| |
| |||||||
Log-Analyse und Auswertung: Win7: "wma:wimad" nach Neuinstallation gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
22.07.2014, 14:23
| #1 |
| |  Win7: "wma:wimad" nach Neuinstallation gefunden Guten Tag zusammen, nachdem ich eine Viren Meldung aufgrund eines Rootkits bekommen habe, habe ich meinen Pc neu aufgesetzt. Jetzt habe ich aber gestern auf meiner externen Festplatte einen weiteren Virus gefunden: "H:\All_Music\Nickelback-Never Again.mp3 Bedrohung WMA:Wimad [Susp]" den ich mithilfe von Avast! erfolgreich gelöscht habe. Nun meine Frage: Ist mein Pc immer noch bzw. wieder befallen? Wie kann ich ein Logfile der externen Platte erstellen und kann ich die Daten darauf noch retten? Schonmal vielen dank für evtl. Hilfe und Ratschläge! Mfg Moritz Frst-Log: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014
Ran by mo (administrator) on ***** on 22-07-2014 14:19:56
Running from C:\Users\mo\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Install\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Install\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Install\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Install\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Install\Intel\BluetoothHS\BTHSSecurityMgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\mediasrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Akamai Technologies, Inc.) C:\Users\mo\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\mo\AppData\Local\Akamai\netsession_win.exe
(AVAST Software) C:\Install\AVAST Software\Avast\AvastUI.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dropbox, Inc.) C:\Users\mo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\btplayerctrl.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\ws.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Install\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4802864 2012-06-25] (Intel(R) Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7284328 2011-08-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Install\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-17] (AVAST Software)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Install\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-934139158-1595679319-1959080060-1000\...\Run: [Akamai NetSession Interface] => C:\Users\mo\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
Startup: C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\mo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt1" -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt2" -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt3" -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt4" -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt5" -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt6" -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt7" -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: "DropboxExt8" -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Install\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4D015B97E5A1CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Install\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Install\Java\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Install\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Install\Java\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\mo\AppData\Roaming\Mozilla\Firefox\Profiles\y2gokdl0.default
FF Homepage: about:blank
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Install\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Install\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Install\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Install\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 - C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Install\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Install\AVAST Software\Avast\WebRep\FF [2014-07-17]
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-17]
CHR Extension: (Google Drive) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17]
CHR Extension: (YouTube) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17]
CHR Extension: (Google-Suche) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17]
CHR Extension: (avast! Online Security) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-17]
CHR Extension: (Google Wallet) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-17]
CHR Extension: (Google Mail) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Install\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-17]
==================== Services (Whitelisted) =================
R2 AMPPALR3; C:\Install\Intel\BluetoothHS\BTHSAmpPalService.exe [659976 2012-03-15] (Intel Corporation)
R2 avast! Antivirus; C:\Install\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-17] (AVAST Software)
R2 Bluetooth Device Monitor; C:\Install\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Install\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Install\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed]
R2 BTHSSecurityMgr; C:\Install\Intel\BluetoothHS\BTHSSecurityMgr.exe [135952 2012-04-23] (Intel(R) Corporation)
R2 EvtEng; C:\Install\Intel\WiFi\bin\EvtEng.exe [628016 2012-06-25] (Intel(R) Corporation)
S3 MyWiFiDHCPDNS; C:\Install\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-06-25] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
R3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 ZeroConfigService; C:\Install\Intel\WiFi\bin\ZeroConfigService.exe [3325232 2012-06-25] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-17] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-17] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-17] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-07-17] (Disc Soft Ltd)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [296816 2007-02-18] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-22 14:19 - 2014-07-22 14:20 - 00016009 _____ () C:\Users\mo\Downloads\FRST.txt
2014-07-22 14:19 - 2014-07-22 14:19 - 00000000 ____D () C:\FRST
2014-07-22 14:18 - 2014-07-22 14:18 - 00000544 _____ () C:\Users\mo\Downloads\defogger_disable.log
