Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Computer öffnet eigenwillig mehrmals Internetseite

Computer öffnet eigenwillig mehrmals Internetseite


Log-Analyse und Auswertung: Computer öffnet eigenwillig mehrmals Internetseite

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 01.08.2014, 10:54   #1
Brownie242
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Hallo zusammen!
Ich habe seit gestern einen neuen Laptop mit Windows 8.1 64bit. Anfangs hatte ich nur die kostenfreie Version von Avira Antivir drauf und habe mir zu Anfang natürlich allerlei Dinge runtergeladen. (Eigentlich aber nur von seriösen Quellen)
Habe mittlerweile die Antivir Pro Version, da ich auf die Schlüsseldatei noch warten musste.

Jetzt zu meinem eigentlichen Problem:
Nachts fing mein Laptop an die Internetseite 98uj8.de/s3brsn5ba66mgfzeinrum#noad fünf Minuten lang im Sekundentakt aufzurufen mit meinem Standardbrowser Chrome. Ich habe Chrome immer wieder geschlossen, aber es wurde immer wieder neugestartet, bis ich den Prozess im Taskmanager endlich beenden konnte.
Angefangen hat es nachdem ich Chrome normal geschlossen habe.
EDIT: Ich glaub nicht, dass es was zur Sache tut, aber Chrome habe ich heruntergeladen bevor ich Avira installiert habe, weil es das erste war, was ich gemacht habe.

Ansonsten habe ich keine Probleme, nur das beunruhigt mich schon, vor allem da der Laptop ja ganz neu ist. :P
Vielen Dank schon mal im Vorraus,
Brownie242

Ich habe einen Scan mit Malwarebytes Anti-Malware und Avira Antivir gemacht, allerdings haben diese nichts gefunden. Ich poste die Logs trotzdem einmal, da ich sonst nichts anderes habe.

Log Malwarebytes:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 01.08.2014
Scan Time: 01:41:05
Logfile: logfileMalware.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.31.09
Rootkit Database: v2014.07.17.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: ******

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 314037
Time Elapsed: 12 min, 54 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
Log Avira Antivir (Namen habe ich entfernt)

Code:
ATTFilter
Antivirus Pro
Erstellungsdatum der Reportdatei: Freitag, 1. August 2014  00:37


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : *********
Seriennummer   : 2223945646-PEPWE-0000001
Plattform      : Windows 8.1
Windowsversion : (plain)  [6.2.9200]
Boot Modus     : Normal gebootet
Benutzername   : SYSTEM
Computername   : ******-PC

