpm0612&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\faststartff@gmail.com [2014-06-12] FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\shortcutff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com [2014-06-12] FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.delta-homes.com/?type=sc&ts=1402608147&from=wpm0612&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-09] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [46080 2013-07-09] () [File not signed] R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [340480 2013-10-16] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 AirplaneModeHid; C:\Windows\system32\DRIVERS\AirplaneModeHid.sys [25264 2012-12-23] (Insyde Corporation) R3 akwbx; C:\Windows\system32\DRIVERS\akwbx64.sys [3881168 2013-09-24] (Qualcomm Atheros, Inc.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-04] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-06-04] (Kaspersky Lab) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-06-04] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-06-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-06-04] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-06-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-06-04] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-13] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [26424 2012-11-30] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) R3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation) S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X] S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-13 22:35 - 2014-06-13 22:35 - 00017088 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-13 16:39 - 2014-06-13 22:35 - 00000000 ____D () C:\FRST 2014-06-13 16:38 - 2014-06-13 16:38 - 02081792 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-13 16:27 - 2014-06-13 16:27 - 00001160 _____ () C:\Users\Wastl\Desktop\13.6.malwareb.txt 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 15:18 - 2014-06-13 15:18 - 00000058 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-13 22:30 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2014-06-13 14:51 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2014-06-13 14:51 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2014-06-12 23:22 - 2014-06-12 23:22 - 00000967 _____ () C:\Users\Wastl\Desktop\337 GAMES.lnk 2014-06-12 23:22 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\337Games 2014-06-12 23:22 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\337Games 2014-06-12 22:19 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-06-12 22:18 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-06-12 22:18 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-06-12 22:18 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-06-12 22:18 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-06-12 22:18 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-06-12 22:18 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-06-12 22:18 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2014-06-12 22:18 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe 2014-06-12 22:18 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll 2014-06-12 22:18 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll 2014-06-12 22:18 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2014-06-12 22:18 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2014-06-12 22:18 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll 2014-06-12 22:18 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll 2014-06-12 22:18 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll 2014-06-12 22:18 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll 2014-06-12 22:18 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2014-06-12 22:18 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys 2014-06-12 22:18 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll 2014-06-12 22:18 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys 2014-06-12 22:18 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-06-12 22:18 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll 2014-06-12 22:18 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2014-06-12 22:18 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2014-06-12 22:18 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys 2014-06-12 22:18 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe 2014-06-12 22:18 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe 2014-06-12 22:18 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-06-12 22:18 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll 2014-06-12 22:18 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2014-06-12 22:18 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe 2014-06-12 22:18 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2014-06-12 22:18 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll 2014-06-12 22:18 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll 2014-06-12 22:18 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll 2014-06-12 22:18 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2014-06-12 22:18 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll 2014-06-12 22:18 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-06-12 22:18 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 22:18 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2014-06-12 22:18 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll 2014-06-12 22:18 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2014-06-12 22:18 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll 2014-06-12 22:18 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll 2014-06-12 22:18 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll 2014-06-12 22:18 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2014-06-12 22:18 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-06-12 22:18 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll 2014-06-12 22:18 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll 2014-06-12 22:18 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll 2014-06-12 22:18 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll 2014-06-12 22:18 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll 2014-06-12 22:18 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe 2014-06-12 22:18 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe 2014-06-12 22:18 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2014-06-12 22:18 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll 2014-06-12 22:18 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll 2014-06-12 22:18 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll 2014-06-12 22:18 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll 2014-06-12 22:18 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe 2014-06-12 22:18 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2014-06-12 22:18 - 2014-03-21 06:14 - 00219136 _____ (Microsoft Corporation) C:\windows\system32\tscfgwmi.dll 2014-06-12 22:18 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe 2014-06-12 22:18 - 2014-03-20 02:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2014-06-12 22:18 - 2014-03-20 01:38 - 00590336 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2014-06-12 22:18 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys 2014-06-12 22:18 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll 2014-06-12 22:18 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll 2014-06-12 22:18 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2014-06-12 22:18 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll 2014-06-12 22:18 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll 2014-06-12 22:18 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys 2014-06-12 22:18 - 2014-03-18 10:18 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\xusb22.sys 2014-06-12 22:18 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv 2014-06-12 22:18 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2014-06-12 22:18 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv 2014-06-12 22:18 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys 2014-06-12 22:17 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-06-12 22:17 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-06-12 22:17 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe 2014-06-12 22:17 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2014-06-12 22:17 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2014-06-12 22:17 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe 2014-06-12 22:17 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys 2014-06-12 22:17 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll 2014-06-12 22:17 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll 2014-06-12 22:17 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll 2014-06-12 22:17 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll 2014-06-12 22:17 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2014-06-12 22:17 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2014-06-12 22:17 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-12 23:22 - 00001401 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-12 23:22 - 00001389 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-11 22:20 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-09 11:29 - 2014-06-11 22:18 - 00000000 ____D () C:\ProgramData\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:21 - 2014-06-09 11:20 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 11:01 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\windows\system32\CNMLMAT.DLL 2014-06-08 00:53 - 2014-06-12 23:22 - 00000000 ____D () C:\ProgramData\WPM 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\windows\SysWOW64\secman.dll 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-10 14:29 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 22:49 - 2014-06-07 23:02 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 16:48 - 2014-06-04 15:43 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2011-03-31 10:07 - 00114688 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATU.dll 2014-06-04 12:35 - 2011-03-30 12:54 - 00323584 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATL.dll 2014-06-04 12:35 - 2010-11-12 11:13 - 00068096 _____ () C:\windows\SysWOW64\CNC1754D.TBL 2014-06-04 12:35 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\windows\SysWOW64\CNHMCA.dll 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:06 - 2011-02-03 02:20 - 00256000 _____ (CANON INC.) C:\windows\system32\CNMIUAT.DLL 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 12:05 - 2011-02-01 10:23 - 00355840 _____ (CANON INC.) C:\windows\system32\CNMN6PPM.DLL 2014-06-04 12:05 - 2011-02-01 10:23 - 00038400 _____ (CANON INC.) C:\windows\system32\CNMN6UI.DLL 2014-06-04 12:05 - 2011-02-01 10:22 - 00363008 _____ (CANON INC.) C:\windows\SysWOW64\CNMNPPM.DLL 2014-06-04 12:03 - 2014-06-04 12:39 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 11:43 - 2014-06-04 11:43 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-13 16:27 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:23 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-04 02:18 - 2014-06-13 22:30 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-09 11:32 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:48 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2014-06-04 01:48 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2014-06-04 01:48 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2014-06-04 01:48 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2014-06-04 01:48 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2014-06-04 01:48 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2014-06-04 01:48 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2014-06-04 01:48 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2014-06-04 01:48 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll 2014-06-04 01:48 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll 2014-06-04 01:48 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys 2014-06-04 01:48 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys 2014-06-04 01:48 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys 2014-06-04 01:40 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-06-04 01:39 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-06-04 01:39 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-06-13 15:27 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-04 01:27 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-06-04 01:27 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-06-04 01:27 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2014-06-04 01:27 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:22 - 2014-06-13 22:35 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Temp 2014-06-04 01:22 - 2014-06-13 22:30 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-04 01:22 - 2014-06-13 22:30 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-04 01:22 - 2014-06-08 00:52 - 00001682 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-04 01:22 - 2014-06-05 23:25 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-04 01:22 - 2014-06-05 22:46 - 00000000 ____D () C:\Users\Wastl 2014-06-04 01:22 - 2014-06-04 11:41 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-04 01:22 - 2014-06-04 01:43 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:22 - 2014-06-04 01:26 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:22 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2014-05-20 15:50 - 00000000 ____D () C:\windows\Panther 2014-05-21 00:38 - 2010-03-31 15:42 - 00020574 _____ () C:\windows\system32\logo.bmp 2014-05-21 00:33 - 2013-04-25 19:24 - 01721576 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01009.dll 2014-05-21 00:33 - 2013-03-12 22:20 - 00064624 _____ (Intel Corporation) C:\windows\system32\Drivers\HECIx64.sys 2014-05-21 00:33 - 2012-12-07 08:57 - 09888912 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsBaStorIcon.dll 2014-05-21 00:33 - 2012-12-07 08:57 - 00302224 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RtsBaStor.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 01035064 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00531768 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00464184 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00229176 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00179512 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo15.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00113976 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynTPCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00031032 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00026424 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_AMDASF.sys 2014-05-21 00:33 - 2012-09-23 01:17 - 00021160 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\amdkmafd.sys 2014-05-21 00:33 - 2012-08-08 12:16 - 02152176 _____ (Microsoft Corporation) C:\windows\system32\WudfUpdate_01009.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 01002728 _____ (Microsoft Corporation) C:\windows\system32\WinUsbCoinstaller2.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 00020000 _____ (AuthenTec) C:\windows\system32\tccoinst.dll 2014-05-21 00:33 - 2011-09-15 05:11 - 01048576 _____ () C:\windows\system32\syndata.bin 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:10 - 2014-06-08 00:50 - 00000000 ____D () C:\ProgramData\Samsung 2014-05-20 15:10 - 2014-06-04 01:22 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:52 - 2014-05-20 14:53 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-06-13 22:28 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-20 14:49 - 2014-05-30 01:07 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-20 14:49 - 2014-05-30 01:07 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 03:25 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 14:49 - 2014-05-20 03:25 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 14:49 - 2014-05-15 01:49 - 03774821 _____ () C:\windows\system32\nvcoproc.bin 2014-05-20 14:48 - 2014-05-20 04:44 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 14:48 - 2014-05-20 04:44 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 14:47 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll 2014-05-20 14:47 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys 2014-05-20 14:47 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll 2014-05-20 14:47 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco6420103.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01890080 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433750.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01539416 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433750.dll 2014-05-20 14:44 - 2014-06-04 01:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-06-08 00:15 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-05-20 14:43 - 2014-06-04 01:27 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2014-05-20 14:42 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-05-20 14:42 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll 2014-05-20 14:41 - 2014-06-13 22:30 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-05-20 14:41 - 2014-06-04 01:57 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-05-20 14:41 - 2014-06-04 01:57 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-05-20 14:41 - 2014-05-20 14:41 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-05-20 14:40 - 2014-06-13 22:31 - 01630274 _____ () C:\windows\WindowsUpdate.log 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 15:00 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec ==================== One Month Modified Files and Folders ======= 2014-06-13 22:35 - 2014-06-13 22:35 - 00017088 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-13 22:35 - 2014-06-13 16:39 - 00000000 ____D () C:\FRST 2014-06-13 22:35 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Temp 2014-06-13 22:31 - 2014-05-20 14:40 - 01630274 _____ () C:\windows\WindowsUpdate.log 2014-06-13 22:30 - 2014-06-13 14:51 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-13 22:30 - 2014-06-04 02:18 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-13 22:30 - 2014-06-04 01:22 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-13 22:30 - 2014-06-04 01:22 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-13 22:30 - 2014-05-20 14:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-06-13 22:28 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-13 22:28 - 2014-03-07 13:03 - 00060300 _____ () C:\windows\PFRO.log 2014-06-13 22:28 - 2013-08-22 16:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-06-13 22:28 - 2013-08-22 16:44 - 00335992 _____ () C:\windows\system32\FNTCACHE.DAT 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ToastData 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\WinStore 2014-06-13 16:40 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\oobe 2014-06-13 16:40 - 2013-08-22 15:25 - 00524288 ___SH () C:\windows\system32\config\BBI 2014-06-13 16:38 - 2014-06-13 16:38 - 02081792 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-13 16:27 - 2014-06-13 16:27 - 00001160 _____ () C:\Users\Wastl\Desktop\13.6.malwareb.txt 2014-06-13 16:27 - 2014-06-04 02:59 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 16:08 - 2013-08-22 17:20 - 00000000 ____D () C:\windows\CbsTemp 2014-06-13 16:07 - 2014-03-07 13:59 - 00000000 ____D () C:\windows\system32\MRT 2014-06-13 16:07 - 2014-03-07 13:58 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-06-13 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\sru 2014-06-13 15:27 - 2014-06-04 01:27 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-13 15:22 - 2014-03-07 13:19 - 01776918 _____ () C:\windows\system32\PerfStringBackup.INI 2014-06-13 15:22 - 2013-08-23 01:24 - 00765582 _____ () C:\windows\system32\perfh007.dat 2014-06-13 15:22 - 2013-08-23 01:24 - 00159366 _____ () C:\windows\system32\perfc007.dat 2014-06-13 15:18 - 2014-06-13 15:18 - 00000058 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-12 23:24 - 2013-08-22 15:25 - 00262144 ___SH () C:\windows\system32\config\ELAM 2014-06-12 23:22 - 2014-06-12 23:22 - 00000967 _____ () C:\Users\Wastl\Desktop\337 GAMES.lnk 2014-06-12 23:22 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\337Games 2014-06-12 23:22 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\337Games 