2014-07-22 14:18 - 2014-07-22 14:18 - 00000144 _____ () C:\Users\mo\defogger_reenable
2014-07-22 14:17 - 2014-07-22 14:17 - 02090496 _____ (Farbar) C:\Users\mo\Downloads\FRST64.exe
2014-07-22 14:17 - 2014-07-22 14:17 - 00050477 _____ () C:\Users\mo\Downloads\Defogger.exe
2014-07-22 14:14 - 2014-07-22 14:14 - 00380416 _____ () C:\Users\mo\Downloads\dflq5h5m.exe
2014-07-22 00:28 - 2014-07-22 00:28 - 00000000 ____D () C:\Users\mo\AppData\Roaming\PDF Architect 2
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-07-21 23:27 - 2014-07-21 23:27 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-21 23:26 - 2014-07-21 23:30 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-21 23:26 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 __RHD () C:\MSOCache
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Users\mo\AppData\Local\Microsoft Help
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-07-21 22:19 - 2014-07-21 22:20 - 00000222 _____ () C:\Users\mo\Desktop\keys.txt
2014-07-21 16:40 - 2014-07-21 16:40 - 00000175 _____ () C:\Users\mo\Desktop\Neues Textdokument (2).txt
2014-07-19 18:29 - 2014-07-19 18:29 - 00000173 _____ () C:\Users\mo\AppData\Local\msmathematics.qat.mo
2014-07-19 18:23 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-07-19 18:23 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-07-19 18:22 - 2014-07-19 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mathematics (64-bit)
2014-07-19 18:21 - 2014-07-19 18:22 - 19809368 _____ (Microsoft Corporation) C:\Users\mo\Downloads\MSetup_x64.exe
2014-07-19 18:14 - 2014-07-19 18:14 - 00000000 ____D () C:\Users\mo\Documents\Eigene virtuelle Computer
2014-07-19 18:12 - 2014-07-19 18:12 - 00001576 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Virtual PC.lnk
2014-07-19 18:12 - 2014-07-19 18:12 - 00000000 ____D () C:\Windows\system32\Treiber
2014-07-19 18:08 - 2014-07-19 18:55 - 00011379 _____ () C:\Users\mo\Downloads\SecureDownloadManager.log
2014-07-19 18:08 - 2014-07-19 18:08 - 00003175 _____ () C:\Users\mo\Desktop\Secure Download Manager.lnk
2014-07-19 18:08 - 2014-07-19 18:08 - 00000000 ____D () C:\Users\mo\AppData\Roaming\e-academy Inc
2014-07-19 17:26 - 2014-07-19 17:26 - 00000207 _____ () C:\Users\mo\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url
2014-07-19 17:26 - 2014-07-19 17:26 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:20 - 2014-07-19 18:10 - 00000613 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-19 17:20 - 2014-07-19 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:19 - 2014-07-19 17:19 - 01141680 _____ () C:\Users\mo\Downloads\SteamSetup.exe
2014-07-18 21:16 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-07-18 21:01 - 2014-07-21 18:40 - 00050058 _____ () C:\Windows\IE11_main.log
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-18 17:51 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-07-18 17:51 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-07-18 17:39 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-07-18 17:39 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-07-18 16:59 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-18 16:59 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-18 16:59 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-18 16:59 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-18 16:59 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-18 16:59 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Sagas - Chrome.lnk
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Filme - Chrome.lnk
2014-07-18 00:06 - 2014-07-18 00:06 - 00002393 _____ () C:\Users\mo\Desktop\Mo - Chrome.lnk
2014-07-17 23:59 - 2014-07-17 23:59 - 00000000 ____D () C:\Program Files\Autodesk
2014-07-17 23:58 - 2014-07-17 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-07-17 23:58 - 2014-07-17 23:59 - 00000000 ____D () C:\ProgramData\Autodesk
2014-07-17 23:58 - 2014-07-17 23:58 - 00001054 _____ () C:\Users\Public\Desktop\LMTOOLS Utility.lnk
2014-07-17 23:58 - 2014-07-17 23:58 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Autodesk
2014-07-17 23:57 - 2014-07-17 23:57 - 00000000 ____D () C:\Users\mo\AppData\Local\Akamai
2014-07-17 23:56 - 2014-07-17 23:56 - 00000000 ____D () C:\Autodesk
2014-07-17 23:43 - 2014-07-21 19:50 - 00000000 ___RD () C:\Users\mo\Dropbox
2014-07-17 23:43 - 2014-07-17 23:43 - 00001037 _____ () C:\Users\mo\Desktop\Dropbox.lnk
2014-07-17 23:43 - 2014-06-30 13:57 - 00000198 _____ () C:\Users\mo\Desktop\psso.txt
2014-07-17 23:41 - 2014-07-21 19:50 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Dropbox
2014-07-17 23:41 - 2014-07-17 23:41 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-17 23:10 - 2014-07-17 23:12 - 00000000 ____D () C:\ProgramData\DivX
2014-07-17 23:06 - 2014-07-17 23:06 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-17 22:57 - 2014-07-17 22:57 - 00000822 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00001253 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-07-17 22:52 - 2014-07-17 22:53 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DVDVideoSoft
2014-07-17 22:47 - 2014-07-17 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-07-17 22:46 - 2014-07-17 22:46 - 00000000 ____D () C:\Users\mo\AppData\Roaming\GHISLER
2014-07-17 22:36 - 2014-07-22 14:04 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-17 22:36 - 2014-07-21 22:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-17 22:36 - 2014-07-17 22:36 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-17 22:36 - 2014-07-17 22:36 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Users\mo\AppData\Local\Google
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-17 22:33 - 2014-07-17 22:33 - 00000000 ____D () C:\Users\mo\AppData\Roaming\FastStone
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Macromedia
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Adobe
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Local\Macromedia