Versionsinformationen:
BUILD.DAT      : 14.0.6.552     94332 Bytes  23.07.2014 13:29:00
AVSCAN.EXE     : 14.0.6.548   1046608 Bytes  23.07.2014 11:29:07
AVSCANRC.DLL   : 14.0.6.522     62544 Bytes  23.07.2014 11:29:07
LUKE.DLL       : 14.0.6.522     57936 Bytes  23.07.2014 11:29:12
AVSCPLR.DLL    : 14.0.6.548     92752 Bytes  23.07.2014 11:29:07
AVREG.DLL      : 14.0.6.522    262224 Bytes  23.07.2014 11:29:07
avlode.dll     : 14.0.6.526    603728 Bytes  23.07.2014 11:29:07
avlode.rdf     : 14.0.4.42      65114 Bytes  23.07.2014 11:29:07
XBV00008.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00009.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00010.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00011.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00012.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00013.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00014.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00015.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00016.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00017.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00018.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00019.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00020.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00021.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00022.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00023.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00024.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00025.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00026.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00027.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00028.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00029.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00030.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00031.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00032.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00033.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00034.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00035.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00036.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00037.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00038.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00039.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00040.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00041.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41
XBV00225.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00226.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00227.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00228.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00229.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00230.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00231.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00232.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00233.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00234.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00235.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00236.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00237.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00238.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00239.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00240.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00241.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00242.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00243.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00244.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00245.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00246.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00247.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00248.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00249.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00250.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00251.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00252.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00253.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00254.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00255.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41
XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 11:29:41
XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 11:29:41
XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 11:29:41
XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:29:41
XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 11:29:41
XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:29:41
XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 11:29:41
XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 11:29:41
XBV00042.VDF   : 8.11.153.142   710656 Bytes  06.06.2014 11:29:41
XBV00043.VDF   : 8.11.155.44  1013760 Bytes  16.06.2014 11:29:41
XBV00044.VDF   : 8.11.159.102  1662976 Bytes  08.07.2014 11:29:41
XBV00045.VDF   : 8.11.159.104    13824 Bytes  08.07.2014 11:29:41
XBV00046.VDF   : 8.11.159.108    13312 Bytes  08.07.2014 11:29:41
XBV00047.VDF   : 8.11.159.112    30720 Bytes  09.07.2014 11:29:41
XBV00048.VDF   : 8.11.159.114     6144 Bytes  09.07.2014 11:29:41
XBV00049.VDF   : 8.11.159.116    10240 Bytes  09.07.2014 11:29:41
XBV00050.VDF   : 8.11.159.118     5632 Bytes  09.07.2014 11:29:41
XBV00051.VDF   : 8.11.159.122     7168 Bytes  09.07.2014 11:29:41
XBV00052.VDF   : 8.11.159.126   180736 Bytes  09.07.2014 11:29:41
XBV00053.VDF   : 8.11.159.148   174080 Bytes  09.07.2014 11:29:41
XBV00054.VDF   : 8.11.159.168     2560 Bytes  09.07.2014 11:29:41
XBV00055.VDF   : 8.11.159.188    15360 Bytes  09.07.2014 11:29:41
XBV00056.VDF   : 8.11.159.210    25600 Bytes  09.07.2014 11:29:41
XBV00057.VDF   : 8.11.159.212     7168 Bytes  09.07.2014 11:29:41
XBV00058.VDF   : 8.11.159.218    27648 Bytes  10.07.2014 11:29:41
XBV00059.VDF   : 8.11.159.220     2048 Bytes  10.07.2014 11:29:41
XBV00060.VDF   : 8.11.159.222    29696 Bytes  10.07.2014 11:29:41
XBV00061.VDF   : 8.11.159.224   167936 Bytes  10.07.2014 11:29:41
XBV00062.VDF   : 8.11.159.226    35328 Bytes  10.07.2014 11:29:41
XBV00063.VDF   : 8.11.159.230   186368 Bytes  10.07.2014 11:29:41
XBV00064.VDF   : 8.11.159.250    16896 Bytes  10.07.2014 11:29:41
XBV00065.VDF   : 8.11.159.252     2048 Bytes  10.07.2014 11:29:41
XBV00066.VDF   : 8.11.160.16     6144 Bytes  10.07.2014 11:29:41
XBV00067.VDF   : 8.11.160.40    17408 Bytes  10.07.2014 11:29:41
XBV00068.VDF   : 8.11.160.42     2048 Bytes  11.07.2014 11:29:41
XBV00069.VDF   : 8.11.160.46   179200 Bytes  11.07.2014 11:29:41
XBV00070.VDF   : 8.11.160.48   203264 Bytes  11.07.2014 11:29:41
XBV00071.VDF   : 8.11.160.50     6144 Bytes  11.07.2014 11:29:41
XBV00072.VDF   : 8.11.160.52     2048 Bytes  11.07.2014 11:29:41
XBV00073.VDF   : 8.11.160.54     2048 Bytes  11.07.2014 11:29:41
XBV00074.VDF   : 8.11.160.58    22016 Bytes  11.07.2014 11:29:41
XBV00075.VDF   : 8.11.160.60     2048 Bytes  11.07.2014 11:29:41
XBV00076.VDF   : 8.11.160.62     8192 Bytes  11.07.2014 11:29:41
XBV00077.VDF   : 8.11.160.66   198656 Bytes  12.07.2014 11:29:41
XBV00078.VDF   : 8.11.160.68     7168 Bytes  12.07.2014 11:29:41
XBV00079.VDF   : 8.11.160.70    14848 Bytes  12.07.2014 11:29:41
XBV00080.VDF   : 8.11.160.72     7168 Bytes  12.07.2014 11:29:41
XBV00081.VDF   : 8.11.160.92    40448 Bytes  13.07.2014 11:29:41
XBV00082.VDF   : 8.11.160.112     2048 Bytes  13.07.2014 11:29:41
XBV00083.VDF   : 8.11.160.130   193024 Bytes  13.07.2014 11:29:41
XBV00084.VDF   : 8.11.160.132     2048 Bytes  13.07.2014 11:29:41
XBV00085.VDF   : 8.11.160.152    20480 Bytes  13.07.2014 11:29:41
XBV00086.VDF   : 8.11.160.154     2048 Bytes  13.07.2014 11:29:41
XBV00087.VDF   : 8.11.160.156    20992 Bytes  14.07.2014 11:29:41
XBV00088.VDF   : 8.11.160.158     2560 Bytes  14.07.2014 11:29:41
XBV00089.VDF   : 8.11.160.160    11264 Bytes  14.07.2014 11:29:41
XBV00090.VDF   : 8.11.160.162     2560 Bytes  14.07.2014 11:29:41
XBV00091.VDF   : 8.11.160.166    14336 Bytes  14.07.2014 11:29:41
XBV00092.VDF   : 8.11.160.168     5120 Bytes  14.07.2014 11:29:41
XBV00093.VDF   : 8.11.160.178     7168 Bytes  14.07.2014 11:29:41
XBV00094.VDF   : 8.11.160.180     2048 Bytes  14.07.2014 11:29:41
XBV00095.VDF   : 8.11.160.182     2048 Bytes  14.07.2014 11:29:41
XBV00096.VDF   : 8.11.160.188   256000 Bytes  14.07.2014 11:29:41
XBV00097.VDF   : 8.11.160.190     7680 Bytes  14.07.2014 11:29:41
XBV00098.VDF   : 8.11.160.194    18432 Bytes  15.07.2014 11:29:41
XBV00099.VDF   : 8.11.160.212   184832 Bytes  15.07.2014 11:29:41
XBV00100.VDF   : 8.11.160.230   289792 Bytes  15.07.2014 11:29:41
XBV00101.VDF   : 8.11.160.232     2048 Bytes  15.07.2014 11:29:41
XBV00102.VDF   : 8.11.160.234   176128 Bytes  15.07.2014 11:29:41
XBV00103.VDF   : 8.11.160.254    18432 Bytes  15.07.2014 11:29:41
XBV00104.VDF   : 8.11.161.16     6144 Bytes  16.07.2014 11:29:41
XBV00105.VDF   : 8.11.161.32     2048 Bytes  16.07.2014 11:29:41
XBV00106.VDF   : 8.11.161.34     2048 Bytes  16.07.2014 11:29:41
XBV00107.VDF   : 8.11.161.52    26624 Bytes  16.07.2014 11:29:41
XBV00108.VDF   : 8.11.161.68   184832 Bytes  16.07.2014 11:29:41
XBV00109.VDF   : 8.11.161.84     2048 Bytes  16.07.2014 11:29:41
XBV00110.VDF   : 8.11.162.2      2560 Bytes  16.07.2014 11:29:41
XBV00111.VDF   : 8.11.162.6     16896 Bytes  16.07.2014 11:29:41
XBV00112.VDF   : 8.11.162.8     24064 Bytes  16.07.2014 11:29:41
XBV00113.VDF   : 8.11.162.10     2560 Bytes  16.07.2014 11:29:41
XBV00114.VDF   : 8.11.162.14    41472 Bytes  17.07.2014 11:29:41
XBV00115.VDF   : 8.11.162.16     2048 Bytes  17.07.2014 11:29:41
XBV00116.VDF   : 8.11.162.18   215040 Bytes  17.07.2014 11:29:41
XBV00117.VDF   : 8.11.162.22   184320 Bytes  17.07.2014 11:29:41
XBV00118.VDF   : 8.11.162.40   258048 Bytes  17.07.2014 11:29:41
XBV00119.VDF   : 8.11.162.42     3584 Bytes  17.07.2014 11:29:41
XBV00120.VDF   : 8.11.162.58     3072 Bytes  17.07.2014 11:29:41
XBV00121.VDF   : 8.11.162.78     2048 Bytes  17.07.2014 11:29:41
XBV00122.VDF   : 8.11.162.94     2048 Bytes  17.07.2014 11:29:41
XBV00123.VDF   : 8.11.162.110    35840 Bytes  17.07.2014 11:29:41
XBV00124.VDF   : 8.11.162.112     2048 Bytes  18.07.2014 11:29:41
XBV00125.VDF   : 8.11.162.130    23040 Bytes  18.07.2014 11:29:41
XBV00126.VDF   : 8.11.162.134   184320 Bytes  18.07.2014 11:29:41
XBV00127.VDF   : 8.11.162.136     2048 Bytes  18.07.2014 11:29:41
XBV00128.VDF   : 8.11.162.152   231424 Bytes  18.07.2014 11:29:41
XBV00129.VDF   : 8.11.162.154     2048 Bytes  18.07.2014 11:29:41
XBV00130.VDF   : 8.11.162.170   108032 Bytes  18.07.2014 11:29:41
XBV00131.VDF   : 8.11.162.172     9728 Bytes  18.07.2014 11:29:41
XBV00132.VDF   : 8.11.162.174     2048 Bytes  18.07.2014 11:29:41
XBV00133.VDF   : 8.11.162.188    20992 Bytes  18.07.2014 11:29:41
XBV00134.VDF   : 8.11.162.192     2048 Bytes  18.07.2014 11:29:41
XBV00135.VDF   : 8.11.162.194     2048 Bytes  18.07.2014 11:29:41
XBV00136.VDF   : 8.11.162.200    19968 Bytes  18.07.2014 11:29:41
XBV00137.VDF   : 8.11.162.204     2048 Bytes  18.07.2014 11:29:41
XBV00138.VDF   : 8.11.162.212     2048 Bytes  18.07.2014 11:29:41
XBV00139.VDF   : 8.11.162.228   227840 Bytes  19.07.2014 11:29:41
XBV00140.VDF   : 8.11.162.244     2048 Bytes  19.07.2014 11:29:41
XBV00141.VDF   : 8.11.163.2     31232 Bytes  19.07.2014 11:29:41
XBV00142.VDF   : 8.11.163.16    62464 Bytes  20.07.2014 11:29:41
XBV00143.VDF   : 8.11.163.20   202752 Bytes  20.07.2014 11:29:41
XBV00144.VDF   : 8.11.163.22     2048 Bytes  20.07.2014 11:29:41
XBV00145.VDF   : 8.11.163.26    50176 Bytes  21.07.2014 11:29:41
XBV00146.VDF   : 8.11.163.28    23040 Bytes  21.07.2014 11:29:41
XBV00147.VDF   : 8.11.163.42     6144 Bytes  21.07.2014 11:29:41
XBV00148.VDF   : 8.11.163.44     2560 Bytes  21.07.2014 11:29:41
XBV00149.VDF   : 8.11.163.56     5120 Bytes  21.07.2014 11:29:41
XBV00150.VDF   : 8.11.163.68     8192 Bytes  21.07.2014 11:29:41
XBV00151.VDF   : 8.11.163.74   213504 Bytes  21.07.2014 11:29:41
XBV00152.VDF   : 8.11.163.78    22528 Bytes  22.07.2014 11:29:41
XBV00153.VDF   : 8.11.163.82     2560 Bytes  22.07.2014 11:29:41
XBV00154.VDF   : 8.11.163.84   181248 Bytes  22.07.2014 11:29:41
XBV00155.VDF   : 8.11.163.86     9728 Bytes  22.07.2014 11:29:41
XBV00156.VDF   : 8.11.163.92     2560 Bytes  22.07.2014 11:29:41
XBV00157.VDF   : 8.11.163.98   230400 Bytes  22.07.2014 11:29:41
XBV00158.VDF   : 8.11.163.100     2048 Bytes  22.07.2014 11:29:41
XBV00159.VDF   : 8.11.163.102     2048 Bytes  22.07.2014 11:29:41
XBV00160.VDF   : 8.11.163.108    22528 Bytes  22.07.2014 11:29:41
XBV00161.VDF   : 8.11.163.112    17920 Bytes  22.07.2014 11:29:41
XBV00162.VDF   : 8.11.163.116     2048 Bytes  23.07.2014 11:29:41
XBV00163.VDF   : 8.11.163.130   194048 Bytes  23.07.2014 11:29:41
XBV00164.VDF   : 8.11.163.142    20992 Bytes  23.07.2014 11:29:41
XBV00165.VDF   : 8.11.163.154    11776 Bytes  23.07.2014 19:13:17
XBV00166.VDF   : 8.11.163.158    17920 Bytes  23.07.2014 19:13:17
XBV00167.VDF   : 8.11.163.164     2048 Bytes  23.07.2014 19:13:17
XBV00168.VDF   : 8.11.163.170    14848 Bytes  23.07.2014 19:13:17
XBV00169.VDF   : 8.11.163.174   193024 Bytes  23.07.2014 19:13:18
XBV00170.VDF   : 8.11.163.176     3072 Bytes  23.07.2014 19:13:18
XBV00171.VDF   : 8.11.163.178     3072 Bytes  23.07.2014 19:13:18
XBV00172.VDF   : 8.11.163.184   199168 Bytes  24.07.2014 19:13:18
XBV00173.VDF   : 8.11.163.186   421376 Bytes  24.07.2014 19:13:18
XBV00174.VDF   : 8.11.163.198     2048 Bytes  24.07.2014 19:13:18
XBV00175.VDF   : 8.11.163.200     2048 Bytes  24.07.2014 19:13:19
XBV00176.VDF   : 8.11.163.212   212992 Bytes  24.07.2014 19:13:19
XBV00177.VDF   : 8.11.163.222    34816 Bytes  24.07.2014 19:13:19
XBV00178.VDF   : 8.11.163.226     2048 Bytes  24.07.2014 19:13:19
XBV00179.VDF   : 8.11.163.230    21504 Bytes  24.07.2014 19:13:19
XBV00180.VDF   : 8.11.163.234    18944 Bytes  25.07.2014 19:13:19
XBV00181.VDF   : 8.11.163.236     6656 Bytes  25.07.2014 19:13:19
XBV00182.VDF   : 8.11.163.238     2048 Bytes  25.07.2014 19:13:19
XBV00183.VDF   : 8.11.163.240   198144 Bytes  25.07.2014 19:13:19
XBV00184.VDF   : 8.11.163.244    38400 Bytes  25.07.2014 19:13:20
XBV00185.VDF   : 8.11.163.246     2048 Bytes  25.07.2014 19:13:20
XBV00186.VDF   : 8.11.163.248     6144 Bytes  25.07.2014 19:13:20
XBV00187.VDF   : 8.11.163.252    11776 Bytes  25.07.2014 19:13:20
XBV00188.VDF   : 8.11.163.254     2048 Bytes  25.07.2014 19:13:20
XBV00189.VDF   : 8.11.164.2      2048 Bytes  26.07.2014 19:13:20
XBV00190.VDF   : 8.11.164.6      5120 Bytes  26.07.2014 19:13:20
XBV00191.VDF   : 8.11.164.8      2048 Bytes  26.07.2014 19:13:20
XBV00192.VDF   : 8.11.164.20    32768 Bytes  26.07.2014 19:13:20
XBV00193.VDF   : 8.11.164.30     2048 Bytes  26.07.2014 19:13:20
XBV00194.VDF   : 8.11.164.42    37376 Bytes  27.07.2014 19:13:21
XBV00195.VDF   : 8.11.164.52     5632 Bytes  27.07.2014 19:13:21
XBV00196.VDF   : 8.11.164.54    40960 Bytes  28.07.2014 19:13:21
XBV00197.VDF   : 8.11.164.56     2048 Bytes  28.07.2014 19:13:21
XBV00198.VDF   : 8.11.164.58     4096 Bytes  28.07.2014 19:13:21
XBV00199.VDF   : 8.11.164.60     4608 Bytes  28.07.2014 19:13:21
XBV00200.VDF   : 8.11.164.62    17920 Bytes  28.07.2014 19:13:21
XBV00201.VDF   : 8.11.164.66     2048 Bytes  28.07.2014 19:13:21
XBV00202.VDF   : 8.11.164.74   206848 Bytes  28.07.2014 19:13:21
XBV00203.VDF   : 8.11.164.76   191488 Bytes  28.07.2014 19:13:22
XBV00204.VDF   : 8.11.164.78     2048 Bytes  28.07.2014 19:13:22
XBV00205.VDF   : 8.11.164.82     7168 Bytes  28.07.2014 19:13:22
XBV00206.VDF   : 8.11.164.86     9216 Bytes  29.07.2014 19:13:22
XBV00207.VDF   : 8.11.164.88   218112 Bytes  29.07.2014 19:13:22
XBV00208.VDF   : 8.11.164.98     7168 Bytes  29.07.2014 19:13:22
XBV00209.VDF   : 8.11.164.106     2048 Bytes  29.07.2014 19:13:22
XBV00210.VDF   : 8.11.164.116    90112 Bytes  29.07.2014 19:13:22
XBV00211.VDF   : 8.11.164.128   197120 Bytes  29.07.2014 19:13:22
XBV00212.VDF   : 8.11.164.138     5632 Bytes  29.07.2014 19:13:23
XBV00213.VDF   : 8.11.164.142     9728 Bytes  30.07.2014 19:13:23
XBV00214.VDF   : 8.11.164.144   199680 Bytes  30.07.2014 19:13:23
XBV00215.VDF   : 8.11.164.146   206848 Bytes  30.07.2014 19:13:23
XBV00216.VDF   : 8.11.164.148     4096 Bytes  30.07.2014 19:13:23
XBV00217.VDF   : 8.11.164.150    39936 Bytes  30.07.2014 19:13:23
XBV00218.VDF   : 8.11.164.156   220160 Bytes  30.07.2014 19:13:24
XBV00219.VDF   : 8.11.164.164    16896 Bytes  31.07.2014 19:13:24
XBV00220.VDF   : 8.11.164.172     6144 Bytes  31.07.2014 19:13:24
XBV00221.VDF   : 8.11.164.188   218624 Bytes  31.07.2014 19:13:24
XBV00222.VDF   : 8.11.164.196     2048 Bytes  31.07.2014 19:13:24
XBV00223.VDF   : 8.11.164.206    27136 Bytes  31.07.2014 19:13:24
XBV00224.VDF   : 8.11.164.214    11264 Bytes  31.07.2014 21:34:17
LOCAL000.VDF   : 8.11.164.214 109327360 Bytes  31.07.2014 21:34:39
Engineversion  : 8.3.22.14 
AEVDF.DLL      : 8.3.0.4       118976 Bytes  23.07.2014 11:29:06
AESCRIPT.DLL   : 8.2.0.12      426184 Bytes  23.07.2014 11:29:06
AESCN.DLL      : 8.3.2.2       139456 Bytes  23.07.2014 11:29:06
AESBX.DLL      : 8.2.20.24    1409224 Bytes  23.07.2014 11:29:06
AERDL.DLL      : 8.2.0.138     704888 Bytes  23.07.2014 11:29:06
AEPACK.DLL     : 8.4.0.46      786632 Bytes  31.07.2014 19:13:17
AEOFFICE.DLL   : 8.3.0.16      213192 Bytes  31.07.2014 19:13:17
AEHEUR.DLL     : 8.1.4.1188   7332040 Bytes  31.07.2014 19:13:16
AEHELP.DLL     : 8.3.1.0       278728 Bytes  23.07.2014 11:29:06
AEGEN.DLL      : 8.1.7.28      450752 Bytes  23.07.2014 11:29:06
AEEXP.DLL      : 8.4.2.6       237760 Bytes  23.07.2014 11:29:06
AEEMU.DLL      : 8.1.3.2       393587 Bytes  23.07.2014 11:29:06
AEDROID.DLL    : 8.4.2.24      442568 Bytes  23.07.2014 11:29:06
AECORE.DLL     : 8.3.2.2       241864 Bytes  23.07.2014 11:29:06
AEBB.DLL       : 8.1.1.4        53619 Bytes  23.07.2014 11:29:06
AVWINLL.DLL    : 14.0.6.522     24144 Bytes  23.07.2014 11:29:08
AVPREF.DLL     : 14.0.6.522     50256 Bytes  23.07.2014 11:29:07
AVREP.DLL      : 14.0.6.522    219216 Bytes  23.07.2014 11:29:07
AVARKT.DLL     : 14.0.5.368    226384 Bytes  23.07.2014 11:29:06
AVEVTLOG.DLL   : 14.0.6.522    182352 Bytes  23.07.2014 11:29:07
SQLITE3.DLL    : 14.0.6.522    452176 Bytes  23.07.2014 11:29:32
AVSMTP.DLL     : 14.0.6.522     76368 Bytes  23.07.2014 11:29:07
NETNT.DLL      : 14.0.6.522     13392 Bytes  23.07.2014 11:29:12
RCIMAGE.DLL    : 14.0.6.544   4886096 Bytes  23.07.2014 11:29:13
RCTEXT.DLL     : 14.0.6.536     73808 Bytes  23.07.2014 11:29:14