2014-06-12 23:22 - 2014-06-09 11:35 - 00001401 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-12 23:22 - 2014-06-09 11:35 - 00001389 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-12 23:22 - 2014-06-08 00:53 - 00000000 ____D () C:\ProgramData\WPM 2014-06-12 23:22 - 2014-06-04 02:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-11 22:26 - 2014-03-07 17:26 - 00130809 _____ () C:\windows\DirectX.log 2014-06-11 22:20 - 2014-06-09 11:29 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-11 22:18 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\IObit 2014-06-11 14:50 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\AppReadiness 2014-06-10 14:29 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:32 - 2014-06-04 02:00 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:20 - 2014-06-09 11:21 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 00:53 - 2013-08-22 16:46 - 00038865 _____ () C:\windows\setupact.log 2014-06-08 00:52 - 2014-06-04 01:22 - 00001682 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-08 00:50 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 23:02 - 2014-06-07 22:49 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-06 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\rescache 2014-06-05 23:25 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-05 22:46 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 15:43 - 2014-06-04 16:48 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:39 - 2014-06-04 12:03 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 12:36 - 2014-06-04 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:35 - 2013-08-22 17:36 - 00000000 __RSD () C:\windows\Media 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 11:43 - 2014-06-04 11:43 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-04 11:41 - 2014-06-04 01:22 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:57 - 2014-05-20 14:41 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-06-04 01:57 - 2014-05-20 14:41 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-06-04 01:57 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys 2014-06-04 01:57 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys 2014-06-04 01:57 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys 2014-06-04 01:57 - 2013-05-07 17:56 - 00065120 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klwfp.sys 2014-06-04 01:57 - 2012-07-27 18:38 - 00029792 _____ (Kaspersky Lab) C:\windows\system32\Drivers\klelam.sys 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-06-04 01:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates 2014-06-04 01:43 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:40 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-06-04 01:26 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:23 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Atheros 2014-06-04 01:16 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\NDF 2014-05-31 07:13 - 2014-03-07 14:56 - 00703992 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2014-03-07 14:56 - 00105464 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 12:21 - 2014-06-12 22:18 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-12 22:18 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-12 22:18 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-12 22:18 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-12 22:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-12 22:18 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-12 22:19 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-12 22:18 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-12 22:18 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-12 22:18 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-12 22:18 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-12 22:18 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-12 22:18 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-12 22:18 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-12 22:19 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-12 22:18 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 22:19 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-05-30 09:54 - 2014-06-12 22:18 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-12 22:18 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-12 22:18 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-12 22:18 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-12 22:18 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-12 22:18 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-12 22:18 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2013-08-22 17:36 - 00262144 _____ () C:\windows\system32\config\BCD-Template 2014-05-20 15:51 - 2013-08-22 17:37 - 00003134 _____ () C:\windows\DtcInstall.log 2014-05-20 15:51 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\Sysprep 2014-05-20 15:50 - 2014-05-21 00:38 - 00000000 ____D () C:\windows\Panther 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:11 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 15:10 - 2014-03-07 13:19 - 00000051 _____ () C:\windows\smsts.ini 2014-05-20 15:10 - 2014-03-07 13:16 - 00000000 _____ () C:\windows\authtest.txt 2014-05-20 15:00 - 2014-05-20 14:39 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:53 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 14:44 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\Help 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2014-05-20 14:42 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-05-20 14:42 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\restore 2014-05-20 14:41 - 2014-05-20 14:41 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-05-20 14:41 - 2013-08-22 17:36 - 00000000 ___HD () C:\windows\ELAMBKUP 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\WinBioPlugIns 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\Recovery 2014-05-20 04:44 - 2014-06-04 01:39 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-05-20 04:44 - 2014-06-04 01:39 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 04:44 - 2014-05-20 14:46 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 04:44 - 2014-05-20 14:46 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 03:25 - 2014-05-20 14:49 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 01:10 - 2014-06-04 01:40 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-05-19 08:31 - 2014-06-12 22:17 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-05-19 08:21 - 2014-06-12 22:17 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-05-19 07:23 - 2014-06-12 22:17 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe 2014-05-15 01:49 - 2014-05-20 14:49 - 03774821 _____ () C:\windows\system32\nvcoproc.bin Some content of TEMP: ==================== C:\Users\Wastl\AppData\Local\Temp\FreemakeVideoConverter_4.1.4.1.exe C:\Users\Wastl\AppData\Local\Temp\MSETUP4.EXE C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Wastl\AppData\Local\Temp\nvStInst.exe C:\Users\Wastl\AppData\Local\Temp\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0.exe C:\Users\Wastl\AppData\Local\Temp\sdanircmdc.exe C:\Users\Wastl\AppData\Local\Temp\sdapskill.exe C:\Users\Wastl\AppData\Local\Temp\sdaspwn.exe C:\Users\Wastl\AppData\Local\Temp\sweetpage294wld_n2.exe C:\Users\Wastl\AppData\Local\Temp\uninstall.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-13 15:27 ==================== End Of Log ============================ |
13.06.2014, 21:37 | #4 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernenCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2014 02 Ran by Wastl at 2014-06-13 22:35:38 Running from C:\Users\Wastl\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== 337 GAMES (HKCU\...\337Games) (Version: 1.1.1.0 - ) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Airplane Mode Hid Installer (HKLM-x32\...\InstallShield_{5E5B067F-52A4-447E-A3F1-D6DD10565E73}) (Version: 2.0.0.3 - ) Airplane Mode Hid Installer (x32 Version: 2.0.0.3 - ) Hidden Blood Bowl: Legendary Edition (HKLM-x32\...\Steam App 58520) (Version: - Cyanide Studios) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - ) Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version: - ) Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - ) Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version: - ) Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - ) Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios) Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation) Hotkey 8.0132 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 8.0132 - NoteBook) Hotkey 8.0132 (x32 Version: 8.0132 - NoteBook) Hidden Insyde Airplane Mode HID Mini-Driver (HKLM\...\AirplaneModeHid) (Version: 1.2.0.0 - Insyde Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.3.8.2663 - IObit) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden Kung Fu Strike: The Warrior's Rise (HKLM-x32\...\Steam App 212030) (Version: - Qooc Software ) Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\Steam App 234670) (Version: - CyberConnect 2) NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.1.306 - Qualcomm Atheros Communications) Hidden Qualcomm Atheros Killer Wireless-N Drivers (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Network Manager (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Performance Suite (HKLM-x32\...\{BB96DF0C-B36B-46E2-B8E4-635773ECD782}) (Version: 1.0.36.1278 - Qualcomm Atheros) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7156 - Realtek Semiconductor Corp.) Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Hidden Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics) SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.4.0 - Synaptics Incorporated) Trials Fusion (HKLM-x32\...\Steam App 245490) (Version: - RedLynx, in collaboration with Ubisoft Shanghai, Ubisoft Kiev) Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft) Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft) Windows-Treiberpaket - Insyde (AirplaneModeHid) HIDClass (12/22/2012 1.2.0.0) (HKLM\...\F7113EB21220F70774B94DB60BA4FE35AE3C8503) (Version: 12/22/2012 1.2.0.0 - Insyde) ==================== Restore Points ========================= 20-05-2014 13:51:25 Windows-Sicherung 03-06-2014 23:27:30 DirectX wurde installiert 07-06-2014 22:15:03 Installed Samsung Kies3 10-06-2014 12:19:55 DirectX wurde installiert 11-06-2014 20:26:31 DirectX wurde installiert ==================== Hosts content: ========================== 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {11BA1EC9-FF9A-49A7-A79E-F8EA46B5C059} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {36DE6763-106C-4428-93DE-7CB7709FDC60} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2014-06-13] (Microsoft Corporation) Task: {37D02F7F-FC1E-4C54-B4BB-DA2C29D820A7} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {8724E9F7-9D09-4B66-BA7F-88ED21AECC35} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {C3E1DC27-8C5D-40D9-94C2-45917DE17580} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-06-09] (IObit) Task: {CE601DED-14E6-4758-9DB2-C159A8BB2416} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D0525836-EF28-4F93-A741-2D7FBA89589E} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-04] (Adobe Systems Incorporated) Task: {D2075270-B318-45D4-BE53-0D062B6DEA97} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {F2E98465-E5B7-4047-918A-63C19C58FC9C} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe ==================== Loaded Modules (whitelisted) ============= 2014-05-20 14:49 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-07-09 14:42 - 2013-07-09 14:42 - 00046080 _____ () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe 2013-09-25 03:04 - 2013-09-25 03:04 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-09-25 03:01 - 2013-09-25 03:01 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2013-09-25 03:08 - 2013-09-25 03:08 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2014-02-11 20:21 - 2014-02-11 20:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll 2014-02-11 20:22 - 2014-02-11 20:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll 2014-02-11 20:21 - 2014-02-11 20:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll 2014-02-11 20:22 - 2014-02-11 20:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll 2013-08-01 17:50 - 2013-08-01 17:50 - 04902400 _____ () C:\Program Files (x86)\Hotkey\Hotkey.exe 2013-10-16 15:36 - 2013-10-16 15:36 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2014-06-09 11:35 - 2014-05-07 04:27 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Wastl\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= HKLM\...\StartupApproved\Run: => "CanonMyPrinter" HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX" HKLM\...\StartupApproved\Run32: => "CanonSolutionMenuEx" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/12/2014 11:22:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: KickChrome.exe, Version: 2.0.3.398, Zeitstempel: 0x53992b35 Name des fehlerhaften Moduls: KickChrome.exe, Version: 2.0.3.398, Zeitstempel: 0x53992b35 Ausnahmecode: 0xc0000409 Fehleroffset: 0x0000a205 ID des fehlerhaften Prozesses: 0x5f4 Startzeit der fehlerhaften Anwendung: 0xKickChrome.exe0 Pfad der fehlerhaften Anwendung: KickChrome.exe1 Pfad des fehlerhaften Moduls: KickChrome.exe2 Berichtskennung: KickChrome.exe3 Vollständiger Name des fehlerhaften Pakets: KickChrome.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: KickChrome.exe5 Error: (06/11/2014 10:27:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MININT-Q7TDJTS) Description: Bei der Aktivierung der App „Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader“ ist folgender Fehler aufgetreten: -2144927152. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (06/10/2014 11:38:59 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: ) Description: Das Volume "Windows RE tools" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057) Error: (06/04/2014 02:23:19 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: wwahost.exe, Version: 6.3.9600.17031, Zeitstempel: 0x53085927 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17031, Zeitstempel: 0x530895af Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000065e8e ID des fehlerhaften Prozesses: 0x1a74 Startzeit der fehlerhaften Anwendung: 0xwwahost.exe0 Pfad der fehlerhaften Anwendung: wwahost.exe1 Pfad des fehlerhaften Moduls: wwahost.exe2 Berichtskennung: wwahost.exe3 Vollständiger Name des fehlerhaften Pakets: wwahost.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: wwahost.exe5 Error: (06/04/2014 02:23:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: wwahost.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00007FFAFB075E8E Error: (06/04/2014 02:18:54 AM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: MININT-Q7TDJTS) Description: windows_ie_ac_0013 Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0x80072EE7 Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=d03e843c-9044-4cd4-b5eb-78a9586b5598;NotificationInterval=1440;Trigger=TimerEvent Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0xC004E028 Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=d03e843c-9044-4cd4-b5eb-78a9586b5598;NotificationInterval=1440;Trigger=NetworkAvailable Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0xC004E028 Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=d03e843c-9044-4cd4-b5eb-78a9586b5598;NotificationInterval=1440;Trigger=UserLogon;SessionId=1 Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EE7 SKU-ID=d03e843c-9044-4cd4-b5eb-78a9586b5598 System errors: ============= Error: (06/13/2014 02:44:08 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105. Error: (06/13/2014 02:44:08 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105. Error: (06/13/2014 02:44:08 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105. Error: (06/13/2014 02:44:08 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105. Error: (06/13/2014 02:43:09 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (06/13/2014 02:43:09 PM) (Source: Schannel) (EventID: 4120) (User: MININT-Q7TDJTS) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (06/13/2014 02:42:30 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105. Error: (06/13/2014 02:40:09 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (06/13/2014 02:40:09 PM) (Source: Schannel) (EventID: 4120) (User: MININT-Q7TDJTS) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (06/13/2014 02:37:56 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Microsoft Office Sessions: ========================= Error: (06/12/2014 11:22:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: KickChrome.exe2.0.3.39853992b35KickChrome.exe2.0.3.39853992b35c00004090000a2055f401cf868467046070C:\Users\Wastl\AppData\Local\Temp\WpmUpdate\D0F15C106AC04743905055BF9D9D5D01\KickChrome.exeC:\Users\Wastl\AppData\Local\Temp\WpmUpdate\D0F15C106AC04743905055BF9D9D5D01\KickChrome.exea4d72779-f277-11e3-827c-0090f5efad61 Error: (06/11/2014 10:27:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MININT-Q7TDJTS) Description: Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader-2144927152 Error: (06/10/2014 11:38:59 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: ) Description: Windows RE toolsFalscher Parameter. (0x80070057) Error: (06/04/2014 02:23:19 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: wwahost.exe6.3.9600.1703153085927ntdll.dll6.3.9600.17031530895afc00000050000000000065e8e1a7401cf7f8b2be48df0C:\windows\system32\wwahost.exeC:\windows\SYSTEM32\ntdll.dll6d192daa-eb7e-11e3-8267-0090f5efad61Microsoft.BingWeather_3.0.2.243_x64__8wekyb3d8bbweApp Error: (06/04/2014 02:23:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: wwahost.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00007FFAFB075E8E Error: (06/04/2014 02:18:54 AM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: MININT-Q7TDJTS) Description: windows_ie_ac_0013 Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: hr=0x80072EE7RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=d03e843c-9044-4cd4-b5eb-78a9586b5598;NotificationInterval=1440;Trigger=TimerEvent Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: hr=0xC004E028RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=d03e843c-9044-4cd4-b5eb-78a9586b5598;NotificationInterval=1440;Trigger=NetworkAvailable Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: hr=0xC004E028RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=d03e843c-9044-4cd4-b5eb-78a9586b5598;NotificationInterval=1440;Trigger=UserLogon;SessionId=1 Error: (06/04/2014 01:22:36 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: ) Description: hr=0x80072EE7d03e843c-9044-4cd4-b5eb-78a9586b5598 ==================== Memory info =========================== Percentage of memory in use: 5% Total physical RAM: 32721.36 MB Available physical RAM: 30827.46 MB Total Pagefile: 37585.36 MB Available Pagefile: 35445.63 MB Total Virtual: 131072 MB Available Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (OSDisk) (Fixed) (Total:237.57 GB) (Free:207.39 GB) NTFS Drive d: () (Fixed) (Total:931.51 GB) (Free:858.84 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 238 GB) (Disk ID: C26DD576) Partition: GPT Partition Type. ======================================================== Disk: 1 (Size: 932 GB) (Disk ID: 0EC70EC8) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
14.06.2014, 15:30 | #5 |
/// the machine /// TB-Ausbilder | Windows 8.1 Adware leitet um und lässt sich nicht entfernen Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