2014-07-17 22:24 - 2014-07-17 22:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-17 22:24 - 2014-07-17 22:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-17 22:21 - 2014-07-17 22:21 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-17 22:21 - 2014-07-17 22:21 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-17 22:20 - 2014-07-17 22:21 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-17 22:05 - 2014-07-17 22:05 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Sun
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-17 22:02 - 2014-07-17 22:02 - 00001606 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00001582 _____ () C:\Users\mo\Desktop\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMind
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\2C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C04
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0816
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0804
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0424
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041F
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0419
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0416
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0415
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0414
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0413
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0412
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0411
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0410
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040C
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0409
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0408
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0406
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0405
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0404
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0401
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Windows\SysWOW64\SDA
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Program Files (x86)\JMicron
2014-07-17 21:26 - 2014-07-17 21:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-17 21:26 - 2014-07-17 21:26 - 00074452 _____ () C:\Windows\system32\Drivers\RTWAVES30.dat
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files\Realtek
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-07-17 21:26 - 2011-08-31 19:12 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-07-17 21:26 - 2011-08-30 17:28 - 03069032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-07-17 21:26 - 2011-08-30 16:41 - 01501696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCORES64.dat
2014-07-17 21:26 - 2011-08-30 13:37 - 02518632 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-07-17 21:26 - 2011-08-24 13:30 - 03201128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-07-17 21:26 - 2011-08-23 12:06 - 00097896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2014-07-17 21:26 - 2011-08-19 21:10 - 00886360 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2014-07-17 21:26 - 2011-08-19 21:10 - 00746072 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2014-07-17 21:26 - 2011-08-19 21:10 - 00064600 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2014-07-17 21:26 - 2011-08-19 21:09 - 00626264 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-07-17 21:26 - 2011-08-19 21:09 - 00561240 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-07-17 21:26 - 2011-08-19 14:54 - 01881704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-07-17 21:26 - 2011-07-28 00:55 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-07-17 21:26 - 2011-07-28 00:55 - 02132824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-07-17 21:26 - 2011-07-22 19:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-07-17 21:26 - 2011-06-30 16:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-07-17 21:26 - 2011-06-27 14:45 - 03768152 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-07-17 21:26 - 2011-05-05 15:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-07-17 21:26 - 2010-11-29 14:36 - 00702808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-07-17 21:26 - 2010-11-03 18:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-07-17 21:26 - 2010-11-03 18:30 - 00376936 _____ (Realtek Semiconductor) C:\Windows\system32\RtkGuiCompLib.dll
2014-07-17 21:26 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-07-17 21:26 - 2010-10-03 13:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-07-17 21:26 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-07-17 21:26 - 2010-07-22 16:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-07-17 21:26 - 2010-07-02 19:40 - 00080984 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-07-17 21:26 - 2010-05-06 17:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-07-17 21:26 - 2009-11-18 07:13 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2014-07-17 21:26 - 2009-11-17 18:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-07-17 20:31 - 2014-07-17 20:32 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\Users\mo\AppData\Local\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-17 20:26 - 2014-07-17 20:26 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-17 20:19 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-07-17 20:19 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-07-17 20:11 - 2014-07-17 20:19 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA Corporation
2014-07-17 20:11 - 2014-07-17 20:17 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA
2014-07-17 20:11 - 2014-05-30 01:07 - 01279480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-07-17 20:11 - 2014-05-30 01:07 - 01122312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-07-17 20:10 - 2014-07-21 19:43 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-17 20:10 - 2014-07-17 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-17 20:10 - 2014-07-17 20:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-17 20:10 - 2014-07-17 20:10 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-17 20:10 - 2014-05-20 03:25 - 06769096 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 03514144 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 02560968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 00927520 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-07-17 20:10 - 2014-05-20 03:25 - 00387528 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-07-17 20:10 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-07-17 20:10 - 2014-05-15 01:49 - 03774821 _____ () C:\Windows\system32\nvcoproc.bin