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, 
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Freitag, 1. August 2014  00:37

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.
Fehler in der ARK Library

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '202' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '106' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'adminservice.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'HeciServer.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMSvc.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemonu.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'dashost.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'GamesAppIntegrationService.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'jhi_service.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'McAPExe.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'mcawfwk.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerSvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '107' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '121' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'avmailc7.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'avwebg7.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'dwm.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '14' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhostex.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '255' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMEvent.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'unsecapp.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMTray.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'TabTip.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'TabTip32.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'BtvStack.exe' - '101' Modul(e) wurden durchsucht
Durchsuche Prozess 'ActivateDesktop.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxtray.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxsrvc.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'hkcmd.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxpers.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'ddp.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'Apoint.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'ApMsgFwd.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'HidFind.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'Apntex.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVCpl64.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVBg64.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyWebHelper.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'Skype.exe' - '153' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '117' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerTray.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxext.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'unsecapp.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerEvent.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'pokki.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'WWAHost.exe' - '109' Modul(e) wurden durchsucht
Durchsuche Prozess 'RuntimeBroker.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'WSHost.exe' - '94' Modul(e) wurden durchsucht
Durchsuche Prozess 'mfevtps.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'mfefire.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'wwahost.exe' - '197' Modul(e) wurden durchsucht
Durchsuche Prozess 'Camera.exe' - '134' Modul(e) wurden durchsucht
Durchsuche Prozess 'PhotosApp.exe' - '119' Modul(e) wurden durchsucht
Durchsuche Prozess 'Spotify.exe' - '126' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyHelper.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'steam.exe' - '142' Modul(e) wurden durchsucht
Durchsuche Prozess 'SteamService.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'McSvHost.exe' - '116' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'mcuihost.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'qcshm.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'mcupdate.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'mcinst.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '107' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'TrustedInstaller.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'TiWorker.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '71' Modul(e) wurden durchsucht
Durchsuche Prozess 'WinLogon.exe' - '29' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1254' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Acer>
C:\swapfile.sys
  [WARNUNG]   Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Steam\SteamApps\downloading\255320\jre-7-windows-i586.exe
  [WARNUNG]   Die Datei konnte nicht geöffnet werden!


Ende des Suchlaufs: Freitag, 1. August 2014  01:35
Benötigte Zeit: 57:46 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

  27299 Verzeichnisse wurden überprüft
 500596 Dateien wurden geprüft
      0 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      2 Dateien konnten nicht durchsucht werden
 500594 Dateien ohne Befall
   3387 Archive wurden durchsucht
      2 Warnungen
      0 Hinweise
    118 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden

Alt 01.08.2014, 11:02   #2
M-K-D-B
/// TB-Ausbilder
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite





Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
    Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!


Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!





Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Alt 01.08.2014, 11:13   #3
Brownie242
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


