Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt

http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt


Plagegeister aller Art und deren Bekämpfung: http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 04.08.2014, 08:59   #1
nearmint
 
http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt - Standard

http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt


Wie hier schon viele Leute, haben wir bei einem neuem PC das Problem, dass sich hin- und wieder hxxp://98uj8.de/ [...] #noad #ad Links ausschließlich im in Windows konfigurierten Standartbrowser von selbst öffnen.

Das sieht dann aus wie im Foto auf dem Anhang.

Ein schließen des Webbrowsers bringt nichts; wieder werden unzählige Fenster geöffnet.

Es handelt sich um einen komplett neuen Windows 7 Pro x64 - Arbeitscomputer, der für einen Arbeitskollegen gekauft und aufgesetzt wurde. Dementsprechend wurden auch nur sehr ausgewählte Programme auf dem Computer installiert. Als Antivirenscanner wird GData genutzt.

Die einzige Übereinstimmung, die ich hier in den Threads zu dem gleichen Problem finde, ist, dass auf allen Computern (inkl. unserem Computer) Skype installiert ist. Ich kann mir also vorstellen, dass es sich um einen Skype Exploit oder einen Skype Bug handelt.

Ich habe jetzt veranlasst, dass der Arbeitskollege beim nächsten Mal probiert die Anwendung Skype zu beenden und anschließend den Browser zu schließen (ob sich dann trotzdem wieder hunderte von Tabs öffnen).

Ansonsten haben wir mal die Cookiespeicherung von Skype in den Skypeeinstellungen unter Privatsphäre deaktiviert.

Mal sehen was passiert;

Ich würde mich freuen, wenn hier gepostet wird, sobald nähere Informationen zu dem Problem bekannt sind.

Alles Gute!
^nm

PS: Der PC wurde im Juli neu gekauft und dann eingerichtet. Interessant wäre, ob alle Betroffenen ihren PC im Juli neu aufgesetzt oder neu gekauft haben.
Angehängte Grafiken
Dateityp: png 2014-08-04_0951.png (241,9 KB, 171x aufgerufen)
Geändert von nearmint (04.08.2014 um 09:16 Uhr)

Alt 04.08.2014, 09:03   #2
schrauber
/// the machine
/// TB-Ausbilder
 
http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt - Standard

http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 04.08.2014, 14:01   #3
nearmint
 
http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt - Standard

http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt


schrauber - hast du bereits Vermutungen wovon genau das Problem kommt? Aufgrund der vielen anderen User, die dasselbe Problem reporten.