2014-07-17 20:09 - 2014-07-17 20:16 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-17 20:09 - 2014-05-20 04:44 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-07-17 20:09 - 2014-05-20 04:44 - 00052056 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-07-17 20:08 - 2014-07-18 21:31 - 01589650 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-17 20:05 - 2014-05-21 19:02 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvir3dgenco64.dll
2014-07-17 20:05 - 2014-05-21 19:02 - 00451872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys
2014-07-17 20:05 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-07-17 20:05 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 03109248 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02730208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433788.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433788.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-07-17 20:05 - 2014-05-20 04:44 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00026069 _____ () C:\Windows\system32\nvinfo.pb
2014-07-17 20:02 - 2014-07-17 20:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-17 20:02 - 2014-07-17 20:02 - 00000000 ____D () C:\NVIDIA
2014-07-17 20:02 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-07-17 20:02 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-07-17 20:02 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-07-17 20:01 - 2014-07-17 20:01 - 00002762 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-17 20:01 - 2014-07-17 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-17 19:59 - 2014-07-17 19:59 - 00001647 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-07-17 19:59 - 2014-07-17 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-07-17 19:58 - 2014-07-17 19:59 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DAEMON Tools Lite
2014-07-17 19:58 - 2014-07-17 19:58 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-07-17 19:57 - 2014-07-17 19:58 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-07-17 19:54 - 2014-07-17 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-17 19:51 - 2014-07-17 19:51 - 00001013 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000752 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\Documents\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\AppData\Roaming\pdfforge
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-07-17 19:51 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-07-17 19:51 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-07-17 19:51 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-07-17 19:51 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-07-17 19:51 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-07-17 19:51 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-07-17 19:51 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-07-17 19:51 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-07-17 19:49 - 2014-07-17 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:43 - 2014-07-17 19:43 - 00001870 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\Users\mo\AppData\Roaming\AVAST Software
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-17 19:42 - 2014-07-22 14:04 - 00004170 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-17 19:42 - 2014-07-17 19:42 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-17 19:42 - 2014-07-17 19:42 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-17 19:42 - 2014-07-17 19:42 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-17 19:41 - 2014-07-17 19:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-17 19:41 - 2014-07-17 19:41 - 00057560 _____ () C:\Users\mo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-17 19:38 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-17 19:38 - 2014-07-17 19:38 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Local\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\ProgramData\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-17 19:31 - 2014-07-17 19:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_AMPPAL_01009.Wdf
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\ProgramData\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-07-17 19:28 - 2014-07-17 19:28 - 00003090 _____ () C:\Windows\System32\Tasks\{B0234288-DAC0-4B34-A7E4-7634E520661F}
2014-07-17 19:03 - 2014-07-17 18:08 - 00000000 ____D () C:\Windows\Panther
2014-07-17 18:48 - 2014-07-17 18:48 - 00003056 _____ () C:\Windows\System32\Tasks\{5967923B-4BAC-4021-9DBA-87D41D3F6A59}
2014-07-17 18:26 - 2014-07-17 18:26 - 00000000 ____D () C:\ProgramData\Dell
2014-07-17 18:20 - 2014-07-17 23:58 - 00000000 ____D () C:\Install
2014-07-17 18:20 - 2014-07-17 19:30 - 00012968 _____ () C:\Windows\DPINST.LOG
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____D () C:\Program Files\Intel
2014-07-17 18:17 - 2014-07-17 18:17 - 00000000 ____D () C:\Users\mo\AppData\Roaming\WirelessManager
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\Users\mo\AppData\Local\Downloaded Installations
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\ProgramData\Novatel Wireless
2014-07-17 18:15 - 2009-12-29 16:36 - 00041280 _____ (Printing Communications Assoc., Inc. (PCAUSA)) C:\Windows\system32\Drivers\PCASp50a64.sys
2014-07-17 18:14 - 2014-07-17 20:26 - 00000000 ____D () C:\dell
2014-07-17 18:09 - 2014-07-22 14:15 - 01186900 _____ () C:\Windows\WindowsUpdate.log
2014-07-17 18:08 - 2014-07-22 14:18 - 00000000 ____D () C:\Users\mo
2014-07-17 18:08 - 2014-07-17 18:08 - 00001439 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00001405 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00000020 ___SH () C:\Users\mo\ntuser.ini
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 __SHD () C:\Recovery