FRST.txt

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Malin (administrator) on Malin-PC on 01-08-2014 12:08:24
Running from C:\Users\Malin\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAAE8A.tmp
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Pokki) C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\Camera\Camera.exe
(Microsoft Corporation) C:\Windows\FileManager\PhotosApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.4872\Battle.net.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-09-30] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM - DefaultScope {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - DefaultScope {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 
SearchScopes: HKCU - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]
CHR Extension: (Google Drive) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]
CHR Extension: (YouTube) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]
CHR Extension: (Google-Suche) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]
CHR Extension: (AdBlock) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-01]
CHR Extension: (Google Wallet) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
CHR Extension: (Google Mail) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 0207601406813689mcinstcleanup; C:\Windows\TEMP\020760~1.EXE [836168 2014-03-13] (McAfee, Inc.)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [42040 2014-07-23] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
U3 mfehidk01; No ImagePath
U3 mfencbdc01; No ImagePath
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:08 - 2014-08-01 12:09 - 00019811 _____ () C:\Users\Malin\Desktop\FRST.txt
2014-08-01 12:08 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST
2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe
2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001274 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-08-01 10:15 - 2014-08-01 10:21 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 10:13 - 2014-08-01 12:08 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net
2014-08-01 10:13 - 2014-08-01 10:51 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net
2014-08-01 10:13 - 2014-08-01 10:13 - 00001138 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-01 10:12 - 2014-08-01 10:13 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe
2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG
2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt
2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-01 01:14 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-01 01:14 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment
2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log
2014-07-31 23:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-07-31 23:37 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-07-31 23:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-07-31 23:37 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-07-31 23:37 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-07-31 23:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-07-31 23:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-07-31 23:37 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-07-31 23:37 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-07-31 23:37 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-07-31 23:37 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-07-31 23:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-07-31 23:37 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-07-31 23:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-07-31 23:37 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-07-31 23:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-07-31 23:37 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-07-31 23:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-07-31 23:37 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-07-31 23:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-07-31 23:37 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-07-31 23:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-07-31 23:37 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-07-31 23:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-07-31 23:37 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-07-31 23:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-07-31 23:37 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-07-31 23:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-07-31 23:37 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-07-31 23:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-07-31 23:37 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-07-31 23:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-07-31 23:37 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-07-31 23:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-07-31 23:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-07-31 23:37 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-07-31 23:37 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-07-31 23:37 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-07-31 23:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-07-31 23:37 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-07-31 23:37 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-07-31 23:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-07-31 23:37 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-07-31 23:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-07-31 23:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-07-31 23:37 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-07-31 23:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-07-31 23:37 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-07-31 23:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-07-31 23:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-07-31 23:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-07-31 23:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-07-31 23:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-07-31 23:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-07-31 23:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-07-31 23:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-07-31 23:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-07-31 23:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-07-31 23:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA
2014-07-31 22:07 - 2014-08-01 00:52 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-31 21:24 - 2014-07-31 21:25 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-31 21:06 - 2014-07-31 21:07 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe
2014-07-31 20:19 - 2014-07-31 21:40 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe
2014-07-31 19:58 - 2014-06-22 19:24 - 00018944 _____ () C:\Users\Malin\Desktop\Picture Picker.exe
2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip
2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d
2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 19:03 - 2013-11-05 23:18 - 00024972 _____ () C:\Users\Malin\Desktop\Picture Sorter 0.9.zip
2014-07-31 18:47 - 2014-07-31 18:50 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)
2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-31 17:34 - 2014-08-01 01:00 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe
2014-07-31 17:23 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft
2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe
2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe
2014-07-31 16:48 - 2014-08-01 11:49 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype
2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype
2014-07-31 16:47 - 2014-07-31 16:48 - 00000000 ____D () C:\ProgramData\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe
2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll
2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial
2014-07-31 16:39 - 2014-07-31 18:22 - 00000000 ___RD () C:\Users\Malin\SkyDrive
2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira
2014-07-31 16:00 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-31 15:58 - 2014-07-31 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\ProgramData\Avira
2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe
2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-31 15:53 - 2014-08-01 01:00 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify
2014-07-31 15:53 - 2014-07-31 16:10 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify
2014-07-31 15:41 - 2014-08-01 11:46 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 15:41 - 2014-07-31 21:33 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 15:41 - 2014-07-31 21:33 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-31 15:40 - 2014-08-01 01:35 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002
2014-07-31 15:40 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment
2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0
2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia
2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki
2014-07-31 15:36 - 2014-07-31 21:37 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi
2014-07-31 15:36 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old
2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream
2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-07-31 15:34 - 2014-08-01 10:01 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki
2014-07-31 15:34 - 2014-07-31 20:17 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages
2014-07-31 15:34 - 2014-07-31 16:39 - 00000000 ____D () C:\Users\Malin
2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:09 - 2014-08-01 12:08 - 00019811 _____ () C:\Users\Malin\Desktop\FRST.txt
2014-08-01 12:08 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST
2014-08-01 12:08 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net
2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe
2014-08-01 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-01 11:49 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype
2014-08-01 11:46 - 2014-07-31 15:41 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-01 11:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-01 11:17 - 2014-05-08 11:55 - 00980775 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 10:51 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net
2014-08-01 10:21 - 2014-08-01 10:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001274 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-08-01 10:13 - 2014-08-01 10:13 - 00001138 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-01 10:13 - 2014-08-01 10:12 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe
2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-01 10:01 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki
2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG
2014-08-01 01:35 - 2014-07-31 15:40 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002
2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt
2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-01 01:00 - 2014-07-31 17:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-01 01:00 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify
2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment
2014-08-01 00:52 - 2014-07-31 22:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-08-01 00:39 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files\mcafee
2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log
2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA
2014-07-31 22:20 - 2014-07-31 17:23 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft
2014-07-31 22:13 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-07-31 22:11 - 2013-11-05 07:12 - 00000000 ____D () C:\ProgramData\McAfee
2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-31 21:40 - 2014-07-31 20:19 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug
2014-07-31 21:37 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi
2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Acer
2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-07-31 21:36 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-07-31 21:33 - 2014-07-31 15:41 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 21:33 - 2014-07-31 15:41 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 21:25 - 2014-07-31 21:24 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele
2014-07-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-31 21:20 - 2013-11-05 06:53 - 00001340 _____ () C:\Windows\PFRO.log
2014-07-31 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-31 21:20 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-31 21:20 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-07-31 21:11 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-31 21:11 - 2014-05-08 21:42 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-31 21:11 - 2014-05-08 21:42 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-31 21:11 - 2013-11-05 06:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-31 21:07 - 2014-07-31 21:06 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe
2014-07-31 20:17 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages
2014-07-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip
2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d
2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 18:50 - 2014-07-31 18:47 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)
2014-07-31 18:46 - 2013-08-22 16:46 - 00019181 _____ () C:\Windows\setupact.log
2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-31 18:22 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive
2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-31 17:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe
2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe
2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype
2014-07-31 16:48 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe
2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll
2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial
2014-07-31 16:39 - 2014-07-31 15:36 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old
2014-07-31 16:39 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin
2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-07-31 16:10 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify
2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira
2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Avira
2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe
2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-31 15:41 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment
2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0
2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia
2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki
2014-07-31 15:37 - 2014-05-08 12:51 - 00003546 _____ () C:\Windows\System32\Tasks\Norton Online Backup ARA
2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream
2014-07-31 15:36 - 2014-05-08 12:51 - 00000000 ____D () C:\ProgramData\Norton
2014-07-31 15:36 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-07-31 15:35 - 2013-11-05 06:49 - 00000000 ___HD () C:\OEM
2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store
2014-07-31 15:34 - 2013-11-05 06:53 - 00000000 ____D () C:\Windows\Panther
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-07-23 13:29 - 2014-07-31 16:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

Some content of TEMP:
====================
C:\Users\Malin\AppData\Local\Temp\AcerPortalSetup.exe
C:\Users\Malin\AppData\Local\Temp\avgnt.exe
C:\Users\Malin\AppData\Local\Temp\oct3404.tmp.exe
C:\Users\Malin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Malin\AppData\Local\Temp\sfextra.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-11-05 06:53

==================== End Of Log ============================
--- --- ---


Addition.txt
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02
Ran by Malin at 2014-08-01 12:09:36
Running from C:\Users\Malin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3104.6 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.103.2020.206 - Alps Electric)
Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)
Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Edna & Harvey: The Breakout (HKLM-x32\...\Steam App 255320) (Version:  - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA Optimus 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

31-07-2014 15:20:57 Installed Java 7 Update 65

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026823A1-1A66-4BE5-955E-591BCE739E02} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {26E42D64-F67B-4B9B-B6E7-C6DD2E26CD16} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3672130C-D4B8-4C98-B810-F5632E396E69} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {37487533-7D77-4987-A748-5BBB617CF9DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {52153B8A-1B81-4084-BDC5-2129EB67E7BE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B7C588E8-B875-465D-B829-6436E8B39508} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {BB2C5934-822D-41DC-9B53-81F9A214D4A0} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {C3086504-AF6D-4B66-9A1E-3754A357FF34} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FFDAB2EC-6995-4836-BF94-26607656D9A1} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-08 12:13 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-05-08 12:54 - 2013-07-30 18:11 - 00110152 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-07-08 18:53 - 2013-07-08 18:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll
2013-08-22 09:19 - 2013-08-22 08:54 - 00054784 _____ () C:\Windows\system32\WinMetadata\Windows.Globalization.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00030208 _____ () C:\Windows\system32\WinMetadata\Windows.Foundation.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00020480 _____ () C:\Windows\system32\WinMetadata\Windows.System.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00174592 _____ () C:\Windows\system32\WinMetadata\Windows.UI.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00096256 _____ () C:\Windows\system32\WinMetadata\Windows.Storage.winmd
2014-05-08 11:57 - 2014-05-08 11:57 - 00012728 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\Microsoft.PerfTrack.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00134144 _____ () C:\Windows\system32\WinMetadata\Windows.ApplicationModel.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00112640 _____ () C:\Windows\system32\WinMetadata\Windows.Networking.winmd
2014-05-08 11:57 - 2014-05-08 11:57 - 00016312 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\SqliteWrapper.winmd
2014-05-08 11:57 - 2014-05-08 11:57 - 00485816 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\SqliteWrapper.dll
2014-05-08 11:57 - 2014-05-08 11:57 - 00660920 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\Sqlite3.dll
2013-08-22 09:19 - 2013-08-22 08:54 - 00049664 _____ () C:\Windows\system32\WinMetadata\Windows.Graphics.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00093696 _____ () C:\Windows\system32\WinMetadata\Windows.Web.winmd
2013-08-22 09:19 - 2013-08-22 08:54 - 00066560 _____ () C:\Windows\system32\WinMetadata\Windows.Security.winmd
2014-05-08 11:57 - 2014-05-08 11:57 - 00246168 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\Microsoft.WindowsAzure.Messaging.Managed.DLL
2013-08-22 09:19 - 2013-08-22 08:54 - 00169472 _____ () C:\Windows\system32\WinMetadata\Windows.Devices.winmd
2014-05-08 12:10 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-07-31 16:01 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Malin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-05-08 12:54 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-08-01 10:12 - 2014-08-01 10:13 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4872\libcef.dll
2014-08-01 10:12 - 2014-08-01 10:13 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4872\libglesv2.dll
2014-08-01 10:12 - 2014-08-01 10:13 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4872\libegl.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Malin\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Malin\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/31/2014 11:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: McSvHost.exe, Version: 3.8.703.0, Zeitstempel: 0x51f7deae
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16408, Zeitstempel: 0x523d5305
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004bb96
ID des fehlerhaften Prozesses: 0x308c
Startzeit der fehlerhaften Anwendung: 0xMcSvHost.exe0
Pfad der fehlerhaften Anwendung: McSvHost.exe1
Pfad des fehlerhaften Moduls: McSvHost.exe2
Berichtskennung: McSvHost.exe3
Vollständiger Name des fehlerhaften Pakets: McSvHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: McSvHost.exe5

Error: (07/31/2014 10:09:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm speedfan.exe, Version 4.49.0.403 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 17c4

Startzeit: 01cfacfb38fb15a0

Endzeit: 18

Anwendungspfad: C:\Program Files (x86)\SpeedFan\speedfan.exe

Berichts-ID: 955a58d6-18ee-11e4-8258-c45444599c7c

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (07/31/2014 04:41:58 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e28

Startzeit: 01cfacccb835ed1d

Endzeit: 15

Anwendungspfad: C:\Windows\syswow64\wwahost.exe

Berichts-ID: d016b74f-18c0-11e4-8258-c45444599c7c

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_3.0.0.1002_x86__kzf8qxf38zg5c

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (07/31/2014 04:39:40 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Malin-PC)
Description: windows_ie_ac_0013

Error: (07/31/2014 04:28:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Malin-PC)
Description: Die App „Microsoft.SkypeApp_2.0.0.5012_x86__kzf8qxf38zg5c+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (07/31/2014 09:23:42 PM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: )
Description: Die indizierten Daten von Windows Search für den Benutzer '<Event xmlns='hxxp://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2014-07-31T19:23:42.000000000Z'/><EventRecordID>702</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>Malin-PC</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4D0061006C0069006E002D00500043005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event>' können im Zuge der Löschung des Benutzerprofils nicht entfernt werden. Fehlercode %2.