15.06.2014, 11:05 | #6 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernenCode:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 15/06/2014 um 11:47:38 # Aktualisiert 05/06/2014 von Xplode # Betriebssystem : Windows 8.1 Pro (64 bits) # Benutzername : Wastl - MININT-Q7TDJTS # Gestartet von : D:\Download\adwcleaner_3.212.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\WPM Ordner Gelöscht : C:\Users\Wastl\AppData\Roaming\337Games Ordner Gelöscht : C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\337Games Datei Gelöscht : C:\Users\Wastl\AppData\Local\Temp\Uninstall.exe Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\delta-homes.xml ***** [ Verknüpfungen ] ***** Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk Verknüpfung Desinfiziert : C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Verknüpfung Desinfiziert : C:\Users\Wastl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Verknüpfung Desinfiziert : C:\Users\Wastl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command Schlüssel Gelöscht : HKLM\Software\delta-homesSoftware Schlüssel Gelöscht : HKLM\Software\SupDp Schlüssel Gelöscht : HKLM\Software\SupTab Schlüssel Gelöscht : HKLM\Software\supWPM ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17126 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] -\\ Mozilla Firefox v29.0.1 (de) [ Datei : C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\prefs.js ] Zeile gelöscht : user_pref("browser.search.defaultenginename", "delta-homes"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "delta-homes"); Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.delta-homes.com/?type=hp&ts=1402608147&from=wpm0612&uid=SamsungXSSDX840XPROXSeries_S1A7NSAF200942H"); ************************* AdwCleaner[R0].txt - [5060 octets] - [15/06/2014 11:30:03] AdwCleaner[S0].txt - [3773 octets] - [15/06/2014 11:47:38] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3833 octets] ########## Code:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 15/06/2014 um 11:50:41 # Aktualisiert 05/06/2014 von Xplode # Betriebssystem : Windows 8.1 Pro (64 bits) # Benutzername : Wastl - MININT-Q7TDJTS # Gestartet von : D:\Download\adwcleaner_3.212.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17126 -\\ Mozilla Firefox v29.0.1 (de) [ Datei : C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\prefs.js ] ************************* AdwCleaner[R0].txt - [5060 octets] - [15/06/2014 11:30:03] AdwCleaner[R1].txt - [905 octets] - [15/06/2014 11:50:22] AdwCleaner[S0].txt - [3925 octets] - [15/06/2014 11:47:38] AdwCleaner[S1].txt - [827 octets] - [15/06/2014 11:50:41] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [886 octets] ########## FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02 Ran by Wastl (administrator) on MININT-Q7TDJTS on 15-06-2014 12:00:53 Running from C:\Users\Wastl\Desktop Platform: Windows 8.1 Pro (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe () C:\Program Files (x86)\Hotkey\Hotkey.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-30] (Synaptics Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13664984 2014-01-08] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation) HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications)) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{C855D7CE-4D71-4F75-8270-8F5405DC37F0}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Tcpip\Parameters: [DhcpNameServer] 172.30.3.254 FireFox: ======== FF ProfilePath: C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default FF NewTab: chrome://quick_start/content/index.html FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\faststartff@gmail.com [2014-06-12] FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\shortcutff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com [2014-06-12] ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-09] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [46080 2013-07-09] () [File not signed] R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [340480 2013-10-16] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 AirplaneModeHid; C:\Windows\system32\DRIVERS\AirplaneModeHid.sys [25264 2012-12-23] (Insyde Corporation) R3 akwbx; C:\Windows\system32\DRIVERS\akwbx64.sys [3881168 2013-09-24] (Qualcomm Atheros, Inc.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-04] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-06-04] (Kaspersky Lab) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-06-04] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-06-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-06-04] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-06-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-06-04] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-15] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [26424 2012-11-30] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) R3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation) S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X] S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-15 12:00 - 2014-06-15 12:00 - 00016148 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-15 11:59 - 2014-06-15 11:59 - 00000618 _____ () C:\Users\Wastl\Desktop\JRT.txt 2014-06-15 11:53 - 2014-06-15 11:53 - 00000000 ____D () C:\windows\ERUNT 2014-06-15 11:29 - 2014-06-15 11:50 - 00000000 ____D () C:\AdwCleaner 2014-06-15 11:18 - 2014-06-15 11:57 - 00000000 ____D () C:\Users\Wastl\Desktop\Logs 15.06 2014-06-15 11:12 - 2014-06-15 11:15 - 00000036 _____ () C:\Users\Wastl\Desktop\dienst.txt 2014-06-13 16:39 - 2014-06-15 12:00 - 00000000 ____D () C:\FRST 2014-06-13 16:38 - 2014-06-13 16:38 - 02081792 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 15:18 - 2014-06-13 15:18 - 00000058 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-15 12:00 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2014-06-13 14:51 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2014-06-13 14:51 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2014-06-12 23:22 - 2014-06-12 23:22 - 00000967 _____ () C:\Users\Wastl\Desktop\337 GAMES.lnk 2014-06-12 22:19 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-06-12 22:18 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-06-12 22:18 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-06-12 22:18 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-06-12 22:18 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-06-12 22:18 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-06-12 22:18 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-06-12 22:18 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2014-06-12 22:18 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe 2014-06-12 22:18 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll 2014-06-12 22:18 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll 2014-06-12 22:18 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2014-06-12 22:18 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2014-06-12 22:18 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll 2014-06-12 22:18 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll 2014-06-12 22:18 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll 2014-06-12 22:18 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll 2014-06-12 22:18 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2014-06-12 22:18 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys 2014-06-12 22:18 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll 2014-06-12 22:18 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys 2014-06-12 22:18 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-06-12 22:18 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll 2014-06-12 22:18 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2014-06-12 22:18 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2014-06-12 22:18 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys 2014-06-12 22:18 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe 2014-06-12 22:18 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe 2014-06-12 22:18 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-06-12 22:18 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll 2014-06-12 22:18 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2014-06-12 22:18 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe 2014-06-12 22:18 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2014-06-12 22:18 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll 2014-06-12 22:18 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll 2014-06-12 22:18 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll 2014-06-12 22:18 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2014-06-12 22:18 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll 2014-06-12 22:18 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-06-12 22:18 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 22:18 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2014-06-12 22:18 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll 2014-06-12 22:18 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2014-06-12 22:18 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll 2014-06-12 22:18 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll 2014-06-12 22:18 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll 2014-06-12 22:18 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2014-06-12 22:18 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-06-12 22:18 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll 2014-06-12 22:18 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll 2014-06-12 22:18 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll 2014-06-12 22:18 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll 2014-06-12 22:18 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll 2014-06-12 22:18 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe 2014-06-12 22:18 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe 2014-06-12 22:18 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2014-06-12 22:18 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll 2014-06-12 22:18 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll 2014-06-12 22:18 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll 2014-06-12 22:18 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll 2014-06-12 22:18 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe 2014-06-12 22:18 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2014-06-12 22:18 - 2014-03-21 06:14 - 00219136 _____ (Microsoft Corporation) C:\windows\system32\tscfgwmi.dll 2014-06-12 22:18 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe 2014-06-12 22:18 - 2014-03-20 02:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2014-06-12 22:18 - 2014-03-20 01:38 - 00590336 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2014-06-12 22:18 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys 2014-06-12 22:18 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll 2014-06-12 22:18 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll 2014-06-12 22:18 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2014-06-12 22:18 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll 2014-06-12 22:18 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll 2014-06-12 22:18 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys 2014-06-12 22:18 - 2014-03-18 10:18 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\xusb22.sys 2014-06-12 22:18 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv 2014-06-12 22:18 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2014-06-12 22:18 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv 2014-06-12 22:18 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys 2014-06-12 22:17 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-06-12 22:17 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-06-12 22:17 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe 2014-06-12 22:17 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2014-06-12 22:17 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2014-06-12 22:17 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe 2014-06-12 22:17 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys 2014-06-12 22:17 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll 2014-06-12 22:17 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll 2014-06-12 22:17 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll 2014-06-12 22:17 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll 2014-06-12 22:17 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2014-06-12 22:17 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2014-06-12 22:17 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-15 11:47 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-15 11:47 - 00001071 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-11 22:20 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-09 11:29 - 2014-06-11 22:18 - 00000000 ____D () C:\ProgramData\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:21 - 2014-06-09 11:20 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 11:01 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\windows\system32\CNMLMAT.DLL 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\windows\SysWOW64\secman.dll 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-10 14:29 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 22:49 - 2014-06-07 23:02 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 16:48 - 2014-06-04 15:43 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2011-03-31 10:07 - 00114688 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATU.dll 2014-06-04 12:35 - 2011-03-30 12:54 - 00323584 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATL.dll 2014-06-04 12:35 - 2010-11-12 11:13 - 00068096 _____ () C:\windows\SysWOW64\CNC1754D.TBL 2014-06-04 12:35 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\windows\SysWOW64\CNHMCA.dll 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:06 - 2011-02-03 02:20 - 00256000 _____ (CANON INC.) C:\windows\system32\CNMIUAT.DLL 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 12:05 - 2011-02-01 10:23 - 00355840 _____ (CANON INC.) C:\windows\system32\CNMN6PPM.DLL 2014-06-04 12:05 - 2011-02-01 10:23 - 00038400 _____ (CANON INC.) C:\windows\system32\CNMN6UI.DLL 2014-06-04 12:05 - 2011-02-01 10:22 - 00363008 _____ (CANON INC.) C:\windows\SysWOW64\CNMNPPM.DLL 2014-06-04 12:03 - 2014-06-04 12:39 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 11:43 - 2014-06-04 11:43 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-15 11:27 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:23 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-04 02:18 - 2014-06-15 12:00 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-09 11:32 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:48 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2014-06-04 01:48 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2014-06-04 01:48 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2014-06-04 01:48 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2014-06-04 01:48 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2014-06-04 01:48 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2014-06-04 01:48 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2014-06-04 01:48 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2014-06-04 01:48 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll 2014-06-04 01:48 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll 2014-06-04 01:48 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys 2014-06-04 01:48 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys 2014-06-04 01:48 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys 2014-06-04 01:40 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-06-04 01:39 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-06-04 01:39 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-06-13 15:27 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-04 01:27 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-06-04 01:27 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-06-04 01:27 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2014-06-04 01:27 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:22 - 2014-06-15 12:00 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Temp 2014-06-04 01:22 - 2014-06-15 11:47 - 00001013 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-04 01:22 - 2014-06-13 22:30 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-04 01:22 - 2014-06-13 22:30 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-04 01:22 - 2014-06-05 23:25 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-04 01:22 - 2014-06-05 22:46 - 00000000 ____D () C:\Users\Wastl 2014-06-04 01:22 - 2014-06-04 11:41 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-04 01:22 - 2014-06-04 01:43 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:22 - 2014-06-04 01:26 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:22 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2014-05-20 15:50 - 00000000 ____D () C:\windows\Panther 2014-05-21 00:38 - 2010-03-31 15:42 - 00020574 _____ () C:\windows\system32\logo.bmp 2014-05-21 00:33 - 2013-04-25 19:24 - 01721576 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01009.dll 2014-05-21 00:33 - 2013-03-12 22:20 - 00064624 _____ (Intel Corporation) C:\windows\system32\Drivers\HECIx64.sys 2014-05-21 00:33 - 2012-12-07 08:57 - 09888912 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsBaStorIcon.dll 2014-05-21 00:33 - 2012-12-07 08:57 - 00302224 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RtsBaStor.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 01035064 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00531768 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00464184 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00229176 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00179512 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo15.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00113976 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynTPCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00031032 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00026424 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_AMDASF.sys 2014-05-21 00:33 - 2012-09-23 01:17 - 00021160 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\amdkmafd.sys 2014-05-21 00:33 - 2012-08-08 12:16 - 02152176 _____ (Microsoft Corporation) C:\windows\system32\WudfUpdate_01009.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 01002728 _____ (Microsoft Corporation) C:\windows\system32\WinUsbCoinstaller2.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 00020000 _____ (AuthenTec) C:\windows\system32\tccoinst.dll 2014-05-21 00:33 - 2011-09-15 05:11 - 01048576 _____ () C:\windows\system32\syndata.bin 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:10 - 2014-06-08 00:50 - 00000000 ____D () C:\ProgramData\Samsung 2014-05-20 15:10 - 2014-06-04 01:22 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:52 - 2014-05-20 14:53 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-06-15 11:59 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-20 14:49 - 2014-05-30 01:07 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-20 14:49 - 2014-05-30 01:07 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 03:25 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 14:49 - 2014-05-20 03:25 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 14:49 - 2014-05-15 01:49 - 03774821 _____ () C:\windows\system32\nvcoproc.bin 2014-05-20 14:48 - 2014-05-20 04:44 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 14:48 - 2014-05-20 04:44 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 14:47 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll 2014-05-20 14:47 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys 2014-05-20 14:47 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll 2014-05-20 14:47 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco6420103.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01890080 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433750.