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 ____D () C:\Users\mo\AppData\Local\VirtualStore
2014-07-17 18:08 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-17 18:08 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-17 18:04 - 2014-07-17 18:04 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-07-17 18:04 - 2014-07-17 18:04 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-07-17 18:04 - 2014-07-17 18:04 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-07-17 18:03 - 2014-07-17 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
==================== One Month Modified Files and Folders =======
2014-07-22 14:20 - 2014-07-22 14:19 - 00016009 _____ () C:\Users\mo\Downloads\FRST.txt
2014-07-22 14:19 - 2014-07-22 14:19 - 00000000 ____D () C:\FRST
2014-07-22 14:18 - 2014-07-22 14:18 - 00000544 _____ () C:\Users\mo\Downloads\defogger_disable.log
2014-07-22 14:18 - 2014-07-22 14:18 - 00000144 _____ () C:\Users\mo\defogger_reenable
2014-07-22 14:18 - 2014-07-17 18:08 - 00000000 ____D () C:\Users\mo
2014-07-22 14:17 - 2014-07-22 14:17 - 02090496 _____ (Farbar) C:\Users\mo\Downloads\FRST64.exe
2014-07-22 14:17 - 2014-07-22 14:17 - 00050477 _____ () C:\Users\mo\Downloads\Defogger.exe
2014-07-22 14:15 - 2014-07-17 18:09 - 01186900 _____ () C:\Windows\WindowsUpdate.log
2014-07-22 14:14 - 2014-07-22 14:14 - 00380416 _____ () C:\Users\mo\Downloads\dflq5h5m.exe
2014-07-22 14:05 - 2009-07-14 06:51 - 00029109 _____ () C:\Windows\setupact.log
2014-07-22 14:04 - 2014-07-17 22:36 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-22 14:04 - 2014-07-17 19:42 - 00004170 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-22 00:28 - 2014-07-22 00:28 - 00000000 ____D () C:\Users\mo\AppData\Roaming\PDF Architect 2
2014-07-21 23:30 - 2014-07-21 23:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-07-21 23:28 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-21 23:28 - 2011-04-12 09:55 - 00000000 ____D () C:\Windows\ShellNew
2014-07-21 23:28 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-21 23:27 - 2014-07-21 23:27 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-21 23:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 __RHD () C:\MSOCache
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Users\mo\AppData\Local\Microsoft Help
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-07-21 23:26 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2014-07-21 22:41 - 2014-07-17 22:36 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-21 22:20 - 2014-07-21 22:19 - 00000222 _____ () C:\Users\mo\Desktop\keys.txt
2014-07-21 22:20 - 2011-04-12 09:43 - 00698572 _____ () C:\Windows\system32\perfh007.dat
2014-07-21 22:20 - 2011-04-12 09:43 - 00148876 _____ () C:\Windows\system32\perfc007.dat
2014-07-21 22:20 - 2009-07-14 07:13 - 01612484 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-21 19:50 - 2014-07-17 23:43 - 00000000 ___RD () C:\Users\mo\Dropbox
2014-07-21 19:50 - 2014-07-17 23:41 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Dropbox
2014-07-21 19:50 - 2009-07-14 06:45 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-21 19:50 - 2009-07-14 06:45 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-21 19:43 - 2014-07-17 20:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-21 19:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-21 18:40 - 2014-07-18 21:01 - 00050058 _____ () C:\Windows\IE11_main.log
2014-07-21 16:40 - 2014-07-21 16:40 - 00000175 _____ () C:\Users\mo\Desktop\Neues Textdokument (2).txt
2014-07-19 18:55 - 2014-07-19 18:08 - 00011379 _____ () C:\Users\mo\Downloads\SecureDownloadManager.log
2014-07-19 18:29 - 2014-07-19 18:29 - 00000173 _____ () C:\Users\mo\AppData\Local\msmathematics.qat.mo
2014-07-19 18:22 - 2014-07-19 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mathematics (64-bit)
2014-07-19 18:22 - 2014-07-19 18:21 - 19809368 _____ (Microsoft Corporation) C:\Users\mo\Downloads\MSetup_x64.exe
2014-07-19 18:14 - 2014-07-19 18:14 - 00000000 ____D () C:\Users\mo\Documents\Eigene virtuelle Computer
2014-07-19 18:12 - 2014-07-19 18:12 - 00001576 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Virtual PC.lnk
2014-07-19 18:12 - 2014-07-19 18:12 - 00000000 ____D () C:\Windows\system32\Treiber
2014-07-19 18:10 - 2014-07-19 17:20 - 00000613 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-19 18:08 - 2014-07-19 18:08 - 00003175 _____ () C:\Users\mo\Desktop\Secure Download Manager.lnk
2014-07-19 18:08 - 2014-07-19 18:08 - 00000000 ____D () C:\Users\mo\AppData\Roaming\e-academy Inc
2014-07-19 17:26 - 2014-07-19 17:26 - 00000207 _____ () C:\Users\mo\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url
2014-07-19 17:26 - 2014-07-19 17:26 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:20 - 2014-07-19 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:19 - 2014-07-19 17:19 - 01141680 _____ () C:\Users\mo\Downloads\SteamSetup.exe
2014-07-19 17:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-18 21:31 - 2014-07-17 20:08 - 01589650 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-18 16:55 - 2010-11-21 05:47 - 00007242 _____ () C:\Windows\PFRO.log
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Sagas - Chrome.lnk
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Filme - Chrome.lnk
2014-07-18 00:06 - 2014-07-18 00:06 - 00002393 _____ () C:\Users\mo\Desktop\Mo - Chrome.lnk
2014-07-17 23:59 - 2014-07-17 23:59 - 00000000 ____D () C:\Program Files\Autodesk
2014-07-17 23:59 - 2014-07-17 23:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-07-17 23:59 - 2014-07-17 23:58 - 00000000 ____D () C:\ProgramData\Autodesk
2014-07-17 23:58 - 2014-07-17 23:58 - 00001054 _____ () C:\Users\Public\Desktop\LMTOOLS Utility.lnk
2014-07-17 23:58 - 2014-07-17 23:58 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Autodesk
2014-07-17 23:58 - 2014-07-17 18:20 - 00000000 ____D () C:\Install
2014-07-17 23:57 - 2014-07-17 23:57 - 00000000 ____D () C:\Users\mo\AppData\Local\Akamai
2014-07-17 23:56 - 2014-07-17 23:56 - 00000000 ____D () C:\Autodesk
2014-07-17 23:43 - 2014-07-17 23:43 - 00001037 _____ () C:\Users\mo\Desktop\Dropbox.lnk