%3.


System errors:
=============
Error: (08/01/2014 02:03:13 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (08/01/2014 02:02:43 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (08/01/2014 00:38:19 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)
Description: {209500FC-6B45-4693-8871-6296C4843751}

Error: (08/01/2014 00:37:49 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)
Description: {209500FC-6B45-4693-8871-6296C4843751}

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Anti-Spam Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Proxy Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Platform Services" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee VirusScan Announcer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Personal Firewall Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "McAfee SiteAdvisor Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (07/31/2014 11:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: McSvHost.exe3.8.703.051f7deaentdll.dll6.3.9600.16408523d5305c0000005000000000004bb96308c01cfacfbf48448a9C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exeC:\Windows\SYSTEM32\ntdll.dll2c2377f6-18fb-11e4-8258-c45444599c7c

Error: (07/31/2014 10:09:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: speedfan.exe4.49.0.40317c401cfacfb38fb15a018C:\Program Files (x86)\SpeedFan\speedfan.exe955a58d6-18ee-11e4-8258-c45444599c7c

Error: (07/31/2014 04:41:58 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.16384e2801cfacccb835ed1d15C:\Windows\syswow64\wwahost.exed016b74f-18c0-11e4-8258-c45444599c7cMicrosoft.SkypeApp_3.0.0.1002_x86__kzf8qxf38zg5cApp

Error: (07/31/2014 04:39:40 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Malin-PC)
Description: windows_ie_ac_0013

Error: (07/31/2014 04:28:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Malin-PC)
Description: Microsoft.SkypeApp_2.0.0.5012_x86__kzf8qxf38zg5c+App

Error: (07/31/2014 09:23:42 PM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: )
Description: <Event xmlns='hxxp://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2014-07-31T19:23:42.000000000Z'/><EventRecordID>702</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>Malin-PC</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4D0061006C0069006E002D00500043005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event>


==================== Memory info =========================== 

Percentage of memory in use: 60%
Total physical RAM: 8072.27 MB
Available physical RAM: 3206.22 MB
Total Pagefile: 9992.27 MB
Available Pagefile: 4099.3 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:447.95 GB) (Free:361.82 GB) NTFS
Drive d: (Transcend) (Removable) (Total:29.89 GB) (Free:29.89 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: FF407FDD)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
__________________
Alt 01.08.2014, 11:19   #4
M-K-D-B
/// TB-Ausbilder
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 3
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.
Alt 01.08.2014, 11:41   #5
Brownie242
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


AdwCleaner:
Code:
ATTFilter
# AdwCleaner v3.302 - Bericht erstellt am 01/08/2014 um 12:25:00
# Aktualisiert 30/07/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Malin - Malin-PC
# Gestartet von : C:\Users\Malin\Desktop\adwcleaner_3.302.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1282 octets] - [01/08/2014 12:24:11]
AdwCleaner[S0].txt - [1077 octets] - [01/08/2014 12:25:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1137 octets] ##########
JRT
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Malin on 01.08.2014 at 12:31:29,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

    Value Name          Type                             Value Data                     
========================================================================================
    Pokki    REG_EXPAND_SZ    C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform




~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.08.2014 at 12:35:33,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Log

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Malin (administrator) on MALIN-PC on 01-08-2014 12:38:00
Running from C:\Users\Malin\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Pokki) C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe
(Thisisu) C:\Users\Malin\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-09-30] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]
CHR Extension: (Google Drive) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]
CHR Extension: (YouTube) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]
CHR Extension: (Google-Suche) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]
CHR Extension: (AdBlock) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-01]
CHR Extension: (Google Wallet) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
CHR Extension: (Google Mail) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [X]
S2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [42040 2014-07-23] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt
2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT
2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe
2014-08-01 12:24 - 2014-08-01 12:25 - 00000000 ____D () C:\AdwCleaner
2014-08-01 12:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe
2014-08-01 12:09 - 2014-08-01 12:10 - 00030268 _____ () C:\Users\Malin\Desktop\Addition.txt
2014-08-01 12:08 - 2014-08-01 12:38 - 00016173 _____ () C:\Users\Malin\Desktop\FRST.txt
2014-08-01 12:08 - 2014-08-01 12:38 - 00000000 ____D () C:\FRST
2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe
2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-08-01 10:15 - 2014-08-01 12:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 10:13 - 2014-08-01 12:15 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net
2014-08-01 10:13 - 2014-08-01 10:51 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-01 10:12 - 2014-08-01 10:13 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe
2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG
2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt
2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-01 01:14 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-01 01:14 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment
2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log
2014-07-31 23:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-07-31 23:37 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-07-31 23:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-07-31 23:37 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-07-31 23:37 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-07-31 23:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-07-31 23:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-07-31 23:37 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-07-31 23:37 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-07-31 23:37 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-07-31 23:37 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-07-31 23:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-07-31 23:37 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-07-31 23:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-07-31 23:37 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-07-31 23:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-07-31 23:37 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-07-31 23:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-07-31 23:37 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-07-31 23:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-07-31 23:37 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-07-31 23:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-07-31 23:37 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-07-31 23:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-07-31 23:37 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-07-31 23:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-07-31 23:37 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-07-31 23:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-07-31 23:37 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-07-31 23:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-07-31 23:37 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-07-31 23:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-07-31 23:37 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-07-31 23:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-07-31 23:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-07-31 23:37 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-07-31 23:37 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-07-31 23:37 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-07-31 23:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-07-31 23:37 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-07-31 23:37 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-07-31 23:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-07-31 23:37 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-07-31 23:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-07-31 23:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-07-31 23:37 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-07-31 23:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-07-31 23:37 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-07-31 23:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-07-31 23:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-07-31 23:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-07-31 23:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-07-31 23:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-07-31 23:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-07-31 23:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-07-31 23:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-07-31 23:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-07-31 23:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-07-31 23:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA
2014-07-31 22:07 - 2014-08-01 00:52 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-31 21:24 - 2014-08-01 12:33 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-31 21:06 - 2014-07-31 21:07 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe
2014-07-31 20:19 - 2014-07-31 21:40 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe
2014-07-31 19:58 - 2014-06-22 19:24 - 00018944 _____ () C:\Users\Malin\Desktop\Picture Picker.exe
2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip
2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d
2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 19:03 - 2013-11-05 23:18 - 00024972 _____ () C:\Users\Malin\Desktop\Picture Sorter 0.9.zip
2014-07-31 18:47 - 2014-07-31 18:50 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)
2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-31 17:34 - 2014-08-01 01:00 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe
2014-07-31 17:23 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft
2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe
2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe
2014-07-31 16:48 - 2014-08-01 12:29 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype
2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype
2014-07-31 16:47 - 2014-07-31 16:48 - 00000000 ____D () C:\ProgramData\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe
2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll
2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial
2014-07-31 16:39 - 2014-07-31 18:22 - 00000000 ___RD () C:\Users\Malin\SkyDrive
2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira
2014-07-31 16:00 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-31 15:58 - 2014-07-31 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\ProgramData\Avira
2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe
2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-31 15:53 - 2014-08-01 01:00 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify
2014-07-31 15:53 - 2014-07-31 16:10 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify
2014-07-31 15:41 - 2014-08-01 12:29 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 15:41 - 2014-08-01 12:28 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 15:41 - 2014-08-01 11:46 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-31 15:40 - 2014-08-01 12:38 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002
2014-07-31 15:40 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment
2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0
2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia
2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki
2014-07-31 15:36 - 2014-07-31 21:37 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi
2014-07-31 15:36 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old
2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream
2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-07-31 15:34 - 2014-08-01 10:01 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki
2014-07-31 15:34 - 2014-07-31 20:17 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages
2014-07-31 15:34 - 2014-07-31 16:39 - 00000000 ____D () C:\Users\Malin
2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:38 - 2014-08-01 12:08 - 00016173 _____ () C:\Users\Malin\Desktop\FRST.txt
2014-08-01 12:38 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST
2014-08-01 12:38 - 2014-07-31 15:40 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002
2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt
2014-08-01 12:34 - 2014-05-08 11:55 - 00985522 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 12:33 - 2014-07-31 21:24 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele
2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT
2014-08-01 12:31 - 2014-05-08 21:42 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-08-01 12:31 - 2014-05-08 21:42 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-08-01 12:31 - 2013-11-05 06:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe
2014-08-01 12:29 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype
2014-08-01 12:29 - 2014-07-31 15:41 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-01 12:28 - 2014-07-31 15:41 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\ProgramData\McAfee
2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-08-01 12:26 - 2013-11-05 06:53 - 00292590 _____ () C:\Windows\PFRO.log
2014-08-01 12:26 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-01 12:25 - 2014-08-01 12:24 - 00000000 ____D () C:\AdwCleaner
2014-08-01 12:25 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe
2014-08-01 12:15 - 2014-08-01 10:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 12:15 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net
2014-08-01 12:10 - 2014-08-01 12:09 - 00030268 _____ () C:\Users\Malin\Desktop\Addition.txt
2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe
2014-08-01 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-01 11:46 - 2014-07-31 15:41 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-01 11:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-01 10:51 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net
2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-01 10:13 - 2014-08-01 10:12 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe
2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-01 10:01 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki
2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG
2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt
2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-01 01:00 - 2014-07-31 17:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-01 01:00 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify
2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment
2014-08-01 00:52 - 2014-07-31 22:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log
2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA
2014-07-31 22:20 - 2014-07-31 17:23 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft
2014-07-31 22:13 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-31 21:40 - 2014-07-31 20:19 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug
2014-07-31 21:37 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi
2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Acer
2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-07-31 21:36 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-07-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-31 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-31 21:20 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-07-31 21:11 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-31 21:07 - 2014-07-31 21:06 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe
2014-07-31 20:17 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages
2014-07-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip
2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d
2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 18:50 - 2014-07-31 18:47 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)
2014-07-31 18:46 - 2013-08-22 16:46 - 00019181 _____ () C:\Windows\setupact.log
2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-31 18:22 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive
2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-31 17:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe
2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe
2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype
2014-07-31 16:48 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe
2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll
2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial
2014-07-31 16:39 - 2014-07-31 15:36 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old
2014-07-31 16:39 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin
2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-07-31 16:10 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify
2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira
2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Avira
2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe
2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-31 15:41 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment
2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0
2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia
2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki
2014-07-31 15:37 - 2014-05-08 12:51 - 00003546 _____ () C:\Windows\System32\Tasks\Norton Online Backup ARA
2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream
2014-07-31 15:36 - 2014-05-08 12:51 - 00000000 ____D () C:\ProgramData\Norton
2014-07-31 15:36 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-07-31 15:35 - 2013-11-05 06:49 - 00000000 ___HD () C:\OEM
2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store
2014-07-31 15:34 - 2013-11-05 06:53 - 00000000 ____D () C:\Windows\Panther
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-07-23 13:29 - 2014-07-31 16:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