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01539416 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433750.dll 2014-05-20 14:44 - 2014-06-04 01:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-06-08 00:15 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-05-20 14:43 - 2014-06-04 01:27 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2014-05-20 14:42 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-05-20 14:42 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll 2014-05-20 14:41 - 2014-06-15 11:59 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-05-20 14:41 - 2014-06-04 01:57 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-05-20 14:41 - 2014-06-04 01:57 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-05-20 14:41 - 2014-05-20 14:41 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-05-20 14:40 - 2014-06-15 11:59 - 01752023 _____ () C:\windows\WindowsUpdate.log 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 15:00 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec ==================== One Month Modified Files and Folders ======= 2014-06-15 12:01 - 2014-06-15 12:00 - 00016148 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-15 12:01 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Temp 2014-06-15 12:00 - 2014-06-13 16:39 - 00000000 ____D () C:\FRST 2014-06-15 12:00 - 2014-06-13 14:51 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-15 12:00 - 2014-06-04 02:18 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-15 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\sru 2014-06-15 11:59 - 2014-06-15 11:59 - 00000618 _____ () C:\Users\Wastl\Desktop\JRT.txt 2014-06-15 11:59 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-15 11:59 - 2014-05-20 14:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-06-15 11:59 - 2014-05-20 14:40 - 01752023 _____ () C:\windows\WindowsUpdate.log 2014-06-15 11:59 - 2013-08-22 16:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-06-15 11:58 - 2014-03-07 13:19 - 01776918 _____ () C:\windows\system32\PerfStringBackup.INI 2014-06-15 11:58 - 2013-08-23 01:24 - 00765582 _____ () C:\windows\system32\perfh007.dat 2014-06-15 11:58 - 2013-08-23 01:24 - 00159366 _____ () C:\windows\system32\perfc007.dat 2014-06-15 11:57 - 2014-06-15 11:18 - 00000000 ____D () C:\Users\Wastl\Desktop\Logs 15.06 2014-06-15 11:53 - 2014-06-15 11:53 - 00000000 ____D () C:\windows\ERUNT 2014-06-15 11:51 - 2014-03-07 13:03 - 00061542 _____ () C:\windows\PFRO.log 2014-06-15 11:50 - 2014-06-15 11:29 - 00000000 ____D () C:\AdwCleaner 2014-06-15 11:47 - 2014-06-09 11:35 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-15 11:47 - 2014-06-09 11:35 - 00001071 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-15 11:47 - 2014-06-04 01:22 - 00001013 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-15 11:47 - 2013-08-22 15:25 - 00524288 ___SH () C:\windows\system32\config\BBI 2014-06-15 11:27 - 2014-06-04 02:59 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-15 11:25 - 2013-08-22 16:45 - 00000000 ____D () C:\windows\Setup 2014-06-15 11:15 - 2014-06-15 11:12 - 00000036 _____ () C:\Users\Wastl\Desktop\dienst.txt 2014-06-13 22:30 - 2014-06-04 01:22 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-13 22:30 - 2014-06-04 01:22 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-13 22:28 - 2013-08-22 16:44 - 00335992 _____ () C:\windows\system32\FNTCACHE.DAT 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ToastData 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\WinStore 2014-06-13 16:40 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\oobe 2014-06-13 16:38 - 2014-06-13 16:38 - 02081792 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 16:08 - 2013-08-22 17:20 - 00000000 ____D () C:\windows\CbsTemp 2014-06-13 16:07 - 2014-03-07 13:59 - 00000000 ____D () C:\windows\system32\MRT 2014-06-13 16:07 - 2014-03-07 13:58 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-06-13 15:27 - 2014-06-04 01:27 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-13 15:18 - 2014-06-13 15:18 - 00000058 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-12 23:24 - 2013-08-22 15:25 - 00262144 ___SH () C:\windows\system32\config\ELAM 2014-06-12 23:22 - 2014-06-12 23:22 - 00000967 _____ () C:\Users\Wastl\Desktop\337 GAMES.lnk 2014-06-12 23:22 - 2014-06-04 02:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-11 22:26 - 2014-03-07 17:26 - 00130809 _____ () C:\windows\DirectX.log 2014-06-11 22:20 - 2014-06-09 11:29 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-11 22:18 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\IObit 2014-06-11 14:50 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\AppReadiness 2014-06-10 14:29 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:32 - 2014-06-04 02:00 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:20 - 2014-06-09 11:21 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 00:53 - 2013-08-22 16:46 - 00038865 _____ () C:\windows\setupact.log 2014-06-08 00:50 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 23:02 - 2014-06-07 22:49 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-06 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\rescache 2014-06-05 23:25 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-05 22:46 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 15:43 - 2014-06-04 16:48 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:39 - 2014-06-04 12:03 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 12:36 - 2014-06-04 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:35 - 2013-08-22 17:36 - 00000000 __RSD () C:\windows\Media 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 11:43 - 2014-06-04 11:43 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-04 11:41 - 2014-06-04 01:22 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:57 - 2014-05-20 14:41 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-06-04 01:57 - 2014-05-20 14:41 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-06-04 01:57 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys 2014-06-04 01:57 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys 2014-06-04 01:57 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys 2014-06-04 01:57 - 2013-05-07 17:56 - 00065120 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klwfp.sys 2014-06-04 01:57 - 2012-07-27 18:38 - 00029792 _____ (Kaspersky Lab) C:\windows\system32\Drivers\klelam.sys 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-06-04 01:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates 2014-06-04 01:43 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:40 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-06-04 01:26 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:23 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Atheros 2014-06-04 01:16 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\NDF 2014-05-31 07:13 - 2014-03-07 14:56 - 00703992 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2014-03-07 14:56 - 00105464 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 12:21 - 2014-06-12 22:18 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-12 22:18 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-12 22:18 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-12 22:18 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-12 22:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-12 22:18 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-12 22:19 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-12 22:18 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-12 22:18 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-12 22:18 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-12 22:18 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-12 22:18 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-12 22:18 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-12 22:18 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-12 22:19 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-12 22:18 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 22:19 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-05-30 09:54 - 2014-06-12 22:18 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-12 22:18 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-12 22:18 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-12 22:18 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-12 22:18 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-12 22:18 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-12 22:18 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2013-08-22 17:36 - 00262144 _____ () C:\windows\system32\config\BCD-Template 2014-05-20 15:51 - 2013-08-22 17:37 - 00003134 _____ () C:\windows\DtcInstall.log 2014-05-20 15:51 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\Sysprep 2014-05-20 15:50 - 2014-05-21 00:38 - 00000000 ____D () C:\windows\Panther 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:11 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 15:10 - 2014-03-07 13:19 - 00000051 _____ () C:\windows\smsts.ini 2014-05-20 15:10 - 2014-03-07 13:16 - 00000000 _____ () C:\windows\authtest.txt 2014-05-20 15:00 - 2014-05-20 14:39 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:53 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 14:44 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\Help 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2014-05-20 14:42 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-05-20 14:42 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\restore 2014-05-20 14:41 - 2014-05-20 14:41 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-05-20 14:41 - 2013-08-22 17:36 - 00000000 ___HD () C:\windows\ELAMBKUP 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\WinBioPlugIns 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\Recovery 2014-05-20 04:44 - 2014-06-04 01:39 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-05-20 04:44 - 2014-06-04 01:39 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 04:44 - 2014-05-20 14:46 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 04:44 - 2014-05-20 14:46 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 03:25 - 2014-05-20 14:49 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 01:10 - 2014-06-04 01:40 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-05-19 08:31 - 2014-06-12 22:17 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-05-19 08:21 - 2014-06-12 22:17 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-05-19 07:23 - 2014-06-12 22:17 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe Some content of TEMP: ==================== C:\Users\Wastl\AppData\Local\Temp\FreemakeVideoConverter_4.1.4.1.exe C:\Users\Wastl\AppData\Local\Temp\MSETUP4.EXE C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Wastl\AppData\Local\Temp\nvStInst.exe C:\Users\Wastl\AppData\Local\Temp\Quarantine.exe C:\Users\Wastl\AppData\Local\Temp\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0.exe C:\Users\Wastl\AppData\Local\Temp\sdanircmdc.exe C:\Users\Wastl\AppData\Local\Temp\sdapskill.exe C:\Users\Wastl\AppData\Local\Temp\sdaspwn.exe C:\Users\Wastl\AppData\Local\Temp\sweetpage294wld_n2.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-13 15:27 ==================== End Of Log ============================ --- --- --- --- --- --- Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 8.1 Pro x64 Ran by Wastl on 15.06.2014 at 11:53:24,18 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 15.06.2014 at 11:55:51,79 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Protection, 15.06.2014 10:55:21, SYSTEM, MININT-Q7TDJTS, Protection, Malware Protection, Starting, Protection, 15.06.2014 10:55:21, SYSTEM, MININT-Q7TDJTS, Protection, Malware Protection, Started, Protection, 15.06.2014 10:55:21, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Starting, Protection, 15.06.2014 10:55:21, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Started, Update, 15.06.2014 11:14:21, SYSTEM, MININT-Q7TDJTS, Manual, Malware Database, 2014.6.13.9, 2014.6.15.2, Protection, 15.06.2014 11:14:23, SYSTEM, MININT-Q7TDJTS, Protection, Refresh, Starting, Protection, 15.06.2014 11:14:23, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Stopping, Protection, 15.06.2014 11:14:23, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Stopped, Protection, 15.06.2014 11:14:25, SYSTEM, MININT-Q7TDJTS, Protection, Refresh, Success, Protection, 15.06.2014 11:14:25, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Starting, Protection, 15.06.2014 11:14:25, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Started, Protection, 15.06.2014 11:26:22, SYSTEM, MININT-Q7TDJTS, Protection, Malware Protection, Starting, Protection, 15.06.2014 11:26:22, SYSTEM, MININT-Q7TDJTS, Protection, Malware Protection, Started, Protection, 15.06.2014 11:26:22, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Starting, Protection, 15.06.2014 11:26:22, SYSTEM, MININT-Q7TDJTS, Protection, Malicious Website Protection, Started, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 15.06.2014 Suchlauf-Zeit: 11:18:15 Logdatei: mbam suchlauf.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.15.02 Rootkit Datenbank: v2014.06.02.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Wastl Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 262126 Verstrichene Zeit: 6 Min, 26 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 1 PUP.Optional.V9.A, C:\Users\Wastl\AppData\Local\Temp\7853484\7853484.zipDir\qSE.exe, In Quarantäne, [5062e68d2754a88efe9480c8b14f30d0], Physische Sektoren: 0 (No malicious items detected) (end) |
15.06.2014, 19:19 | #7 |
/// the machine /// TB-Ausbilder | Windows 8.1 Adware leitet um und lässt sich nicht entfernenESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.06.2014, 23:05 | #8 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernenCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7587 # api_version=3.0.2 # EOSSerial=6513ede3ea102445975e0dcadeeed4e3 # engine=18729 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2014-06-15 09:54:30 # local_time=2014-06-15 11:54:30 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='Kaspersky Internet Security' # compatibility_mode=1292 16777214 100 100 4559 34347292 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 1029855 8705444 0 0 # scanned=177297 # found=4 # cleaned=0 # scan_time=1334 sh=3AB435FCF59A46DF0272F814BF2020AF97063F31 ft=1 fh=14cbd1b40b619cb5 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Wastl\AppData\Local\Temp\FreemakeVideoConverter_4.1.4.1.exe" sh=2860D062EC1AE1D58870818B4459F01E67541BFB ft=1 fh=1424bb462488f869 vn="Variante von Win32/ELEX.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Wastl\AppData\Local\Temp\sweetpage294wld_n2.exe" sh=2860D062EC1AE1D58870818B4459F01E67541BFB ft=1 fh=1424bb462488f869 vn="Variante von Win32/ELEX.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Wastl\AppData\Local\Temp\29c2217fff8359d2c648e0ce94c6c82b\sweetpage294wld_n2.exe" sh=CC5A2F919698475C9D4B7ADF92947723A208C8CE ft=1 fh=fc0fd0ddbca1e78e vn="Variante von Win32/WinloadSDA.D evtl. unerwünschte Anwendung" ac=I fn="D:\Download\Samsung-USB-Smartphone-Treiber-lnstall.exe" Code:
ATTFilter Results of screen317's Security Check version 0.99.83 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky Internet Security Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 13.0.0.214 Mozilla Firefox (29.0.1) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe Kaspersky Lab Kaspersky Internet Security 14.0.0 avpui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2014 Ran by Wastl (administrator) on MININT-Q7TDJTS on 16-06-2014 22:35:34 Running from C:\Users\Wastl\Desktop Platform: Windows 8.1 Pro (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe () C:\Program Files (x86)\Hotkey\Hotkey.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-30] (Synaptics Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13664984 2014-01-08] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation) HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications)) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{C855D7CE-4D71-4F75-8270-8F5405DC37F0}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Tcpip\Parameters: [DhcpNameServer] 172.30.3.254 FireFox: ======== FF ProfilePath: C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default FF NewTab: chrome://quick_start/content/index.html FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\faststartff@gmail.com [2014-06-12] FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\shortcutff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com [2014-06-12] ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-09] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [46080 2013-07-09] () [File not signed] R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [340480 2013-10-16] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 AirplaneModeHid; C:\Windows\system32\DRIVERS\AirplaneModeHid.sys [25264 2012-12-23] (Insyde Corporation) R3 akwbx; C:\Windows\system32\DRIVERS\akwbx64.sys [3881168 2013-09-24] (Qualcomm Atheros, Inc.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-04] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-06-04] (Kaspersky Lab) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-06-04] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-06-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-06-04] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-06-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-06-04] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-16] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [26424 2012-11-30] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) R3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation) S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X] S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-16 22:35 - 2014-06-16 22:35 - 00000000 ____D () C:\Users\Wastl\Desktop\FRST-OlderVersion 2014-06-15 12:00 - 2014-06-16 22:35 - 00015724 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-15 11:59 - 2014-06-15 11:59 - 00000618 _____ () C:\Users\Wastl\Desktop\JRT.txt 2014-06-15 11:53 - 2014-06-15 11:53 - 00000000 ____D () C:\windows\ERUNT 2014-06-15 11:29 - 2014-06-15 11:50 - 00000000 ____D () C:\AdwCleaner 2014-06-15 11:18 - 2014-06-16 22:34 - 00000000 ____D () C:\Users\Wastl\Desktop\Logs 15.06 2014-06-15 11:12 - 2014-06-15 11:15 - 00000036 _____ () C:\Users\Wastl\Desktop\dienst.txt 2014-06-13 16:39 - 2014-06-16 22:35 - 00000000 ____D () C:\FRST 2014-06-13 16:38 - 2014-06-16 22:35 - 02081280 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 15:18 - 2014-06-13 15:18 - 00000058 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-16 22:28 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2014-06-13 14:51 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2014-06-13 14:51 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2014-06-12 23:22 - 2014-06-12 23:22 - 00000967 _____ () C:\Users\Wastl\Desktop\337 GAMES.lnk 2014-06-12 22:19 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-06-12 22:18 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-06-12 22:18 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-06-12 22:18 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-06-12 22:18 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-06-12 22:18 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-06-12 22:18 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-06-12 22:18 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2014-06-12 22:18 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe 2014-06-12 22:18 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll 2014-06-12 22:18 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll 2014-06-12 22:18 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2014-06-12 22:18 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2014-06-12 22:18 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll 2014-06-12 22:18 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll 2014-06-12 22:18 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll 2014-06-12 22:18 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll 2014-06-12 22:18 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2014-06-12 22:18 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys 2014-06-12 22:18 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll 2014-06-12 22:18 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys 2014-06-12 22:18 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-06-12 22:18 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll 2014-06-12 22:18 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2014-06-12 22:18 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2014-06-12 22:18 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys 2014-06-12 22:18 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe 2014-06-12 22:18 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe 2014-06-12 22:18 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-06-12 22:18 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll 2014-06-12 22:18 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2014-06-12 22:18 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe 2014-06-12 22:18 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2014-06-12 22:18 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll 2014-06-12 22:18 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll 2014-06-12 22:18 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll 2014-06-12 22:18 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2014-06-12 22:18 