2014-07-17 23:41 - 2014-07-17 23:41 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-17 23:12 - 2014-07-17 23:10 - 00000000 ____D () C:\ProgramData\DivX
2014-07-17 23:12 - 2014-07-17 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-17 23:06 - 2014-07-17 23:06 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-17 22:57 - 2014-07-17 22:57 - 00000822 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00001253 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-07-17 22:53 - 2014-07-17 22:52 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DVDVideoSoft
2014-07-17 22:47 - 2014-07-17 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-07-17 22:46 - 2014-07-17 22:46 - 00000000 ____D () C:\Users\mo\AppData\Roaming\GHISLER
2014-07-17 22:36 - 2014-07-17 22:36 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-17 22:36 - 2014-07-17 22:36 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Users\mo\AppData\Local\Google
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-17 22:33 - 2014-07-17 22:33 - 00000000 ____D () C:\Users\mo\AppData\Roaming\FastStone
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Macromedia
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Adobe
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Local\Macromedia
2014-07-17 22:24 - 2014-07-17 22:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-17 22:24 - 2014-07-17 22:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-17 22:21 - 2014-07-17 22:21 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-17 22:21 - 2014-07-17 22:21 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-17 22:21 - 2014-07-17 22:20 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-17 22:05 - 2014-07-17 22:05 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Sun
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-17 22:02 - 2014-07-17 22:02 - 00001606 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00001582 _____ () C:\Users\mo\Desktop\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMind
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\2C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C04
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0816
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0804
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0424
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041F
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0419
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0416
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0415
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0414
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0413
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0412
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0411
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0410
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040C
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0409
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0408
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0406
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0405
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0404
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0401
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-07-17 21:29 - 2014-07-17 21:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-17 21:29 - 2011-04-12 09:43 - 00000000 ____D () C:\Windows\system32\0407
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Windows\SysWOW64\SDA
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Program Files (x86)\JMicron
2014-07-17 21:26 - 2014-07-17 21:26 - 00074452 _____ () C:\Windows\system32\Drivers\RTWAVES30.dat
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files\Realtek
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-07-17 20:32 - 2014-07-17 20:31 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\Users\mo\AppData\Local\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-17 20:26 - 2014-07-17 20:26 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-17 20:26 - 2014-07-17 18:14 - 00000000 ____D () C:\dell
2014-07-17 20:19 - 2014-07-17 20:11 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA Corporation
2014-07-17 20:18 - 2014-07-17 20:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-17 20:17 - 2014-07-17 20:11 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA
2014-07-17 20:16 - 2014-07-17 20:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-17 20:16 - 2014-07-17 20:09 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-17 20:11 - 2014-07-17 20:10 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-17 20:10 - 2014-07-17 20:10 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-17 20:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-07-17 20:02 - 2014-07-17 20:02 - 00000000 ____D () C:\NVIDIA
2014-07-17 20:01 - 2014-07-17 20:01 - 00002762 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-17 20:01 - 2014-07-17 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-17 19:59 - 2014-07-17 19:59 - 00001647 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-07-17 19:59 - 2014-07-17 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-07-17 19:59 - 2014-07-17 19:58 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DAEMON Tools Lite
2014-07-17 19:58 - 2014-07-17 19:58 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-07-17 19:58 - 2014-07-17 19:57 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-07-17 19:56 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-17 19:54 - 2014-07-17 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-17 19:51 - 2014-07-17 19:51 - 00001013 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000752 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\Documents\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\AppData\Roaming\pdfforge
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-07-17 19:49 - 2014-07-17 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:43 - 2014-07-17 19:43 - 00001870 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\Users\mo\AppData\Roaming\AVAST Software