Some content of TEMP:
====================
C:\Users\Malin\AppData\Local\Temp\AcerPortalSetup.exe
C:\Users\Malin\AppData\Local\Temp\avgnt.exe
C:\Users\Malin\AppData\Local\Temp\oct3404.tmp.exe
C:\Users\Malin\AppData\Local\Temp\Quarantine.exe
C:\Users\Malin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Malin\AppData\Local\Temp\sfextra.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-11-05 06:53

==================== End Of Log ============================
--- --- ---


Addition Log
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02
Ran by Malin at 2014-08-01 12:38:47
Running from C:\Users\Malin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3104.6 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.103.2020.206 - Alps Electric)
Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)
Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Edna & Harvey: The Breakout (HKLM-x32\...\Steam App 255320) (Version:  - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA Optimus 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

31-07-2014 15:20:57 Installed Java 7 Update 65

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026823A1-1A66-4BE5-955E-591BCE739E02} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {26E42D64-F67B-4B9B-B6E7-C6DD2E26CD16} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3672130C-D4B8-4C98-B810-F5632E396E69} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {37487533-7D77-4987-A748-5BBB617CF9DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {52153B8A-1B81-4084-BDC5-2129EB67E7BE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B7C588E8-B875-465D-B829-6436E8B39508} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {BB2C5934-822D-41DC-9B53-81F9A214D4A0} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {C3086504-AF6D-4B66-9A1E-3754A357FF34} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FFDAB2EC-6995-4836-BF94-26607656D9A1} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-08 12:13 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-07-08 18:53 - 2013-07-08 18:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll
2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-07-31 16:01 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Malin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-05-08 12:10 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-05-08 12:54 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-31 15:41 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Malin\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Malin\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 8072.27 MB
Available physical RAM: 6012.39 MB
Total Pagefile: 9992.27 MB
Available Pagefile: 7723.4 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:447.95 GB) (Free:347.73 GB) NTFS
Drive d: (Transcend) (Removable) (Total:29.89 GB) (Free:29.89 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: FF407FDD)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================


Alt 01.08.2014, 11:46   #6
M-K-D-B
/// TB-Ausbilder
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Servus,



führe bitte die folgenden Schritte durch und sag mir anschließend, ob sich immer noch Seiten öffnen.





Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
C:\Users\Public\Pokki
C:\Users\Public\AppData\Local\Pokki
C:\Users\Malin\AppData\Local\Pokki
C:\Users\Malin\AppData\Local\Packages
SearchScopes: HKCU - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 
Reboot:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.





Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die beiden neuen Logdateien von FRST.
Alt 01.08.2014, 12:11   #7
Brownie242
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Danke für die schnelle Hilfe
Es öffnen sich keine Tabs

Ich kann den Fixlog leider nur als .rar Datei anhängen, da er viel zu viele Zeichen beinhaltet und zu groß ist, um ihn als .txt anzuhängen.

FRST Log

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Malin (administrator) on MALIN-PC on 01-08-2014 12:53:47
Running from C:\Users\Malin\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-09-30] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]
CHR Extension: (Google Drive) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]
CHR Extension: (YouTube) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]
CHR Extension: (Google-Suche) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]
CHR Extension: (AdBlock) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-01]
CHR Extension: (Google Wallet) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
CHR Extension: (Google Mail) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [X]
S2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [42040 2014-07-23] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:53 - 2014-08-01 12:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages
2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt
2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT
2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe
2014-08-01 12:24 - 2014-08-01 12:25 - 00000000 ____D () C:\AdwCleaner
2014-08-01 12:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe
2014-08-01 12:09 - 2014-08-01 12:39 - 00019568 _____ () C:\Users\Malin\Desktop\Addition.txt
2014-08-01 12:08 - 2014-08-01 12:53 - 00014945 _____ () C:\Users\Malin\Desktop\FRST.txt
2014-08-01 12:08 - 2014-08-01 12:53 - 00000000 ____D () C:\FRST
2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe
2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-08-01 10:15 - 2014-08-01 12:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 10:13 - 2014-08-01 12:15 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net
2014-08-01 10:13 - 2014-08-01 10:51 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-01 10:12 - 2014-08-01 10:13 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe
2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG
2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt
2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-01 01:14 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-01 01:14 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment
2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log
2014-07-31 23:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-07-31 23:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-07-31 23:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-07-31 23:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-07-31 23:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-07-31 23:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-07-31 23:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-07-31 23:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-07-31 23:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-07-31 23:37 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-07-31 23:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-07-31 23:37 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-07-31 23:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-07-31 23:37 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-07-31 23:37 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-07-31 23:37 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-07-31 23:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-07-31 23:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-07-31 23:37 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-07-31 23:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-07-31 23:37 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-07-31 23:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-07-31 23:37 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-07-31 23:37 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-07-31 23:37 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-07-31 23:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-07-31 23:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-07-31 23:37 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-07-31 23:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-07-31 23:37 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-07-31 23:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-07-31 23:37 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-07-31 23:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-07-31 23:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-07-31 23:37 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-07-31 23:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-07-31 23:37 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-07-31 23:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-07-31 23:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-07-31 23:37 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-07-31 23:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-07-31 23:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-07-31 23:37 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-07-31 23:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-07-31 23:37 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-07-31 23:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-07-31 23:37 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-07-31 23:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-07-31 23:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-07-31 23:37 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-07-31 23:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-07-31 23:37 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-07-31 23:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-07-31 23:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-07-31 23:37 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-07-31 23:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-07-31 23:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-07-31 23:37 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-07-31 23:37 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-07-31 23:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-07-31 23:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-07-31 23:37 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-07-31 23:37 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-07-31 23:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-07-31 23:37 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-07-31 23:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-07-31 23:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-07-31 23:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-07-31 23:37 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-07-31 23:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-07-31 23:37 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-07-31 23:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-07-31 23:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-07-31 23:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-07-31 23:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-07-31 23:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-07-31 23:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-07-31 23:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-07-31 23:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-07-31 23:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-07-31 23:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-07-31 23:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA
2014-07-31 22:07 - 2014-08-01 00:52 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-31 21:24 - 2014-08-01 12:33 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-31 21:06 - 2014-07-31 21:07 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe
2014-07-31 20:19 - 2014-07-31 21:40 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe
2014-07-31 19:58 - 2014-06-22 19:24 - 00018944 _____ () C:\Users\Malin\Desktop\Picture Picker.exe
2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip
2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d
2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 19:03 - 2013-11-05 23:18 - 00024972 _____ () C:\Users\Malin\Desktop\Picture Sorter 0.9.zip
2014-07-31 18:47 - 2014-07-31 18:50 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)
2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-31 17:34 - 2014-08-01 01:00 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe
2014-07-31 17:23 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft
2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe
2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe
2014-07-31 16:48 - 2014-08-01 12:54 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype
2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype
2014-07-31 16:47 - 2014-07-31 16:48 - 00000000 ____D () C:\ProgramData\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe
2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll
2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial
2014-07-31 16:39 - 2014-07-31 18:22 - 00000000 ___RD () C:\Users\Malin\SkyDrive
2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira
2014-07-31 16:00 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-31 16:00 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-31 15:58 - 2014-07-31 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\ProgramData\Avira
2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe
2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-31 15:53 - 2014-08-01 01:00 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify
2014-07-31 15:53 - 2014-07-31 16:10 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify
2014-07-31 15:41 - 2014-08-01 12:54 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 15:41 - 2014-08-01 12:52 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 15:41 - 2014-08-01 12:46 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-31 15:40 - 2014-08-01 12:38 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002
2014-07-31 15:40 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment
2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0
2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia
2014-07-31 15:36 - 2014-07-31 21:37 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi
2014-07-31 15:36 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old
2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream
2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-07-31 15:34 - 2014-07-31 16:39 - 00000000 ____D () C:\Users\Malin
2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:54 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype
2014-08-01 12:54 - 2014-07-31 15:41 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-01 12:53 - 2014-08-01 12:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages
2014-08-01 12:53 - 2014-08-01 12:08 - 00014945 _____ () C:\Users\Malin\Desktop\FRST.txt
2014-08-01 12:53 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST
2014-08-01 12:52 - 2014-07-31 15:41 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-01 12:52 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-01 12:51 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-08-01 12:51 - 2013-11-05 06:53 - 00293064 _____ () C:\Windows\PFRO.log
2014-08-01 12:51 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-01 12:46 - 2014-07-31 15:41 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-01 12:44 - 2014-05-08 11:55 - 00985899 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 12:39 - 2014-08-01 12:09 - 00019568 _____ () C:\Users\Malin\Desktop\Addition.txt
2014-08-01 12:38 - 2014-07-31 15:40 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002
2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt
2014-08-01 12:33 - 2014-07-31 21:24 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele
2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT
2014-08-01 12:31 - 2014-05-08 21:42 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-08-01 12:31 - 2014-05-08 21:42 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-08-01 12:31 - 2013-11-05 06:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe
2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\ProgramData\McAfee
2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-08-01 12:25 - 2014-08-01 12:24 - 00000000 ____D () C:\AdwCleaner
2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe
2014-08-01 12:15 - 2014-08-01 10:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-01 12:15 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net
2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe
2014-08-01 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-01 11:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-01 10:51 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net
2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk
2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-01 10:13 - 2014-08-01 10:12 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe
2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net
2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG
2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt
2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-01 01:00 - 2014-07-31 17:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-01 01:00 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify
2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment
2014-08-01 00:52 - 2014-07-31 22:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log
2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA
2014-07-31 22:20 - 2014-07-31 17:23 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft
2014-07-31 22:13 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk
2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-31 21:40 - 2014-07-31 20:19 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug
2014-07-31 21:37 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi
2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Acer
2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-07-31 21:36 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-07-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-31 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-31 21:20 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-07-31 21:11 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-31 21:07 - 2014-07-31 21:06 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule
2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe
2014-07-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip
2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d
2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 18:50 - 2014-07-31 18:47 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)
2014-07-31 18:46 - 2013-08-22 16:46 - 00019181 _____ () C:\Windows\setupact.log
2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-31 18:22 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive
2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-31 17:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe
2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe
2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype
2014-07-31 16:48 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe
2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll
2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial
2014-07-31 16:39 - 2014-07-31 15:36 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old
2014-07-31 16:39 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin
2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-07-31 16:10 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify
2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira
2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Avira
2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe
2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-31 15:41 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment
2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0
2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia
2014-07-31 15:37 - 2014-05-08 12:51 - 00003546 _____ () C:\Windows\System32\Tasks\Norton Online Backup ARA
2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream
2014-07-31 15:36 - 2014-05-08 12:51 - 00000000 ____D () C:\ProgramData\Norton
2014-07-31 15:36 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros
2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-07-31 15:35 - 2013-11-05 06:49 - 00000000 ___HD () C:\OEM
2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store
2014-07-31 15:34 - 2013-11-05 06:53 - 00000000 ____D () C:\Windows\Panther
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-07-23 13:29 - 2014-07-31 16:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-23 13:29 - 2014-07-31 16:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