Hier der Log

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by USER (administrator) on MININT-CPALECO on 04-08-2014 15:00:16
Running from C:\Users\USER\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\AMD\amdacpusrsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Jing\Jing.exe
(Lifehacker) C:\Program Files (x86)\Belvedere\Belvedere.exe
(Dropbox, Inc.) C:\Users\USER\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(TeamViewer GmbH) C:\Users\USER\AppData\Local\Temp\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Users\USER\AppData\Local\Temp\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Users\USER\AppData\Local\Temp\TeamViewer\Version9\tv_x64.exe
(TeamViewer GmbH) C:\Users\USER\AppData\Local\Temp\TeamViewer\Version9\TeamViewer_Desktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-06-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
HKU\S-1-5-21-1847539703-1180513616-4123613610-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1847539703-1180513616-4123613610-1000\...\Run: [Jing] => C:\Program Files (x86)\TechSmith\Jing\Jing.exe [2909640 2013-01-07] (TechSmith Corporation)
HKU\S-1-5-21-1847539703-1180513616-4123613610-1000\...\MountPoints2: {eca7cf9a-11b9-11e4-a18b-448a5b8eb4f6} - G:\autorun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Belvedere.lnk
ShortcutTarget: Belvedere.lnk -> C:\Program Files (x86)\Belvedere\Belvedere.exe (Lifehacker)
Startup: C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\USER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt1" -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt2" -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt3" -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt4" -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt5" -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt6" -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt7" -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt8" -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.mifcom.de
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-22]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-22]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-22]
CHR Extension: (Adblock Plus) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-22]
CHR Extension: (Google-Suche) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-22]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-07-22]
CHR Extension: (Google Wallet) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-22]
CHR Extension: (Google Mail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpusrsvc; C:\AMD\amdacpusrsvc.exe [82432 2014-04-17] () [File not signed]
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-05-27] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe [2683760 2014-05-20] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpksd; C:\windows\system32\drivers\amdacpksd.sys [274656 2014-04-18] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-07-22] (Disc Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-07-22] (G Data Software AG)
R1 GDKBFlt; C:\windows\system32\drivers\GDKBFlt64.sys [20992 2014-07-22] (G Data Software AG)
R1 GDMnIcpt; C:\windows\system32\drivers\MiniIcpt.sys [142336 2014-07-22] (G Data Software AG)
R3 GDPkIcpt; C:\windows\system32\drivers\PktIcpt.sys [64000 2014-07-22] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-07-22] (G Data Software AG)
R1 GRD; C:\windows\system32\drivers\GRD.sys [106272 2014-07-22] (G Data Software)
R1 HookCentre; C:\windows\system32\drivers\HookCentre.sys [61440 2014-07-22] (G Data Software AG)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-02-13] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X]
S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 15:00 - 2014-08-04 15:00 - 00012126 _____ () C:\Users\USER\Downloads\FRST.txt
2014-08-04 14:59 - 2014-08-04 15:00 - 00000000 ____D () C:\FRST
2014-08-04 14:58 - 2014-08-04 14:58 - 02094080 _____ (Farbar) C:\Users\USER\Downloads\FRST64.exe
2014-08-04 13:53 - 2014-08-04 13:53 - 06263496 _____ (TeamViewer GmbH) C:\Users\USER\Downloads\TeamViewer_Setup_de.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-03 20:36 - 2014-08-03 20:36 - 00001346 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Knuddels.de.lnk
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\windows\Sun
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\ProgramData\Sun
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\Program Files (x86)\Knuddels
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-02 12:01 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-08-02 12:01 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-08-02 12:01 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-08-02 12:01 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-08-02 12:01 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2014-08-02 12:01 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2014-08-02 12:01 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2014-08-02 12:01 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-08-02 12:01 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-08-02 12:01 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-08-02 12:01 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-08-02 12:01 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-08-02 12:01 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-08-02 12:01 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-08-01 20:18 - 2014-08-01 20:18 - 00276616 _____ () C:\windows\Minidump\080114-4602-01.dmp
2014-08-01 13:21 - 2014-08-01 13:21 - 00000000 ____D () C:\Users\USER\AppData\Local\LiveChat,_Inc
2014-07-30 19:10 - 2014-07-30 19:10 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-07-30 17:28 - 2014-08-01 20:18 - 485320965 _____ () C:\windows\MEMORY.DMP
2014-07-30 17:28 - 2014-08-01 20:18 - 00000000 ____D () C:\windows\Minidump
2014-07-30 17:28 - 2014-07-30 17:28 - 00276616 _____ () C:\windows\Minidump\073014-3884-01.dmp
2014-07-29 20:08 - 2014-07-29 20:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-29 20:05 - 2014-07-30 19:11 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Apple Computer
2014-07-29 20:05 - 2014-07-29 20:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-29 20:05 - 2014-07-29 20:05 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Users\USER\AppData\Local\Apple Computer