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll 2014-06-12 22:18 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-06-12 22:18 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 22:18 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2014-06-12 22:18 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll 2014-06-12 22:18 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2014-06-12 22:18 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll 2014-06-12 22:18 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll 2014-06-12 22:18 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll 2014-06-12 22:18 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2014-06-12 22:18 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-06-12 22:18 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll 2014-06-12 22:18 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll 2014-06-12 22:18 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll 2014-06-12 22:18 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll 2014-06-12 22:18 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll 2014-06-12 22:18 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe 2014-06-12 22:18 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe 2014-06-12 22:18 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2014-06-12 22:18 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll 2014-06-12 22:18 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll 2014-06-12 22:18 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll 2014-06-12 22:18 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll 2014-06-12 22:18 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe 2014-06-12 22:18 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2014-06-12 22:18 - 2014-03-21 06:14 - 00219136 _____ (Microsoft Corporation) C:\windows\system32\tscfgwmi.dll 2014-06-12 22:18 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe 2014-06-12 22:18 - 2014-03-20 02:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2014-06-12 22:18 - 2014-03-20 01:38 - 00590336 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2014-06-12 22:18 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys 2014-06-12 22:18 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll 2014-06-12 22:18 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll 2014-06-12 22:18 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2014-06-12 22:18 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll 2014-06-12 22:18 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll 2014-06-12 22:18 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys 2014-06-12 22:18 - 2014-03-18 10:18 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\xusb22.sys 2014-06-12 22:18 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv 2014-06-12 22:18 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2014-06-12 22:18 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv 2014-06-12 22:18 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys 2014-06-12 22:17 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-06-12 22:17 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-06-12 22:17 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe 2014-06-12 22:17 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2014-06-12 22:17 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2014-06-12 22:17 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe 2014-06-12 22:17 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys 2014-06-12 22:17 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll 2014-06-12 22:17 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll 2014-06-12 22:17 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll 2014-06-12 22:17 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll 2014-06-12 22:17 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2014-06-12 22:17 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2014-06-12 22:17 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-15 11:47 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-15 11:47 - 00001071 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-16 22:27 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-09 11:29 - 2014-06-11 22:20 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-09 11:29 - 2014-06-11 22:18 - 00000000 ____D () C:\ProgramData\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:21 - 2014-06-09 11:20 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 11:01 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\windows\system32\CNMLMAT.DLL 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\windows\SysWOW64\secman.dll 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-10 14:29 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 22:49 - 2014-06-07 23:02 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 16:48 - 2014-06-04 15:43 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2011-03-31 10:07 - 00114688 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATU.dll 2014-06-04 12:35 - 2011-03-30 12:54 - 00323584 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATL.dll 2014-06-04 12:35 - 2010-11-12 11:13 - 00068096 _____ () C:\windows\SysWOW64\CNC1754D.TBL 2014-06-04 12:35 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\windows\SysWOW64\CNHMCA.dll 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:06 - 2011-02-03 02:20 - 00256000 _____ (CANON INC.) C:\windows\system32\CNMIUAT.DLL 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 12:05 - 2011-02-01 10:23 - 00355840 _____ (CANON INC.) C:\windows\system32\CNMN6PPM.DLL 2014-06-04 12:05 - 2011-02-01 10:23 - 00038400 _____ (CANON INC.) C:\windows\system32\CNMN6UI.DLL 2014-06-04 12:05 - 2011-02-01 10:22 - 00363008 _____ (CANON INC.) C:\windows\SysWOW64\CNMNPPM.DLL 2014-06-04 12:03 - 2014-06-04 12:39 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 11:43 - 2014-06-04 11:43 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-16 22:27 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:23 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-04 02:18 - 2014-06-16 22:31 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-09 11:32 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:48 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2014-06-04 01:48 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2014-06-04 01:48 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2014-06-04 01:48 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2014-06-04 01:48 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2014-06-04 01:48 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2014-06-04 01:48 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2014-06-04 01:48 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2014-06-04 01:48 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll 2014-06-04 01:48 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll 2014-06-04 01:48 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys 2014-06-04 01:48 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys 2014-06-04 01:48 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys 2014-06-04 01:40 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-06-04 01:39 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-06-04 01:39 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-06-15 22:48 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-04 01:27 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-06-04 01:27 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-06-04 01:27 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2014-06-04 01:27 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:22 - 2014-06-16 22:35 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Temp 2014-06-04 01:22 - 2014-06-15 11:47 - 00001013 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-04 01:22 - 2014-06-13 22:30 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-04 01:22 - 2014-06-13 22:30 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-04 01:22 - 2014-06-05 23:25 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-04 01:22 - 2014-06-05 22:46 - 00000000 ____D () C:\Users\Wastl 2014-06-04 01:22 - 2014-06-04 11:41 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-04 01:22 - 2014-06-04 01:43 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:22 - 2014-06-04 01:26 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:22 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2014-05-20 15:50 - 00000000 ____D () C:\windows\Panther 2014-05-21 00:38 - 2010-03-31 15:42 - 00020574 _____ () C:\windows\system32\logo.bmp 2014-05-21 00:33 - 2013-04-25 19:24 - 01721576 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01009.dll 2014-05-21 00:33 - 2013-03-12 22:20 - 00064624 _____ (Intel Corporation) C:\windows\system32\Drivers\HECIx64.sys 2014-05-21 00:33 - 2012-12-07 08:57 - 09888912 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsBaStorIcon.dll 2014-05-21 00:33 - 2012-12-07 08:57 - 00302224 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RtsBaStor.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 01035064 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00531768 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00464184 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00229176 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00179512 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo15.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00113976 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynTPCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00031032 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00026424 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_AMDASF.sys 2014-05-21 00:33 - 2012-09-23 01:17 - 00021160 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\amdkmafd.sys 2014-05-21 00:33 - 2012-08-08 12:16 - 02152176 _____ (Microsoft Corporation) C:\windows\system32\WudfUpdate_01009.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 01002728 _____ (Microsoft Corporation) C:\windows\system32\WinUsbCoinstaller2.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 00020000 _____ (AuthenTec) C:\windows\system32\tccoinst.dll 2014-05-21 00:33 - 2011-09-15 05:11 - 01048576 _____ () C:\windows\system32\syndata.bin 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:10 - 2014-06-08 00:50 - 00000000 ____D () C:\ProgramData\Samsung 2014-05-20 15:10 - 2014-06-04 01:22 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:52 - 2014-05-20 14:53 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-06-16 22:26 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-20 14:49 - 2014-05-30 01:07 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-20 14:49 - 2014-05-30 01:07 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 03:25 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 14:49 - 2014-05-20 03:25 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 14:49 - 2014-05-15 01:49 - 03774821 _____ () C:\windows\system32\nvcoproc.bin 2014-05-20 14:48 - 2014-05-20 04:44 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 14:48 - 2014-05-20 04:44 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 14:47 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll 2014-05-20 14:47 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys 2014-05-20 14:47 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll 2014-05-20 14:47 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco6420103.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01890080 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433750.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01539416 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433750.dll 2014-05-20 14:44 - 2014-06-04 01:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-06-08 00:15 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-05-20 14:43 - 2014-06-04 01:27 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2014-05-20 14:42 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-05-20 14:42 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll 2014-05-20 14:41 - 2014-06-16 22:28 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-05-20 14:41 - 2014-06-04 01:57 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-05-20 14:41 - 2014-06-04 01:57 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-05-20 14:41 - 2014-05-20 14:41 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-05-20 14:40 - 2014-06-15 22:50 - 01859088 _____ () C:\windows\WindowsUpdate.log 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 15:00 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec ==================== One Month Modified Files and Folders ======= 2014-06-16 22:35 - 2014-06-16 22:35 - 00000000 ____D () C:\Users\Wastl\Desktop\FRST-OlderVersion 2014-06-16 22:35 - 2014-06-15 12:00 - 00015724 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-16 22:35 - 2014-06-13 16:39 - 00000000 ____D () C:\FRST 2014-06-16 22:35 - 2014-06-13 16:38 - 02081280 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-16 22:35 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Temp 2014-06-16 22:34 - 2014-06-15 11:18 - 00000000 ____D () C:\Users\Wastl\Desktop\Logs 15.06 2014-06-16 22:33 - 2014-03-07 13:19 - 01776918 _____ () C:\windows\system32\PerfStringBackup.INI 2014-06-16 22:33 - 2013-08-23 01:24 - 00765582 _____ () C:\windows\system32\perfh007.dat 2014-06-16 22:33 - 2013-08-23 01:24 - 00159366 _____ () C:\windows\system32\perfc007.dat 2014-06-16 22:31 - 2014-06-04 02:18 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-16 22:29 - 2014-05-20 14:40 - 01859088 _____ () C:\windows\WindowsUpdate.log 2014-06-16 22:28 - 2014-06-13 14:51 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-16 22:28 - 2014-05-20 14:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-06-16 22:27 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-16 22:27 - 2014-06-04 02:59 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-16 22:26 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-16 22:26 - 2013-08-22 16:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-06-16 00:03 - 2013-08-22 15:25 - 00524288 ___SH () C:\windows\system32\config\BBI 2014-06-16 00:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\sru 2014-06-15 22:48 - 2014-06-04 01:27 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-15 11:59 - 2014-06-15 11:59 - 00000618 _____ () C:\Users\Wastl\Desktop\JRT.txt 2014-06-15 11:53 - 2014-06-15 11:53 - 00000000 ____D () C:\windows\ERUNT 2014-06-15 11:51 - 2014-03-07 13:03 - 00061542 _____ () C:\windows\PFRO.log 2014-06-15 11:50 - 2014-06-15 11:29 - 00000000 ____D () C:\AdwCleaner 2014-06-15 11:47 - 2014-06-09 11:35 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-15 11:47 - 2014-06-09 11:35 - 00001071 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-15 11:47 - 2014-06-04 01:22 - 00001013 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-15 11:26 - 2013-08-22 16:45 - 00000000 ____D () C:\windows\Setup 2014-06-15 11:15 - 2014-06-15 11:12 - 00000036 _____ () C:\Users\Wastl\Desktop\dienst.txt 2014-06-13 22:30 - 2014-06-04 01:22 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-13 22:30 - 2014-06-04 01:22 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-13 22:28 - 2013-08-22 16:44 - 00335992 _____ () C:\windows\system32\FNTCACHE.DAT 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ToastData 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\WinStore 2014-06-13 16:40 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\oobe 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 16:08 - 2013-08-22 17:20 - 00000000 ____D () C:\windows\CbsTemp 2014-06-13 16:07 - 2014-03-07 13:59 - 00000000 ____D () C:\windows\system32\MRT 2014-06-13 16:07 - 2014-03-07 13:58 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-06-13 15:18 - 2014-06-13 15:18 - 00000058 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-12 23:24 - 2013-08-22 15:25 - 00262144 ___SH () C:\windows\system32\config\ELAM 2014-06-12 23:22 - 2014-06-12 23:22 - 00000967 _____ () C:\Users\Wastl\Desktop\337 GAMES.lnk 2014-06-12 23:22 - 2014-06-04 02:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-11 22:26 - 2014-03-07 17:26 - 00130809 _____ () C:\windows\DirectX.log 2014-06-11 22:20 - 2014-06-09 11:29 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-11 22:18 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\IObit 2014-06-11 14:50 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\AppReadiness 2014-06-10 14:29 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:32 - 2014-06-04 02:00 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:20 - 2014-06-09 11:21 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 00:53 - 2013-08-22 16:46 - 00038865 _____ () C:\windows\setupact.log 2014-06-08 00:50 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 23:02 - 2014-06-07 22:49 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-06 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\rescache 2014-06-05 23:25 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-05 22:46 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 15:43 - 2014-06-04 16:48 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:39 - 2014-06-04 12:03 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 12:36 - 2014-06-04 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:35 - 2013-08-22 17:36 - 00000000 __RSD () C:\windows\Media 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 11:43 - 2014-06-04 11:43 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-04 11:41 - 2014-06-04 01:22 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:57 - 2014-05-20 14:41 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-06-04 01:57 - 2014-05-20 14:41 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-06-04 01:57 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys 2014-06-04 01:57 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys 2014-06-04 01:57 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys 2014-06-04 01:57 - 2013-05-07 17:56 - 00065120 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klwfp.sys 2014-06-04 01:57 - 2012-07-27 18:38 - 00029792 _____ (Kaspersky Lab) C:\windows\system32\Drivers\klelam.sys 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-06-04 01:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates 2014-06-04 01:43 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:40 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-06-04 01:26 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:23 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Atheros 2014-06-04 01:16 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\NDF 2014-05-31 07:13 - 2014-03-07 14:56 - 00703992 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2014-03-07 14:56 - 00105464 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 12:21 - 2014-06-12 22:18 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-12 22:18 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-12 22:18 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-12 22:18 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-12 22:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-12 22:18 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-12 22:19 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-12 22:18 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-12 22:18 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-12 22:18 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-12 22:18 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-12 22:18 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-12 22:18 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-12 22:18 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-12 22:19 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-12 22:18 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 22:19 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-05-30 09:54 - 2014-06-12 22:18 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-12 22:18 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-12 22:18 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-12 22:18 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-12 22:18 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-12 22:18 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-12 22:18 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2013-08-22 17:36 - 00262144 _____ () C:\windows\system32\config\BCD-Template 2014-05-20 15:51 - 2013-08-22 17:37 - 00003134 _____ () C:\windows\DtcInstall.log 2014-05-20 15:51 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\Sysprep 2014-05-20 15:50 - 2014-05-21 00:38 - 00000000 ____D () C:\windows\Panther 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:11 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 15:10 - 2014-03-07 13:19 - 00000051 _____ () C:\windows\smsts.ini 2014-05-20 15:10 - 2014-03-07 13:16 - 00000000 _____ () C:\windows\authtest.txt 2014-05-20 15:00 - 2014-05-20 14:39 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:53 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 14:44 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\Help 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2014-05-20 14:42 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-05-20 14:42 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\restore 2014-05-20 14:41 - 2014-05-20 14:41 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-05-20 14:41 - 2013-08-22 17:36 - 00000000 ___HD () C:\windows\ELAMBKUP 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\WinBioPlugIns 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\Recovery 2014-05-20 04:44 - 2014-06-04 01:39 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-05-20 04:44 - 2014-06-04 01:39 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 04:44 - 2014-05-20 14:46 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 04:44 - 2014-05-20 14:46 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 03:25 - 2014-05-20 14:49 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 01:10 - 2014-06-04 01:40 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-05-19 08:31 - 2014-06-12 22:17 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-05-19 08:21 - 2014-06-12 22:17 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-05-19 07:23 - 2014-06-12 22:17 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe Some content of TEMP: ==================== C:\Users\Wastl\AppData\Local\Temp\FreemakeVideoConverter_4.1.4.1.exe C:\Users\Wastl\AppData\Local\Temp\MSETUP4.EXE C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Wastl\AppData\Local\Temp\nvStInst.exe C:\Users\Wastl\AppData\Local\Temp\Quarantine.exe C:\Users\Wastl\AppData\Local\Temp\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0.exe C:\Users\Wastl\AppData\Local\Temp\sdanircmdc.exe C:\Users\Wastl\AppData\Local\Temp\sdapskill.exe C:\Users\Wastl\AppData\Local\Temp\sdaspwn.exe C:\Users\Wastl\AppData\Local\Temp\sweetpage294wld_n2.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-13 15:27 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Ich möchte noch anmerken das 337Games noch immer am Desktop liegt und der Geek Uninstaller es auch noch findet. Die Kaspersky addons im Firefox sind auch weiterhin nicht vorhanden Habe bei Manueller suche noch was gefunden C:\AdwCleaner\Quarantine\C\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\337Games da sind 2 VIR Dateien mit je 2KB Kann ich das und die Verknüpfung auf den Desktop löschen ? Oder wird das im späteren Verlauf noch geschehen ? |