Some content of TEMP:
====================
C:\Users\Malin\AppData\Local\Temp\AcerPortalSetup.exe
C:\Users\Malin\AppData\Local\Temp\avgnt.exe
C:\Users\Malin\AppData\Local\Temp\oct3404.tmp.exe
C:\Users\Malin\AppData\Local\Temp\Quarantine.exe
C:\Users\Malin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Malin\AppData\Local\Temp\sfextra.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-11-05 06:53

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition Log
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02
Ran by Malin at 2014-08-01 12:55:01
Running from C:\Users\Malin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3104.6 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.103.2020.206 - Alps Electric)
Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)
Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Edna & Harvey: The Breakout (HKLM-x32\...\Steam App 255320) (Version:  - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA Optimus 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

31-07-2014 15:20:57 Installed Java 7 Update 65

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026823A1-1A66-4BE5-955E-591BCE739E02} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {26E42D64-F67B-4B9B-B6E7-C6DD2E26CD16} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3672130C-D4B8-4C98-B810-F5632E396E69} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {37487533-7D77-4987-A748-5BBB617CF9DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {52153B8A-1B81-4084-BDC5-2129EB67E7BE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B7C588E8-B875-465D-B829-6436E8B39508} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {BB2C5934-822D-41DC-9B53-81F9A214D4A0} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {C3086504-AF6D-4B66-9A1E-3754A357FF34} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FFDAB2EC-6995-4836-BF94-26607656D9A1} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-08 12:13 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-07-08 18:53 - 2013-07-08 18:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll
2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-07-31 16:01 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Malin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-05-08 12:10 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Malin\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Malin\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (08/01/2014 00:52:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee AP Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/01/2014 00:52:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 19%
Total physical RAM: 8072.27 MB
Available physical RAM: 6496.46 MB
Total Pagefile: 9992.27 MB
Available Pagefile: 8380.42 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:447.95 GB) (Free:347.58 GB) NTFS
Drive d: (Transcend) (Removable) (Total:29.89 GB) (Free:29.89 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: FF407FDD)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

Alt 01.08.2014, 12:57   #8
M-K-D-B
/// TB-Ausbilder
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Schritt 1
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    ATTFilter
    :filefind
*pokki*

:folderfind
*pokki*

:regfind
pokki
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.






Schritt 2

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset







Schritt 3
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.







Bitte poste mit deiner nächsten Antwort
  • die Logdatei von SystemLook,
  • die Logdatei von ESET,
  • die Logdatei von SecurityCheck.
Alt 01.08.2014, 18:38   #9
Brownie242
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 14:28 on 01/08/2014 by Malin
Administrator - Elevation successful

========== filefind ==========

Searching for "*pokki*"
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\libPokki.dll.xBAD	--a---- 49322496 bytes	[05:28 01/11/2013]	[05:28 01/11/2013] 1AFC76312592AD802C4484221DF8B4A7
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe.xBAD	--a---- 8252744 bytes	[05:31 01/11/2013]	[05:31 01/11/2013] D3F53C3FCBA03E557424B48A32481980
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\lib\ga_pokki.js.xBAD	--a---- 16992 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] 9ABCE86031C6B027737B063D78AE0E37
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\lib\ga_timer_pokki.js.xBAD	--a---- 5327 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] D4DA2A94BC0F30681059960CAFFBED94
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\platform\templates\pokkiApp.handlebars.xBAD	--a---- 511 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] 9FBCA64AA76DF50BE494A33C3EBC8E18
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\platform\views\pokkiApp.js.xBAD	--a---- 4298 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] 7EA0ADF2F5A6E2CFEFED8C097A20856D
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\installed_pokkies.db.xBAD	--a---- 5120 bytes	[13:37 31/07/2014]	[10:30 01/08/2014] F8E1C93184E91DAD642D91A1DE4A61FF
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\03d432a7e610c3e908213e7689d4342ce2111caf\22edb75f32d670f6018f709bead35b5a28159d5f\assets\js\GAPokki.js.xBAD	--a---- 16931 bytes	[13:34 31/07/2014]	[23:22 31/07/2013] B78B826BF5E2D7B204FE3105BC0752CB
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\f22abfeae27a67446927d078890381efc546d3e1\2e32e2179c83d1229009ec647e946c62b15ac234\js\pokkistore.js.xBAD	--a---- 243 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] AF6561E2F3ED3D09A3C339BF9B7F559B
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\f22abfeae27a67446927d078890381efc546d3e1\2e32e2179c83d1229009ec647e946c62b15ac234\js\lib\pokkiHelper.js.xBAD	--a---- 6470 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] 82C56D3875D29FAF35867873F0761526
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\f22abfeae27a67446927d078890381efc546d3e1\2e32e2179c83d1229009ec647e946c62b15ac234\js\lib\pokkiHostedFramework-2.0.0.min.js.xBAD	--a---- 7827 bytes	[01:54 07/09/2013]	[01:54 07/09/2013] 46E260B16634EB3602C115C2FFCF858B
C:\Users\Default\AppData\Local\Pokki\Engine\libPokki.dll	--a---- 49322496 bytes	[10:51 08/05/2014]	[22:58 07/08/2013] CB89BF9013A72954AB046C6B08B9DB18
C:\Users\Default\AppData\Local\Pokki\Engine\pokki.exe	--a---- 8198984 bytes	[10:51 08/05/2014]	[23:00 07/08/2013] 30617D8109C6E041B3E32C2BB9E297DC
C:\Users\Default\AppData\Local\Pokki\Pokkies\03d432a7e610c3e908213e7689d4342ce2111caf\assets\js\GAPokki.js	--a---- 16931 bytes	[10:51 08/05/2014]	[23:22 31/07/2013] B78B826BF5E2D7B204FE3105BC0752CB
C:\Users\Malin\AppData\Local\Temp\Pokki-2014-07-31.log	--a---- 121682 bytes	[13:35 31/07/2014]	[20:48 31/07/2014] 7C674BE9E3A2A5B9A4D97E735E4F7483
C:\Users\Malin\AppData\Local\Temp\Pokki-2014-08-01.log	--a---- 24650 bytes	[23:54 31/07/2014]	[10:51 01/08/2014] 0525790D2934208CD6BDE16C52DF253B
C:\Windows\Prefetch\POKKI.EXE-89D06908.pf	--a---- 280884 bytes	[13:37 31/07/2014]	[10:30 01/08/2014] 43CD3CCE5AB844DF5AABCEFA9081B102
C:\Windows\Prefetch\POKKI.EXE-89D0690B.pf	--a---- 68606 bytes	[10:30 01/08/2014]	[10:30 01/08/2014] D30CE78CE0BC936ED93C0301E5F56449
C:\Windows\Prefetch\POKKI.EXE-89D0690F.pf	--a---- 43248 bytes	[14:44 31/07/2014]	[00:10 01/08/2014] 1B19B526724915AF00545BEEE9DA8F28

========== folderfind ==========

Searching for "*pokki*"
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki	d------	[10:50 01/08/2014]
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies	d------	[10:50 01/08/2014]
C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\frames\frame\websheet-control-close.png\Pokkies	d------	[13:34 31/07/2014]
C:\FRST\Quarantine\C\Users\Public\Pokki	d------	[13:37 31/07/2014]
C:\Users\Default\AppData\Local\Pokki	d------	[10:51 08/05/2014]
C:\Users\Default\AppData\Local\Pokki\Pokkies	d------	[10:51 08/05/2014]