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Users\USER\AppData\Local\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\ProgramData\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\iTunes
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\iPod
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\Bonjour
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-07-29 20:05 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys
2014-07-29 14:49 - 2014-07-29 14:49 - 00000000 ____D () C:\windows\pss
2014-07-26 15:27 - 2014-07-26 20:07 - 00000000 ____D () C:\Users\USER\AppData\Roaming\TeamViewer
2014-07-23 14:04 - 2014-08-04 01:17 - 00000000 ____D () C:\Users\USER\Documents\Arbeit
2014-07-22 19:27 - 2014-07-22 19:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-07-22 19:27 - 2014-07-22 19:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-07-22 18:54 - 2014-07-22 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data AntiVirus
2014-07-22 18:44 - 2014-07-22 18:44 - 00000000 ____D () C:\Users\USER\AppData\Local\Adobe
2014-07-22 18:40 - 2014-08-04 13:52 - 00000000 ___RD () C:\Users\USER\Dropbox
2014-07-22 18:36 - 2014-07-22 18:36 - 00000000 ___SD () C:\Users\USER\Documents\Meine Shapes
2014-07-22 18:35 - 2014-07-23 21:10 - 00000039 _____ () C:\windows\vbaddin.ini
2014-07-22 18:35 - 2014-07-22 18:35 - 00000162 _____ () C:\windows\ODBC.INI
2014-07-22 18:29 - 2014-07-22 18:29 - 00000000 ____D () C:\Users\USER\AppData\Local\TechSmith
2014-07-22 18:29 - 2014-07-22 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-07-22 18:29 - 2014-07-22 18:29 - 00000000 ____D () C:\Program Files (x86)\TechSmith
2014-07-22 18:26 - 2014-08-03 21:56 - 00000000 ____D () C:\Users\USER\AppData\Local\TimeCamp
2014-07-22 18:26 - 2014-07-22 18:26 - 00000000 ____D () C:\Users\USER\AppData\Roaming\TimeCamp
2014-07-22 18:26 - 2014-07-22 18:26 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\TimeCamp
2014-07-22 18:23 - 2014-07-22 18:35 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Neues Microsoft Office-Dokument.lnk
2014-07-22 18:23 - 2014-07-22 18:35 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Microsoft Office-Dokument öffnen.lnk
2014-07-22 18:23 - 2014-07-22 18:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-22 18:23 - 2014-07-22 18:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-07-22 18:23 - 2014-07-22 18:23 - 00000000 ____D () C:\windows\PCHEALTH
2014-07-22 18:23 - 2014-07-22 18:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-07-22 18:22 - 2014-07-22 18:22 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-22 18:21 - 2014-07-23 21:10 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-22 18:21 - 2014-07-22 18:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-22 18:21 - 2014-07-22 18:21 - 00000000 __RHD () C:\MSOCache
2014-07-22 18:21 - 2014-07-22 18:21 - 00000000 ____D () C:\Users\USER\AppData\Local\Microsoft Help
2014-07-22 18:19 - 2014-07-22 18:20 - 00000000 ____D () C:\Users\USER\AppData\Roaming\DAEMON Tools Lite
2014-07-22 18:19 - 2014-07-22 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-07-22 18:19 - 2014-07-22 18:19 - 00283064 _____ (Disc Soft Ltd) C:\windows\system32\Drivers\dtsoftbus01.sys
2014-07-22 18:19 - 2014-07-22 18:19 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-07-22 18:18 - 2014-07-22 18:20 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-07-22 18:17 - 2014-07-22 18:17 - 00106272 _____ (G Data Software) C:\windows\system32\Drivers\GRD.sys
2014-07-22 18:17 - 2014-07-22 18:17 - 00018160 _____ (G Data Software) C:\windows\system32\Drivers\GdPhyMem.sys
2014-07-22 18:04 - 2014-07-22 18:54 - 00064000 _____ (G Data Software AG) C:\windows\system32\Drivers\PktIcpt.sys
2014-07-22 18:03 - 2014-07-22 18:54 - 00142336 _____ (G Data Software AG) C:\windows\system32\Drivers\MiniIcpt.sys
2014-07-22 18:03 - 2014-07-22 18:54 - 00064000 _____ (G Data Software AG) C:\windows\system32\Drivers\gdwfpcd64.sys
2014-07-22 18:03 - 2014-07-22 18:54 - 00061440 _____ (G Data Software AG) C:\windows\system32\Drivers\HookCentre.sys
2014-07-22 18:03 - 2014-07-22 18:54 - 00055808 _____ (G Data Software AG) C:\windows\system32\Drivers\GDBehave.sys
2014-07-22 18:03 - 2014-07-22 18:54 - 00020992 _____ (G Data Software AG) C:\windows\system32\Drivers\GDKBFlt64.sys
2014-07-22 18:03 - 2014-07-22 18:53 - 00004018 _____ () C:\windows\DPINST.LOG
2014-07-22 18:03 - 2014-07-22 18:03 - 00000779 _____ () C:\Users\USER\AppData\Roaming\gdscan.log
2014-07-22 18:03 - 2014-07-22 18:03 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf
2014-07-22 18:03 - 2014-07-22 18:03 - 00000000 ____D () C:\Program Files (x86)\G Data
2014-07-22 18:00 - 2014-07-22 18:59 - 00000000 ____D () C:\ProgramData\G Data
2014-07-22 17:49 - 2014-07-22 18:05 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-22 17:49 - 2014-07-22 17:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-22 17:49 - 2014-07-22 17:49 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-22 17:44 - 2014-07-22 18:55 - 00000000 ____D () C:\Users\USER\AppData\Roaming\PhonerLite
2014-07-22 17:44 - 2014-07-22 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhonerLite
2014-07-22 17:44 - 2014-07-22 17:44 - 00000000 ____D () C:\Program Files (x86)\PhonerLite
2014-07-22 17:39 - 2014-07-22 17:39 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-22 17:38 - 2014-08-04 13:52 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Dropbox
2014-07-22 17:38 - 2014-07-22 17:38 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LiveChat
2014-07-22 17:38 - 2014-07-22 17:38 - 00000000 ____D () C:\Users\USER\AppData\Roaming\LiveChat
2014-07-22 17:34 - 2014-07-22 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-07-22 17:34 - 2014-07-22 17:34 - 00000000 ____D () C:\Program Files\7-Zip
2014-07-22 17:30 - 2014-07-24 16:51 - 00000000 ____D () C:\Users\USER\Documents\Desktop-Backup
2014-07-22 17:28 - 2014-07-22 17:29 - 00000000 ____D () C:\Program Files (x86)\Belvedere
2014-07-22 17:28 - 2014-07-22 17:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belvedere