17.06.2014, 10:54 | #9 |
/// the machine /// TB-Ausbilder | Windows 8.1 Adware leitet um und lässt sich nicht entfernen Das ist schon in Quarantäne. Das Desktop Icon kannste manuell löschen. Kaspersky einmal neu installieren. Dann bitte FRST öffnen, haken setzen bei additional und scannen, poste bitte beide Logfiles.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.06.2014, 00:12 | #10 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernenCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-06-2014 Ran by Wastl at 2014-06-19 01:10:15 Running from C:\Users\Wastl\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Airplane Mode Hid Installer (HKLM-x32\...\InstallShield_{5E5B067F-52A4-447E-A3F1-D6DD10565E73}) (Version: 2.0.0.3 - ) Airplane Mode Hid Installer (x32 Version: 2.0.0.3 - ) Hidden Blood Bowl: Legendary Edition (HKLM-x32\...\Steam App 58520) (Version: - Cyanide Studios) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - ) Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version: - ) Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - ) Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version: - ) Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - ) Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios) Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation) Hotkey 8.0132 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 8.0132 - NoteBook) Hotkey 8.0132 (x32 Version: 8.0132 - NoteBook) Hidden Insyde Airplane Mode HID Mini-Driver (HKLM\...\AirplaneModeHid) (Version: 1.2.0.0 - Insyde Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.3.8.2663 - IObit) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden Kung Fu Strike: The Warrior's Rise (HKLM-x32\...\Steam App 212030) (Version: - Qooc Software ) Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\Steam App 234670) (Version: - CyberConnect 2) NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.1.306 - Qualcomm Atheros Communications) Hidden Qualcomm Atheros Killer Wireless-N Drivers (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Network Manager (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Performance Suite (HKLM-x32\...\{BB96DF0C-B36B-46E2-B8E4-635773ECD782}) (Version: 1.0.36.1278 - Qualcomm Atheros) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7156 - Realtek Semiconductor Corp.) Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Hidden Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics) SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.4.0 - Synaptics Incorporated) Trials Fusion (HKLM-x32\...\Steam App 245490) (Version: - RedLynx, in collaboration with Ubisoft Shanghai, Ubisoft Kiev) Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft) Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft) Windows-Treiberpaket - Insyde (AirplaneModeHid) HIDClass (12/22/2012 1.2.0.0) (HKLM\...\F7113EB21220F70774B94DB60BA4FE35AE3C8503) (Version: 12/22/2012 1.2.0.0 - Insyde) ==================== Restore Points ========================= 20-05-2014 13:51:25 Windows-Sicherung 03-06-2014 23:27:30 DirectX wurde installiert 07-06-2014 22:15:03 Installed Samsung Kies3 10-06-2014 12:19:55 DirectX wurde installiert 11-06-2014 20:26:31 DirectX wurde installiert 16-06-2014 22:18:16 Windows Update ==================== Hosts content: ========================== 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {11BA1EC9-FF9A-49A7-A79E-F8EA46B5C059} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {37D02F7F-FC1E-4C54-B4BB-DA2C29D820A7} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {44B6E80B-DFE1-493B-AA81-D6FE6084DC25} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2014-06-13] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {8724E9F7-9D09-4B66-BA7F-88ED21AECC35} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {C3E1DC27-8C5D-40D9-94C2-45917DE17580} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-06-09] (IObit) Task: {CE601DED-14E6-4758-9DB2-C159A8BB2416} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D0525836-EF28-4F93-A741-2D7FBA89589E} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-04] (Adobe Systems Incorporated) Task: {D2075270-B318-45D4-BE53-0D062B6DEA97} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {F2E98465-E5B7-4047-918A-63C19C58FC9C} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe ==================== Loaded Modules (whitelisted) ============= 2014-05-20 14:49 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-07-09 14:42 - 2013-07-09 14:42 - 00046080 _____ () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe 2013-09-25 03:04 - 2013-09-25 03:04 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-09-25 03:01 - 2013-09-25 03:01 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2013-09-25 03:08 - 2013-09-25 03:08 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2014-02-11 20:21 - 2014-02-11 20:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll 2014-02-11 20:22 - 2014-02-11 20:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll 2014-02-11 20:21 - 2014-02-11 20:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll 2014-02-11 20:22 - 2014-02-11 20:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll 2013-08-01 17:50 - 2013-08-01 17:50 - 04902400 _____ () C:\Program Files (x86)\Hotkey\Hotkey.exe 2013-10-16 15:36 - 2013-10-16 15:36 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2014-06-09 11:35 - 2014-05-07 04:27 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Wastl\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= HKLM\...\StartupApproved\Run: => "CanonMyPrinter" HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX" HKLM\...\StartupApproved\Run32: => "CanonSolutionMenuEx" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/16/2014 11:14:55 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: ) Description: Das Volume "Windows RE tools" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057) Error: (06/16/2014 10:32:21 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (06/15/2014 11:30:32 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (06/15/2014 11:27:25 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (06/15/2014 11:27:24 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (06/15/2014 11:27:15 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (06/15/2014 00:01:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.17039, Zeitstempel: 0x53156588 Name des fehlerhaften Moduls: DEVRTL.dll, Version: 6.3.9600.16384, Zeitstempel: 0x5215e1cb Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000013e5 ID des fehlerhaften Prozesses: 0xe20 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5 System errors: ============= Error: (06/17/2014 03:32:45 PM) (Source: DCOM) (EventID: 10010) (User: MININT-Q7TDJTS) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (06/17/2014 02:33:58 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (06/17/2014 02:33:58 PM) (Source: Schannel) (EventID: 4120) (User: MININT-Q7TDJTS) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (06/17/2014 02:33:44 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (06/17/2014 02:33:44 PM) (Source: Schannel) (EventID: 4120) (User: MININT-Q7TDJTS) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (06/17/2014 02:33:38 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (06/17/2014 02:33:38 PM) (Source: Schannel) (EventID: 4120) (User: MININT-Q7TDJTS) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (06/17/2014 02:33:31 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (06/17/2014 02:33:31 PM) (Source: Schannel) (EventID: 4120) (User: MININT-Q7TDJTS) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (06/17/2014 02:33:28 PM) (Source: Schannel) (EventID: 4116) (User: MININT-Q7TDJTS) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet client.wns.windows.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Microsoft Office Sessions: ========================= Error: (06/16/2014 11:14:55 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: ) Description: Windows RE toolsFalscher Parameter. (0x80070057) Error: (06/16/2014 10:32:21 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestD:\Download\esetsmartinstaller_deu.exe Error: (06/15/2014 11:30:32 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (06/15/2014 11:27:25 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestD:\Download\esetsmartinstaller_deu.exe Error: (06/15/2014 11:27:24 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestD:\Download\esetsmartinstaller_deu.exe Error: (06/15/2014 11:27:15 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestD:\Download\esetsmartinstaller_deu.exe Error: (06/15/2014 00:01:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Explorer.EXE6.3.9600.1703953156588DEVRTL.dll6.3.9600.163845215e1cbc000000500000000000013e5e2001cf8880917bd9bbC:\windows\Explorer.EXEC:\windows\system32\DEVRTL.dllf8c4aad2-f473-11e3-8286-0090f5efad61 ==================== Memory info =========================== Percentage of memory in use: 7% Total physical RAM: 32721.36 MB Available physical RAM: 30260.58 MB Total Pagefile: 37585.36 MB Available Pagefile: 34924.41 MB Total Virtual: 131072 MB Available Virtual: 131071.83 MB ==================== Drives ================================ Drive c: (OSDisk) (Fixed) (Total:237.57 GB) (Free:205.98 GB) NTFS Drive d: () (Fixed) (Total:931.51 GB) (Free:858.74 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 238 GB) (Disk ID: C26DD576) Partition: GPT Partition Type. ======================================================== Disk: 1 (Size: 932 GB) (Disk ID: 0EC70EC8) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
19.06.2014, 00:24 | #11 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernen FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-06-2014 Ran by Wastl (administrator) on MININT-Q7TDJTS on 19-06-2014 01:09:57 Running from C:\Users\Wastl\Desktop Platform: Windows 8.1 Pro (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe () C:\Program Files (x86)\Hotkey\Hotkey.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-30] (Synaptics Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13664984 2014-01-08] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation) HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications)) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{C855D7CE-4D71-4F75-8270-8F5405DC37F0}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default FF NewTab: chrome://quick_start/content/index.html FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\faststartff@gmail.com [2014-06-12] FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\shortcutff@gmail.com [2014-06-12] FF Extension: Ghostery - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\firefox@ghostery.com.xpi [2014-06-19] FF Extension: Adblock Plus - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-19] FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-19] FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-19] FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-19] FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-19] FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-19] FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com FF Extension: Fast Start - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com FF Extension: shortcut - C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\shortcutff@gmail.com [2014-06-12] FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-19] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-19] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-19] FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-19] FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-19] ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-09] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [46080 2013-07-09] () [File not signed] R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [340480 2013-10-16] (Qualcomm Atheros) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 AirplaneModeHid; C:\Windows\system32\DRIVERS\AirplaneModeHid.sys [25264 2012-12-23] (Insyde Corporation) R3 akwbx; C:\Windows\system32\DRIVERS\akwbx64.sys [3881168 2013-09-24] (Qualcomm Atheros, Inc.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-05-28] (Kaspersky Lab) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-05-28] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-05-28] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-05-28] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-19] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [26424 2012-11-30] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) R3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation) S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X] S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-19 00:32 - 2014-06-19 00:32 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-19 00:31 - 2014-06-19 00:40 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-06-19 00:31 - 2014-06-19 00:31 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-19 00:31 - 2014-06-19 00:31 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-06-19 00:31 - 2014-06-19 00:31 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-06-19 00:31 - 2014-05-28 16:38 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-06-19 00:31 - 2014-05-28 16:38 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-06-19 00:31 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll 2014-06-16 22:35 - 2014-06-19 01:09 - 00000000 ____D () C:\Users\Wastl\Desktop\FRST-OlderVersion 2014-06-15 12:00 - 2014-06-19 01:10 - 00019131 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-15 11:59 - 2014-06-15 11:59 - 00000618 _____ () C:\Users\Wastl\Desktop\JRT.txt 2014-06-15 11:53 - 2014-06-15 11:53 - 00000000 ____D () C:\windows\ERUNT 2014-06-15 11:29 - 2014-06-15 11:50 - 00000000 ____D () C:\AdwCleaner 2014-06-15 11:18 - 2014-06-16 22:34 - 00000000 ____D () C:\Users\Wastl\Desktop\Logs 15.06 2014-06-15 11:12 - 2014-06-15 11:15 - 00000036 _____ () C:\Users\Wastl\Desktop\dienst.txt 2014-06-13 16:39 - 2014-06-19 01:09 - 00000000 ____D () C:\FRST 2014-06-13 16:38 - 2014-06-19 01:09 - 02082304 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 15:18 - 2014-06-17 00:13 - 00000153 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-13 14:51 - 2014-06-19 00:40 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2014-06-13 14:51 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2014-06-13 14:51 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2014-06-12 22:19 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-06-12 22:19 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-06-12 22:18 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-06-12 22:18 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-06-12 22:18 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-06-12 22:18 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-06-12 22:18 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-06-12 22:18 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-06-12 22:18 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-06-12 22:18 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-06-12 22:18 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-06-12 22:18 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-06-12 22:18 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-06-12 22:18 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-06-12 22:18 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-06-12 22:18 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-06-12 22:18 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-06-12 22:18 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll 2014-06-12 22:18 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe 2014-06-12 22:18 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-12 22:18 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll 2014-06-12 22:18 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll 2014-06-12 22:18 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2014-06-12 22:18 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2014-06-12 22:18 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll 2014-06-12 22:18 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll 2014-06-12 22:18 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll 2014-06-12 22:18 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll 2014-06-12 22:18 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll 2014-06-12 22:18 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll 2014-06-12 22:18 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll 2014-06-12 22:18 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll 2014-06-12 22:18 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll 2014-06-12 22:18 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys 2014-06-12 22:18 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll 2014-06-12 22:18 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll 2014-06-12 22:18 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys 2014-06-12 22:18 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll 2014-06-12 22:18 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-06-12 22:18 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll 2014-06-12 22:18 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys 2014-06-12 22:18 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys 2014-06-12 22:18 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2014-06-12 