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-17 19:42 - 2014-07-17 19:42 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-17 19:42 - 2014-07-17 19:42 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-17 19:42 - 2014-07-17 19:42 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-17 19:42 - 2014-07-17 19:41 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-17 19:41 - 2014-07-17 19:41 - 00057560 _____ () C:\Users\mo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-17 19:38 - 2014-07-17 19:38 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Local\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\ProgramData\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-17 19:31 - 2014-07-17 19:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_AMPPAL_01009.Wdf
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\ProgramData\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-07-17 19:30 - 2014-07-17 18:20 - 00012968 _____ () C:\Windows\DPINST.LOG
2014-07-17 19:30 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-17 19:28 - 2014-07-17 19:28 - 00003090 _____ () C:\Windows\System32\Tasks\{B0234288-DAC0-4B34-A7E4-7634E520661F}
2014-07-17 19:03 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-07-17 19:03 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-07-17 18:48 - 2014-07-17 18:48 - 00003056 _____ () C:\Windows\System32\Tasks\{5967923B-4BAC-4021-9DBA-87D41D3F6A59}
2014-07-17 18:26 - 2014-07-17 18:26 - 00000000 ____D () C:\ProgramData\Dell
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____D () C:\Program Files\Intel
2014-07-17 18:20 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-17 18:17 - 2014-07-17 18:17 - 00000000 ____D () C:\Users\mo\AppData\Roaming\WirelessManager
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\Users\mo\AppData\Local\Downloaded Installations
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\ProgramData\Novatel Wireless
2014-07-17 18:15 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-07-17 18:08 - 2014-07-17 19:03 - 00000000 ____D () C:\Windows\Panther
2014-07-17 18:08 - 2014-07-17 18:08 - 00001439 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00001405 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00000020 ___SH () C:\Users\mo\ntuser.ini
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 __SHD () C:\Recovery
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 ____D () C:\Users\mo\AppData\Local\VirtualStore
2014-07-17 18:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-17 18:05 - 2009-07-14 06:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-17 18:04 - 2014-07-17 18:04 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-07-17 18:04 - 2014-07-17 18:04 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-07-17 18:04 - 2014-07-17 18:04 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-07-17 18:04 - 2009-07-14 06:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-07-17 18:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-07-17 18:03 - 2014-07-17 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-07-17 18:03 - 2011-04-12 09:55 - 00000000 ____D () C:\Windows\CSC
2014-06-30 13:57 - 2014-07-17 23:43 - 00000198 _____ () C:\Users\mo\Desktop\psso.txt
Some content of TEMP:
====================
C:\Users\mo\AppData\Local\Temp\AcDeltree.exe
C:\Users\mo\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3ex5yo.dll
C:\Users\mo\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\mo\AppData\Local\Temp\msxml6-KB927977-enu-amd64.exe
C:\Users\mo\AppData\Local\Temp\ose00000.exe
C:\Users\mo\AppData\Local\Temp\sfextra.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-19 16:59
==================== End Of Log ============================
Addition-Log: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-07-2014
Ran by mo at 2014-07-22 14:20:24
Running from C:\Users\mo\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc)
Autodesk CAD Manager Tools (HKLM\...\{5783F2D7-0111-0409-0110-0060B0CE6BBA}) (Version: 16.0.0.65 - Autodesk)
Autodesk Network License Manager (HKLM\...\{4BE91685-1632-47FC-B563-A8A542C6664C}) (Version: 11.11.0 - Autodesk)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.2 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Free YouTube to MP3 Converter version 3.12.41.623 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.41.623 - DVDVideoSoft Ltd.)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
InstallVC90Support (x32 Version: 1.01.0000 - Novatel Wireless) Hidden
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{BEE86606-EFB5-4353-9F34-29E0C59CDCFA}) (Version: 15.2.0.0284 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{181BBF43-CA17-4E1A-A78D-81E67A57B8A4}) (Version: 15.02.0000.1258 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.64.1 - JMicron Technology Corp.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Mathematics (64-bit) (HKLM\...\{E57B7E0A-8BE5-42E2-BE60-C07ED680A063}) (Version: 4.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Virtual PC 2007 (HKLM\...\{8A7CAA24-7B23-410B-A7C3-F994B0944160}) (Version: 6.0.156.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6449 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.27.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.27.0 - Renesas Electronics Corporation) Hidden
Secure Download Manager (HKLM-x32\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
==================== Restore Points =========================
17-07-2014 20:04:58 Installed Java 7 Update 65
18-07-2014 14:59:13 Windows Update
18-07-2014 18:16:45 Windows Update
19-07-2014 16:07:56 Secure Download Manager wird installiert
19-07-2014 16:12:29 Microsoft Virtual PC 2007 wird installiert
19-07-2014 16:22:38 Installed Microsoft Mathematics (64-bit)
19-07-2014 16:23:03 DirectX wurde installiert
19-07-2014 18:51:48 Windows Update
21-07-2014 16:06:25 Windows Update
21-07-2014 21:26:04 Installed Microsoft Office Professional Plus 2010
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {29B2ACBB-6F39-4BA1-9D3B-14B37E12A5EC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-17] (Google Inc.)