========== regfind ==========

Searching for "pokki"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\UFH\SHC]
"23"="C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe  /OPENf22abfeae27a67446927d078890381efc546d3e1"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"DisplayName"="Pokki"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"DisplayIcon"="%LOCALAPPDATA%\Pokki\Uninstall.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"Publisher"="Pokki"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"URLInfoAbout"="hxxp://www.pokki.com"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"UninstallString"="%LOCALAPPDATA%\Pokki\Uninstall.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
"DisplayIcon"="%LOCALAPPDATA%\Pokki\IconCache\persistent\Acer Games.ico"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
"Publisher"="Pokki"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
"UninstallString"=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" /UNINSTALL03d432a7e610c3e908213e7689d4342ce2111caf"
[HKEY_CURRENT_USER\Software\Pokki]
[HKEY_CURRENT_USER\Software\Pokki]
"InstallDir"="%LOCALAPPDATA%\Pokki"
[HKEY_CURRENT_USER\Software\Classes\pokki]
[HKEY_CURRENT_USER\Software\Classes\pokki]
@="URL:Pokki Protocol"
[HKEY_CURRENT_USER\Software\Classes\pokki\shell\open\command]
@=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" %1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\ARP]
"0"="S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall Pokki_03d432a7e610c3e908213e7689d4342ce2111caf "%LOCALAPPDATA%\Pokki\Engine\pokki.exe" /UNINSTALL03d432a7e610c3e908213e7689d4342ce2111caf"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\UFH\SHC]
"23"="C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe  /OPENf22abfeae27a67446927d078890381efc546d3e1"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"DisplayName"="Pokki"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"DisplayIcon"="%LOCALAPPDATA%\Pokki\Uninstall.exe"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"Publisher"="Pokki"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"URLInfoAbout"="hxxp://www.pokki.com"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]
"UninstallString"="%LOCALAPPDATA%\Pokki\Uninstall.exe"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
"DisplayIcon"="%LOCALAPPDATA%\Pokki\IconCache\persistent\Acer Games.ico"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
"Publisher"="Pokki"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]
"UninstallString"=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" /UNINSTALL03d432a7e610c3e908213e7689d4342ce2111caf"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Pokki]
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Pokki]
"InstallDir"="%LOCALAPPDATA%\Pokki"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Classes\pokki]
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Classes\pokki]
@="URL:Pokki Protocol"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Classes\pokki\shell\open\command]
@=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" %1"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002_Classes\pokki]
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002_Classes\pokki]
@="URL:Pokki Protocol"
[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002_Classes\pokki\shell\open\command]
@=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" %1"

Searching for "         "
[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0]
"SerialNumber"="            W0VJY1Q2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{21C35C68-A6C5-4A75-8FFD-DB503CE6F67B}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{18CD34B7-7AA3-42b9-A303-5A729B2FF228}">
                <Descriptor descriptorID="{ABE23B46-7F9F-495b-B4A9-87F41743727F}"/>
                <Descriptor descriptorID="{B54162A2-F67F-46dc-9ED5-F6067520EC94}"/>
                <Descriptor descriptorID="{7E0BC004-F80B-402d-A1FC-5FCDFF04DAB1}"/>
                <Descriptor descriptorID="{BE562A5F-2A80-4c28-9752-74C696E2ABAF}"/>
            </Rating>
        </Ratings>"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Enabled="true" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="4.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Reso
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell.Workflow]
"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell.workflow" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" UseSharedProcess="true" ProcessIdleTimeoutSec="1209600" RunAsUser="" RunAsPassword="" AutoRestart="false"     Enabled="true" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="4.0"/>                     <Param Name="AssemblyName" Value="Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL"/>                     <Param Name="PSSessionConfigurationTypeName" Value="Microsoft.PowerShell.Workflow.PSWorkflowSessionConfiguration"/>                     <Param Name="SessionConfigurationData"                          Value="                       
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Architecture="32" Enabled="true" >                         <InitializationParameters>                             <Param Name="PSVersion" Value="4.0"/>                         </InitializationParameters>                         <Resources>                             <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                 <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_SanDisk&Prod_Cruzer&Rev_8.01#1739731D6582F127&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
"DeviceDesc"="Cruzer          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_SanDisk&Prod_Cruzer&Rev_8.01#1739731D6582F127&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
"DeviceDesc"="Cruzer          "

-= EOF =-
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=0c8e2dcac474a64093714f0d1636fefb
# engine=19455
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-01 02:32:04
# local_time=2014-08-01 04:32:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 7325406 31784817 0 0
# scanned=135877
# found=0
# cleaned=0
# scan_time=5954
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.85  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop      
Windows Defender   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 65  
 Java version out of Date! 
 Google Chrome 36.0.1985.125  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malin Desktop SecurityCheck.exe  
 Malin AppData Local Temp\RarSFX0\SecurityCheck\Objlist.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

Alt 01.08.2014, 20:40   #10
M-K-D-B
/// TB-Ausbilder
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
C:\Users\Default\AppData\Local\Pokki
C:\Users\Malin\AppData\Local\Temp\Pokki*.log
DeleteKey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
DeleteKey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf
DeleteKey: HKEY_CURRENT_USER\Software\Pokki
DeleteKey: HKEY_CURRENT_USER\Software\Classes\pokki
Reboot:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.









Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.







Schritt 1
Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.







Schritt 2
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.


Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti-Viren-Programm und zusätzlicher Schutz
  • Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist! Ein kostenloses Anti-Viren Programm, das wir empfehlen, wäre z. B. Avast! Free Antivirus oder Microsoft Security Essentials.
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Du kannst es zusätzlich zu deinem Anti-Viren Programm verwenden.
    Update das Tool und lasse es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • AdwCleaner
    Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
    Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt von der Herstellerseite auf den Desktop herunterladen. Auch dieses Programm kann parallel zu deinem Anti-Viren Programm verwendet werden.
  • SpywareBlaster
    Eine kurze Einführung findest du Hier


Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
    Es spart außerdem Downloadkapazität.


Performance
  • Halte dich fern von Registry Cleanern.
    Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
    Miekemoes Blogspot ( MVP )


Was du vermeiden solltest:
  • Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
  • Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..).
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
  • Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!



Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Alt 01.08.2014, 21:38   #11
Brownie242
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Danke für die Hilfe Hat alles super funktioniert.
Ich habe leider vergessen den Fixlog zu posten, bevor ich DelFix gestartet habe, ich hoffe das war jetzt nicht mehr so wichtig.

Sonst ist alles klar, danke nocheinmal für die Hilfe

Alt 01.08.2014, 21:44   #12
M-K-D-B
/// TB-Ausbilder
 
Computer öffnet eigenwillig mehrmals Internetseite - Standard

Computer öffnet eigenwillig mehrmals Internetseite


Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Antwort

Themen zu Computer öffnet eigenwillig mehrmals Internetseite
98uj8.de, acer, antivir, avira, chrome automatisch tab öffnung virus, computer, desktop, detected, dllhost.exe, explorer.exe, hdd0(c:, hdd0(c:), internetseite geöffnet, lsass.exe, malwarebytes, namen, neue, problem, programm, prozess, prozesse, rundll, scan, sekunden, svchost.exe, system, taskmanager, warnung, windows, winlogon.exe, öffnet


« Avast meldet Bedrohung "NSIS:NextLive-A[Adw]" | Windows 8: Firefox öffnet aus dem nichts unzählige Male "hXXp://98uj8.de/s3brsn5ba66mgfzeinrum#noad" »


Ähnliche Themen: Computer öffnet eigenwillig mehrmals Internetseite


  1. Es öffnet sich mehrmals ein cmd fenster (schwarz) - Trojaner-check notwendig?
    Plagegeister aller Art und deren Bekämpfung - 18.10.2015 (26)
  2. Internet Explorer öffnet sich mehrmals,eigenständig im Hintergrund.
    Plagegeister aller Art und deren Bekämpfung - 01.06.2015 (8)
  3. russische Internetseite öffnet sich bei Windowsstart
    Log-Analyse und Auswertung - 18.09.2014 (8)
  4. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad Öffnet sich mehrmals im Browser. :(
    Plagegeister aller Art und deren Bekämpfung - 05.08.2014 (18)
  5. Windows 7: IE öffnet sich mehrmals ungefragt (Delta Search -> bösartig)
    Log-Analyse und Auswertung - 29.08.2013 (7)
  6. Task Manager geht nicht mehr, Browser öffnet Internetseite, cmd-Fenster öffnet sich bei Start
    Log-Analyse und Auswertung - 19.06.2013 (8)
  7. Computer stürzt mehrmals ab - und startet momentan nicht
    Alles rund um Windows - 25.12.2011 (8)
  8. Internetseite öffnet sich automatisch
    Log-Analyse und Auswertung - 06.06.2011 (20)
  9. firefoxmgr.exe öffnet mehrmals FireFox!
    Plagegeister aller Art und deren Bekämpfung - 05.06.2011 (33)
  10. Firefox öffnet bei suche in Google mehrmals falsche links vor dem richtigen
    Plagegeister aller Art und deren Bekämpfung - 21.05.2010 (27)
  11. Ungewünschte Internetseite öffnet sich und will runterladen
    Log-Analyse und Auswertung - 06.05.2010 (12)
  12. Firefox öffnet einfach andere Internetseite
    Log-Analyse und Auswertung - 17.05.2009 (40)
  13. IE 7 öffnet eigenwillig URL's ?
    Plagegeister aller Art und deren Bekämpfung - 02.01.2009 (14)
  14. AW: IE 7 öffnet eigenwillig URL's ?
    Mülltonne - 01.01.2009 (1)
  15. Internetseite öffnet sich bei wechseln des ordners
    Log-Analyse und Auswertung - 20.06.2008 (7)
  16. Internetexplorer öffnet sich ungewollt mehrmals
    Log-Analyse und Auswertung - 17.05.2008 (10)
  17. internetseite öffnet automatisch
    Log-Analyse und Auswertung - 05.07.2005 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Computer öffnet eigenwillig mehrmals Internetseite - Hallo zusammen! Ich habe seit gestern einen neuen Laptop mit Windows 8.1 64bit. Anfangs hatte ich nur die kostenfreie Version von Avira Antivir drauf und habe mir zu Anfang natürlich - Computer öffnet eigenwillig mehrmals Internetseite...
Archiv
Du betrachtest: Computer öffnet eigenwillig mehrmals Internetseite auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129