22:18 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys 2014-06-12 22:18 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe 2014-06-12 22:18 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll 2014-06-12 22:18 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe 2014-06-12 22:18 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2014-06-12 22:18 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll 2014-06-12 22:18 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll 2014-06-12 22:18 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-06-12 22:18 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll 2014-06-12 22:18 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2014-06-12 22:18 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe 2014-06-12 22:18 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2014-06-12 22:18 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll 2014-06-12 22:18 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll 2014-06-12 22:18 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll 2014-06-12 22:18 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll 2014-06-12 22:18 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2014-06-12 22:18 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll 2014-06-12 22:18 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll 2014-06-12 22:18 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2014-06-12 22:18 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll 2014-06-12 22:18 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-06-12 22:18 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 22:18 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2014-06-12 22:18 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll 2014-06-12 22:18 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll 2014-06-12 22:18 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys 2014-06-12 22:18 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll 2014-06-12 22:18 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2014-06-12 22:18 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll 2014-06-12 22:18 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll 2014-06-12 22:18 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys 2014-06-12 22:18 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-06-12 22:18 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll 2014-06-12 22:18 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll 2014-06-12 22:18 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll 2014-06-12 22:18 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll 2014-06-12 22:18 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll 2014-06-12 22:18 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll 2014-06-12 22:18 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe 2014-06-12 22:18 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe 2014-06-12 22:18 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys 2014-06-12 22:18 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll 2014-06-12 22:18 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll 2014-06-12 22:18 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll 2014-06-12 22:18 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll 2014-06-12 22:18 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll 2014-06-12 22:18 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe 2014-06-12 22:18 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2014-06-12 22:18 - 2014-03-21 06:14 - 00219136 _____ (Microsoft Corporation) C:\windows\system32\tscfgwmi.dll 2014-06-12 22:18 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe 2014-06-12 22:18 - 2014-03-20 02:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2014-06-12 22:18 - 2014-03-20 01:38 - 00590336 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpprefcl.dll 2014-06-12 22:18 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2014-06-12 22:18 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys 2014-06-12 22:18 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll 2014-06-12 22:18 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll 2014-06-12 22:18 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll 2014-06-12 22:18 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll 2014-06-12 22:18 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll 2014-06-12 22:18 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll 2014-06-12 22:18 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll 2014-06-12 22:18 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll 2014-06-12 22:18 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll 2014-06-12 22:18 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys 2014-06-12 22:18 - 2014-03-18 10:18 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\xusb22.sys 2014-06-12 22:18 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll 2014-06-12 22:18 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll 2014-06-12 22:18 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv 2014-06-12 22:18 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll 2014-06-12 22:18 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv 2014-06-12 22:18 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll 2014-06-12 22:18 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys 2014-06-12 22:17 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe 2014-06-12 22:17 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe 2014-06-12 22:17 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe 2014-06-12 22:17 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2014-06-12 22:17 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll 2014-06-12 22:17 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe 2014-06-12 22:17 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys 2014-06-12 22:17 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll 2014-06-12 22:17 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll 2014-06-12 22:17 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll 2014-06-12 22:17 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll 2014-06-12 22:17 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll 2014-06-12 22:17 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll 2014-06-12 22:17 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-15 11:47 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-15 11:47 - 00001071 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-17 14:34 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-09 11:29 - 2014-06-16 22:40 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-09 11:29 - 2014-06-11 22:18 - 00000000 ____D () C:\ProgramData\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:21 - 2014-06-09 11:20 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 11:01 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\windows\system32\CNMLMAT.DLL 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\windows\SysWOW64\secman.dll 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-10 14:29 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 22:49 - 2014-06-07 23:02 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 16:48 - 2014-06-04 15:43 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2011-03-31 10:07 - 00114688 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATU.dll 2014-06-04 12:35 - 2011-03-30 12:54 - 00323584 _____ (CANON INC.) C:\windows\SysWOW64\CNC_ATL.dll 2014-06-04 12:35 - 2010-11-12 11:13 - 00068096 _____ () C:\windows\SysWOW64\CNC1754D.TBL 2014-06-04 12:35 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\windows\SysWOW64\CNHMCA.dll 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:06 - 2011-02-03 02:20 - 00256000 _____ (CANON INC.) C:\windows\system32\CNMIUAT.DLL 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 12:05 - 2011-02-01 10:23 - 00355840 _____ (CANON INC.) C:\windows\system32\CNMN6PPM.DLL 2014-06-04 12:05 - 2011-02-01 10:23 - 00038400 _____ (CANON INC.) C:\windows\system32\CNMN6UI.DLL 2014-06-04 12:05 - 2011-02-01 10:22 - 00363008 _____ (CANON INC.) C:\windows\SysWOW64\CNMNPPM.DLL 2014-06-04 12:03 - 2014-06-04 12:39 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-19 00:27 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:23 - 2014-06-12 23:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-04 02:18 - 2014-06-19 00:40 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-09 11:32 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:48 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2014-06-04 01:48 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll 2014-06-04 01:48 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2014-06-04 01:48 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2014-06-04 01:48 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll 2014-06-04 01:48 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2014-06-04 01:48 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2014-06-04 01:48 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll 2014-06-04 01:48 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2014-06-04 01:48 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2014-06-04 01:48 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2014-06-04 01:48 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2014-06-04 01:48 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2014-06-04 01:48 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll 2014-06-04 01:48 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll 2014-06-04 01:48 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys 2014-06-04 01:48 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys 2014-06-04 01:48 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys 2014-06-04 01:40 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe 2014-06-04 01:39 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-06-04 01:39 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-06-04 01:39 - 2014-05-20 04:44 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-06-19 01:05 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-04 01:27 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-06-04 01:27 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-06-04 01:27 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2014-06-04 01:27 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:22 - 2014-06-15 11:47 - 00001013 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-04 01:22 - 2014-06-05 23:25 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-04 01:22 - 2014-06-05 22:46 - 00000000 ____D () C:\Users\Wastl 2014-06-04 01:22 - 2014-06-04 01:43 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:22 - 2014-06-04 01:26 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:22 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:22 - 2014-04-09 10:40 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-06-04 01:22 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-04 01:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-28 16:38 - 2014-05-28 16:38 - 00458336 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00065120 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klwfp.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00030304 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klim6.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00029792 _____ (Kaspersky Lab) C:\windows\system32\Drivers\klelam.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klmouflt.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2014-05-20 15:50 - 00000000 ____D () C:\windows\Panther 2014-05-21 00:38 - 2010-03-31 15:42 - 00020574 _____ () C:\windows\system32\logo.bmp 2014-05-21 00:33 - 2013-04-25 19:24 - 01721576 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01009.dll 2014-05-21 00:33 - 2013-03-12 22:20 - 00064624 _____ (Intel Corporation) C:\windows\system32\Drivers\HECIx64.sys 2014-05-21 00:33 - 2012-12-07 08:57 - 09888912 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsBaStorIcon.dll 2014-05-21 00:33 - 2012-12-07 08:57 - 00302224 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RtsBaStor.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 01035064 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00531768 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00464184 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00229176 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00179512 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo15.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00113976 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynTPCOM.dll 2014-05-21 00:33 - 2012-11-30 11:05 - 00031032 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-21 00:33 - 2012-11-30 11:05 - 00026424 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_AMDASF.sys 2014-05-21 00:33 - 2012-09-23 01:17 - 00021160 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\amdkmafd.sys 2014-05-21 00:33 - 2012-08-08 12:16 - 02152176 _____ (Microsoft Corporation) C:\windows\system32\WudfUpdate_01009.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 01002728 _____ (Microsoft Corporation) C:\windows\system32\WinUsbCoinstaller2.dll 2014-05-21 00:33 - 2012-08-08 12:16 - 00020000 _____ (AuthenTec) C:\windows\system32\tccoinst.dll 2014-05-21 00:33 - 2011-09-15 05:11 - 01048576 _____ () C:\windows\system32\syndata.bin 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:10 - 2014-06-08 00:50 - 00000000 ____D () C:\ProgramData\Samsung 2014-05-20 15:10 - 2014-06-04 01:22 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:52 - 2014-05-20 14:53 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-06-19 00:40 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-20 14:49 - 2014-05-30 01:07 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-20 14:49 - 2014-05-30 01:07 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 03:25 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 14:49 - 2014-05-20 03:25 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 14:49 - 2014-05-20 03:25 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 14:49 - 2014-05-15 01:49 - 03774821 _____ () C:\windows\system32\nvcoproc.bin 2014-05-20 14:48 - 2014-05-20 04:44 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 14:48 - 2014-05-20 04:44 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 14:47 - 2014-05-20 04:44 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 14:47 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\windows\system32\nvaudcap64v.dll 2014-05-20 14:47 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys 2014-05-20 14:47 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll 2014-05-20 14:47 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco6420103.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 14:46 - 2014-05-20 04:44 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01890080 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433750.dll 2014-05-20 14:46 - 2014-03-27 14:45 - 01539416 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433750.dll 2014-05-20 14:44 - 2014-06-04 01:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-06-08 00:15 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-05-20 14:43 - 2014-06-04 01:27 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:40 - 2014-06-19 00:51 - 01095653 _____ () C:\windows\WindowsUpdate.log 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 15:00 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec ==================== One Month Modified Files and Folders ======= 2014-06-19 01:10 - 2014-06-15 12:00 - 00019131 _____ () C:\Users\Wastl\Desktop\FRST.txt 2014-06-19 01:09 - 2014-06-16 22:35 - 00000000 ____D () C:\Users\Wastl\Desktop\FRST-OlderVersion 2014-06-19 01:09 - 2014-06-13 16:39 - 00000000 ____D () C:\FRST 2014-06-19 01:09 - 2014-06-13 16:38 - 02082304 _____ (Farbar) C:\Users\Wastl\Desktop\FRST64.exe 2014-06-19 01:05 - 2014-06-04 01:27 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-1001 2014-06-19 01:05 - 2013-08-22 15:25 - 00262144 ___SH () C:\windows\system32\config\ELAM 2014-06-19 01:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\sru 2014-06-19 00:51 - 2014-05-20 14:40 - 01095653 _____ () C:\windows\WindowsUpdate.log 2014-06-19 00:47 - 2014-03-07 13:19 - 01776918 _____ () C:\windows\system32\PerfStringBackup.INI 2014-06-19 00:47 - 2013-08-23 01:24 - 00765582 _____ () C:\windows\system32\perfh007.dat 2014-06-19 00:47 - 2013-08-23 01:24 - 00159366 _____ () C:\windows\system32\perfc007.dat 2014-06-19 00:40 - 2014-06-19 00:31 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-06-19 00:40 - 2014-06-13 14:51 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-19 00:40 - 2014-06-04 02:18 - 00000000 __RDO () C:\Users\Wastl\OneDrive 2014-06-19 00:40 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-19 00:40 - 2014-03-07 13:03 - 00062692 _____ () C:\windows\PFRO.log 2014-06-19 00:40 - 2013-08-22 16:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-06-19 00:40 - 2013-08-22 15:25 - 00524288 ___SH () C:\windows\system32\config\BBI 2014-06-19 00:32 - 2014-06-19 00:32 - 00001351 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-06-19 00:31 - 2014-06-19 00:31 - 00002356 _____ () C:\Users\Wastl\Desktop\Sicherer Zahlungsverkehr.lnk 2014-06-19 00:31 - 2014-06-19 00:31 - 00001146 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-06-19 00:31 - 2014-06-19 00:31 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-06-19 00:31 - 2013-08-22 17:36 - 00000000 ___HD () C:\windows\ELAMBKUP 2014-06-19 00:27 - 2014-06-04 02:59 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-17 14:52 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\NDF 2014-06-17 14:34 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-17 00:18 - 2013-08-22 17:20 - 00000000 ____D () C:\windows\CbsTemp 2014-06-17 00:13 - 2014-06-13 15:18 - 00000153 _____ () C:\Users\Wastl\Desktop\Neues Textdokument.txt 2014-06-16 22:40 - 2014-06-09 11:29 - 00000308 _____ () C:\windows\Tasks\Uninstaller_SkipUac_Administrator.job 2014-06-16 22:34 - 2014-06-15 11:18 - 00000000 ____D () C:\Users\Wastl\Desktop\Logs 15.06 2014-06-15 11:59 - 2014-06-15 11:59 - 00000618 _____ () C:\Users\Wastl\Desktop\JRT.txt 2014-06-15 11:53 - 2014-06-15 11:53 - 00000000 ____D () C:\windows\ERUNT 2014-06-15 11:50 - 2014-06-15 11:29 - 00000000 ____D () C:\AdwCleaner 2014-06-15 11:47 - 2014-06-09 11:35 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-15 11:47 - 2014-06-09 11:35 - 00001071 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-15 11:47 - 2014-06-04 01:22 - 00001013 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-15 11:26 - 2013-08-22 16:45 - 00000000 ____D () C:\windows\Setup 2014-06-15 11:15 - 2014-06-15 11:12 - 00000036 _____ () C:\Users\Wastl\Desktop\dienst.txt 2014-06-13 22:28 - 2013-08-22 16:44 - 00335992 _____ () C:\windows\system32\FNTCACHE.DAT 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ToastData 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel 2014-06-13 16:40 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\WinStore 2014-06-13 16:40 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\oobe 2014-06-13 16:08 - 2014-06-13 16:08 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-13 16:08 - 2014-06-13 16:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-13 16:08 - 2014-06-13 16:08 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-13 16:07 - 2014-03-07 13:59 - 00000000 ____D () C:\windows\system32\MRT 2014-06-13 16:07 - 2014-03-07 13:58 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-06-13 14:51 - 2014-06-13 14:51 - 00001124 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-13 14:51 - 2014-06-13 14:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-12 23:22 - 2014-06-04 02:23 - 00000000 ____D () C:\Users\Wastl\AppData\Local\CrashDumps 2014-06-11 22:26 - 2014-06-11 22:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-06-11 22:26 - 2014-03-07 17:26 - 00130809 _____ () C:\windows\DirectX.log 2014-06-11 22:18 - 2014-06-09 11:29 - 00000000 ____D () C:\ProgramData\IObit 2014-06-11 14:50 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\AppReadiness 2014-06-10 14:29 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Ubisoft Game Launcher 2014-06-10 14:20 - 2014-06-10 14:20 - 00000000 ____D () C:\Users\Wastl\Documents\My Games 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Mozilla 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-09 11:35 - 2014-06-09 