Task: {4797099D-CD9E-497B-8B15-6632C50C5818} - System32\Tasks\avast! Emergency Update => C:\Install\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-17] (AVAST Software)
Task: {4E2B7AE0-B247-4C44-9633-115BC8E0CA5E} - System32\Tasks\CCleanerSkipUAC => C:\Install\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {6B4D33EB-786D-47F0-B3FB-3915990F0BA8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-17] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-07-17 20:10 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-01-30 02:40 - 2010-01-30 02:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2014-07-17 19:42 - 2014-07-17 19:42 - 00301152 _____ () C:\Install\AVAST Software\Avast\aswProperty.dll
2014-07-21 16:13 - 2014-07-21 16:13 - 02793472 _____ () C:\Install\AVAST Software\Avast\defs\14072100\algo.dll
2014-07-21 22:38 - 2014-07-21 22:38 - 02793472 _____ () C:\Install\AVAST Software\Avast\defs\14072101\algo.dll
2014-07-17 19:42 - 2014-07-17 19:42 - 19329904 _____ () C:\Install\AVAST Software\Avast\libcef.dll
2014-07-21 19:50 - 2014-07-21 19:50 - 00043008 _____ () c:\users\mo\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3ex5yo.dll
2014-07-17 23:41 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\mo\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2010-01-30 02:41 - 2010-01-30 02:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-07-17 22:36 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/21/2014 11:27:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 07:43:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 04:13:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/19/2014 03:51:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/18/2014 04:55:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 11:12:17 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (07/17/2014 09:32:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 09:27:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 08:16:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 08:15:33 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
System errors:
=============
Error: (07/21/2014 09:54:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2862152)
Error: (07/21/2014 07:50:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Microsoft .NET Framework 3.5.1 unter Windows 7 und Windows Server 2008 R2 SP1 für x64-basierte Systeme (KB2736422)
Error: (07/21/2014 07:50:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-Systeme (KB2698365)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Microsoft .NET Framework 3.5.1 unter Windows 7 und Windows Server 2008 R2 für x64-basierte Systeme (KB2832414)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Update für Microsoft .NET Framework 3.5.1 unter Windows 7 und Windows Server 2008 R2 SP1 für x64-basierte Systeme (KB2836943)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2876284)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2619339)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2564958)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2511455)
Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2712808)
Microsoft Office Sessions:
=========================
Error: (07/21/2014 11:27:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 07:43:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 04:13:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/19/2014 03:51:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/18/2014 04:55:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 11:12:17 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
Error: (07/17/2014 09:32:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 09:27:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 08:16:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/17/2014 08:15:33 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
==================== Memory info ===========================
Percentage of memory in use: 34%
Total physical RAM: 6104.17 MB
Available physical RAM: 3975.55 MB
Total Pagefile: 12206.54 MB
Available Pagefile: 9755.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:119.14 GB) (Free:71.98 GB) NTFS
Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive e: () (Fixed) (Total:679 GB) (Free:660.11 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 38F04523)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Gmer-Log: leider kam eine Fehlermeldung, dass zu viele Zeichen verbraucht wurden, deswegen hänge ich das Logfile in den Anhang, werde es aber gerne auch nochmal Posten |
| Themen zu Win7: "wma:wimad" nach Neuinstallation gefunden |
| akamai, antivirus, browser, desktop, dvdvideosoft ltd., excel, fehler, festplatte, flash player, frage, google, helper, homepage, iexplore.exe, logfile, mozilla, mp3 datei, realtek, registry, rootkit, scan, software, svchost.exe, system, viren, virus, win7 64 bit, windows, wma |
Baum-Darstellung