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-09 11:32 - 2014-06-04 02:00 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Mozilla 2014-06-09 11:30 - 2014-06-09 11:30 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\ProductData 2014-06-09 11:29 - 2014-06-09 11:29 - 00002408 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-06-09 11:29 - 2014-06-09 11:29 - 00001278 _____ () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00001254 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\IObit 2014-06-09 11:29 - 2014-06-09 11:29 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-06-09 11:20 - 2014-06-09 11:21 - 02464580 _____ () C:\Users\Wastl\Desktop\geek_1.3.0.33.zip 2014-06-08 00:53 - 2013-08-22 16:46 - 00038865 _____ () C:\windows\setupact.log 2014-06-08 00:50 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-08 00:48 - 2014-06-08 00:48 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\NVIDIA 2014-06-08 00:15 - 2014-06-08 00:15 - 00000723 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\SelfMV 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\Documents\samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Samsung 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-06-08 00:15 - 2014-06-08 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-08 00:15 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information 2014-06-07 23:50 - 2014-06-07 23:50 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-07 23:10 - 2014-06-07 23:10 - 00000209 _____ () C:\Users\Wastl\Desktop\Watch_Dogs.url 2014-06-07 23:08 - 2014-06-07 23:08 - 00000702 _____ () C:\Users\Wastl\Desktop\Uplay.lnk 2014-06-07 23:08 - 2014-06-07 23:08 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-06-07 23:02 - 2014-06-07 22:49 - 00002564 _____ () C:\Users\Wastl\Desktop\Watch Dogs.txt 2014-06-06 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\rescache 2014-06-05 23:25 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Packages 2014-06-05 22:46 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-06-04 16:59 - 2014-06-04 16:59 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-06-04 15:43 - 2014-06-04 16:48 - 03804672 _____ () C:\Users\Wastl\Desktop\OblyTile_v0.9.8.exe 2014-06-04 14:36 - 2014-06-04 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX2 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ___HD () C:\ProgramData\CanonEPP 2014-06-04 12:39 - 2014-06-04 12:39 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Canon 2014-06-04 12:39 - 2014-06-04 12:03 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-04 12:36 - 2014-06-04 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Benutzerregistrierung 2014-06-04 12:35 - 2014-06-04 12:35 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-06-04 12:35 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-06-04 12:35 - 2013-08-22 17:36 - 00000000 __RSD () C:\windows\Media 2014-06-04 12:11 - 2014-06-04 12:11 - 00002101 _____ () C:\Users\Public\Desktop\Canon Solution Menu EX.lnk 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-06-04 12:11 - 2014-06-04 12:11 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-06-04 12:07 - 2014-06-04 12:07 - 00002386 _____ () C:\Users\Public\Desktop\Canon MG5300 series Online-Handbuch.lnk 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series Manual 2014-06-04 12:07 - 2014-06-04 12:07 - 00000000 ____D () C:\Program Files\Canon 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\windows\system32\CanonIJ Uninstaller Information 2014-06-04 12:06 - 2014-06-04 12:06 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-06-04 12:05 - 2014-06-04 12:05 - 00000000 ____D () C:\windows\system32\STRING 2014-06-04 03:27 - 2014-06-04 03:27 - 00000908 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\Documents\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake 2014-06-04 03:27 - 2014-06-04 03:27 - 00000000 ____D () C:\ProgramData\Freemake 2014-06-04 03:01 - 2014-06-04 03:01 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Macromedia 2014-06-04 02:59 - 2014-06-04 02:59 - 00003772 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 02:31 - 2014-06-04 02:31 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys 2014-06-04 02:31 - 2014-06-04 02:31 - 00000388 _____ () C:\windows\LkmdfCoInst.log 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Logishrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Users\Wastl\AppData\Local\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-06-04 02:31 - 2014-06-04 02:31 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-06-04 02:07 - 2014-06-04 02:07 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-06-04 02:07 - 2014-06-04 02:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-04 02:00 - 2014-06-04 02:00 - 00000000 ____D () C:\ProgramData\Mozilla 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieUserList 2014-06-04 01:59 - 2014-06-04 01:59 - 00000000 __SHD () C:\Users\Wastl\AppData\Local\EmieSiteList 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-06-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-06-04 01:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates 2014-06-04 01:43 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\Documents\Bluetooth Folder 2014-06-04 01:40 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-06-04 01:34 - 2014-06-04 01:34 - 00000424 _____ () C:\Users\Wastl\Desktop\Dieser PC - Verknüpfung.lnk 2014-06-04 01:27 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-06-04 01:26 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA 2014-06-04 01:23 - 2014-06-04 01:23 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Macromedia 2014-06-04 01:23 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\NVIDIA Corporation 2014-06-04 01:22 - 2014-06-04 01:22 - 00000020 ___SH () C:\Users\Wastl\ntuser.ini 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Vorlagen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Startmenü 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Netzwerkumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Lokale Einstellungen 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Eigene Dateien 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Druckumgebung 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Musik 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Documents\Eigene Bilder 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Verlauf 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\AppData\Local\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 _SHDL () C:\Users\Wastl\Anwendungsdaten 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Atheros 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Roaming\Adobe 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\VirtualStore 2014-06-04 01:22 - 2014-06-04 01:22 - 00000000 ____D () C:\Users\Wastl\AppData\Local\BMExplorer 2014-06-04 01:22 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-31 07:13 - 2014-03-07 14:56 - 00703992 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2014-03-07 14:56 - 00105464 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 12:21 - 2014-06-12 22:18 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-12 22:18 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-12 22:18 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-12 22:18 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-12 22:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-12 22:18 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-12 22:19 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-12 22:18 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-12 22:18 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-12 22:18 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-12 22:18 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-12 22:18 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-12 22:18 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-12 22:18 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-12 22:18 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-12 22:19 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-12 22:18 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 22:19 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-12 22:18 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-05-30 09:54 - 2014-06-12 22:18 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-12 22:18 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-12 22:18 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-12 22:18 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-12 22:18 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-12 22:18 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-12 22:18 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-12 22:18 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01715176 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-05-30 01:07 - 2014-06-04 01:27 - 01291232 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01279480 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-05-30 01:07 - 2014-05-20 14:49 - 01122312 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-05-28 16:38 - 2014-06-19 00:31 - 00625760 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2014-05-28 16:38 - 2014-06-19 00:31 - 00115296 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00458336 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00065120 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klwfp.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00030304 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klim6.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00029792 _____ (Kaspersky Lab) C:\windows\system32\Drivers\klelam.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klmouflt.sys 2014-05-28 16:38 - 2014-05-28 16:38 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys 2014-05-21 00:38 - 2014-05-21 00:38 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-21 00:38 - 2013-08-22 17:36 - 00262144 _____ () C:\windows\system32\config\BCD-Template 2014-05-20 15:51 - 2013-08-22 17:37 - 00003134 _____ () C:\windows\DtcInstall.log 2014-05-20 15:51 - 2013-08-22 15:36 - 00000000 ____D () C:\windows\system32\Sysprep 2014-05-20 15:50 - 2014-05-21 00:38 - 00000000 ____D () C:\windows\Panther 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\windows\SysWOW64\RTCOM 2014-05-20 15:13 - 2014-05-20 15:13 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician 2014-05-20 15:10 - 2014-05-20 15:10 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-05-20 15:10 - 2014-03-07 13:19 - 00000051 _____ () C:\windows\smsts.ini 2014-05-20 15:10 - 2014-03-07 13:16 - 00000000 _____ () C:\windows\authtest.txt 2014-05-20 15:00 - 2014-05-20 14:39 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3467414825-1045090921-3388182043-500 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-05-20 14:53 - 2014-05-20 14:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-05-20 14:53 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Qualcomm 2014-05-20 14:52 - 2014-05-20 14:52 - 00002799 _____ () C:\Users\Public\Desktop\Killer Network Manager.lnk 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\ProgramData\Downloaded Installations 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2014-05-20 14:52 - 2014-05-20 14:52 - 00000000 ____D () C:\Program Files\Cisco 2014-05-20 14:49 - 2014-05-20 14:49 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-05-20 14:49 - 2014-05-20 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-20 14:49 - 2014-05-20 14:44 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-20 14:49 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\Help 2014-05-20 14:44 - 2014-05-20 14:44 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-20 14:43 - 2014-05-20 14:43 - 00004398 _____ () C:\windows\DPINST.LOG 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_AirplaneModeHid_01011.Wdf 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\Insyde 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files\DIFX 2014-05-20 14:43 - 2014-05-20 14:43 - 00000000 ____D () C:\Program Files (x86)\Hotkey 2014-05-20 14:42 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\restore 2014-05-20 14:40 - 2014-05-20 14:40 - 00000000 ____D () C:\windows\CSC 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2014-05-20 14:39 - 2014-05-20 14:39 - 00000000 ____D () C:\Program Files\AuthenTec 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\WinBioPlugIns 2014-05-20 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\windows\system32\Recovery 2014-05-20 04:44 - 2014-06-04 01:39 - 31387936 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 25256224 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 24025376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17561544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 17480432 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 16003912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 12688328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-05-20 04:44 - 2014-06-04 01:39 - 11644928 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 11599072 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09735256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 09697640 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 03141976 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02953672 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02785568 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 02412376 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvenc.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01889112 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 01541576 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6433788.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00895776 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00892704 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00867784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00861128 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00492376 _____ (NVIDIA Corporation) C:\windows\system32\nvEncodeAPI64.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00416712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvEncodeAPI.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00382240 _____ (NVIDIA Corporation) C:\windows\system32\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-06-04 01:39 - 00335704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFROpenGL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00061216 _____ (Khronos Group) C:\windows\system32\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:48 - 00052056 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 18531568 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 14434704 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-05-20 04:44 - 2014-05-20 14:47 - 00026069 _____ () C:\windows\system32\nvinfo.pb 2014-05-20 04:44 - 2014-05-20 14:46 - 03109248 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll 2014-05-20 04:44 - 2014-05-20 14:46 - 02730208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 06769096 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 03514144 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 02560968 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00927520 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe 2014-05-20 03:25 - 2014-05-20 14:49 - 00387528 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll 2014-05-20 03:25 - 2014-05-20 14:49 - 00062808 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll 2014-05-20 01:10 - 2014-06-04 01:40 - 00601432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe Some content of TEMP: ==================== C:\Users\Wastl\AppData\Local\Temp\FreemakeVideoConverter_4.1.4.1.exe C:\Users\Wastl\AppData\Local\Temp\MSETUP4.EXE C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Wastl\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Wastl\AppData\Local\Temp\nvStInst.exe C:\Users\Wastl\AppData\Local\Temp\Quarantine.exe C:\Users\Wastl\AppData\Local\Temp\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0.exe C:\Users\Wastl\AppData\Local\Temp\sdanircmdc.exe C:\Users\Wastl\AppData\Local\Temp\sdapskill.exe C:\Users\Wastl\AppData\Local\Temp\sdaspwn.exe C:\Users\Wastl\AppData\Local\Temp\sweetpage294wld_n2.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-19 01:05 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- |
19.06.2014, 20:39 | #12 |
/// the machine /// TB-Ausbilder | Windows 8.1 Adware leitet um und lässt sich nicht entfernen Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.06.2014, 14:51 | #13 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernen die unteren 2 sachen hat es nicht gelöscht. Kann ich die einfach selbst löschen ? Ansonsten scheint alles gut zu sein Danke dir schonmal |
21.06.2014, 09:25 | #14 |
/// the machine /// TB-Ausbilder | Windows 8.1 Adware leitet um und lässt sich nicht entfernen kannste Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.06.2014, 15:01 | #15 |
| Windows 8.1 Adware leitet um und lässt sich nicht entfernen Was ist das nun wieder ?? Gerade eben die Meldung von Malwarebites bekommen Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 21.06.2014 Suchlauf-Zeit: 15:45:00 Logdatei: mbam suchlauf02.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.21.07 Rootkit Datenbank: v2014.06.20.01 Lizenz: Premium Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Wastl Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 264365 Verstrichene Zeit: 4 Min, 40 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 1 PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com, In Quarantäne, [c358007be6957abc533eaf4f649f1ce4] Registrierungsdaten: 0 (No malicious items detected) Ordner: 33 PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include\tools, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\lib, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\module, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\pack, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\en, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\en-US, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\es, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\es-419, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\it, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\pl, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\ru, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\tr, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\vi, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\defaults, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\defaults\preferences, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], Dateien: 65 PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome.manifest, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\install.rdf, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\index.html, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\module\other.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\logo.ico, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\chrome\skin\style.css, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\addonmanager.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\aes.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\config.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\dialogs.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\last_tab.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\misc.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\properties.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\remoterequest.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], PUP.Optional.FastStart.A, C:\Users\Wastl\AppData\Roaming\Mozilla\Firefox\Profiles\hlvlv45j.default\extensions\faststartff@gmail.com\modules\settings.js, In Quarantäne, [f02b394286f5c076aac1bee72fd3a15f], Physische Sektoren: 0 (No malicious items detected) (end) |
Themen zu Windows 8.1 Adware leitet um und lässt sich nicht entfernen |
hacken, iexplore.exe, installation, installmanager.exe, internet explorer, leitet, malwarebytes, problem, pup.optional.faststart.a, pup.optional.iepluginservice.a, pup.optional.qone8, pup.optional.skytech.a, pup.optional.sweetpage.a, pup.optional.v9.a, pup.optional.wpmanager, smartphone, sweet page, sweet page entfernen, sweet-page, sweet-page entfernen, sweetpage, sweetpage entfernen, treiber, win32/elex.aj, win32/winloadsda.d, ändern |