2014-07-22 17:26 - 2014-08-04 14:59 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\Users\USER\AppData\Local\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\ProgramData\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-22 17:22 - 2014-07-22 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-22 17:21 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-22 17:21 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-22 17:21 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-22 17:21 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-22 17:21 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-22 17:21 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-22 17:21 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-22 17:21 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-22 17:21 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-22 17:21 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-22 17:21 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-22 17:21 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-22 17:21 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-22 17:21 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-22 17:21 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-22 17:21 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-22 17:21 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-22 17:21 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-22 17:21 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-22 17:21 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-22 17:21 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-22 17:21 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-22 17:21 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-22 17:21 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-22 17:21 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-22 17:21 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-22 17:21 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-22 17:21 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-22 17:21 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-22 17:21 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-22 17:21 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-22 17:21 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-22 17:21 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-22 17:21 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-22 17:21 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-22 17:21 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-22 17:21 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-22 17:21 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-22 17:21 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-22 17:21 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-22 17:21 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-22 17:21 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-22 17:21 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-22 17:21 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-22 17:21 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-22 17:21 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-22 17:21 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-22 17:21 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-22 17:21 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-22 17:21 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-22 17:21 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-22 17:21 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-22 17:21 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-22 17:21 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-22 17:21 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-22 17:21 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-22 17:19 - 2014-08-04 14:24 - 00001114 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-22 17:19 - 2014-08-04 13:52 - 00001110 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-22 17:19 - 2014-08-03 14:56 - 00000000 ____D () C:\Users\USER\AppData\Local\Deployment
2014-07-22 17:19 - 2014-07-22 17:22 - 00000000 ____D () C:\Users\USER\AppData\Local\Google
2014-07-22 17:19 - 2014-07-22 17:22 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-22 17:19 - 2014-07-22 17:19 - 00004110 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-22 17:19 - 2014-07-22 17:19 - 00003858 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-22 17:19 - 2014-07-22 17:19 - 00000000 ____D () C:\Users\USER\AppData\Local\Apps\2.0
2014-07-22 17:19 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-22 17:19 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-22 17:19 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-22 17:19 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-22 17:19 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-22 17:19 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-22 17:19 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-22 17:19 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-22 17:19 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-22 17:19 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-22 17:18 - 2014-07-22 17:18 - 00000000 __SHD () C:\Users\USER\AppData\Local\EmieUserList
2014-07-22 17:18 - 2014-07-22 17:18 - 00000000 __SHD () C:\Users\USER\AppData\Local\EmieSiteList
2014-07-22 17:18 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-22 17:18 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-22 17:18 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-22 17:17 - 2014-07-22 18:44 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Adobe
2014-07-22 17:17 - 2014-07-22 18:29 - 00086160 _____ () C:\Users\USER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-22 17:17 - 2014-07-22 17:17 - 00001431 _____ () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-22 17:17 - 2014-07-22 17:17 - 00000000 ____D () C:\Users\USER\AppData\Roaming\ATI
2014-07-22 17:17 - 2014-07-22 17:17 - 00000000 ____D () C:\Users\USER\AppData\Local\ATI
2014-07-22 17:16 - 2014-07-24 20:16 - 00000000 ____D () C:\Users\USER
2014-07-22 17:16 - 2014-07-22 17:16 - 00000020 ___SH () C:\Users\USER\ntuser.ini
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Vorlagen
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Startmenü
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Netzwerkumgebung
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Lokale Einstellungen
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Eigene Dateien
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Druckumgebung
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Documents\Eigene Musik
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Documents\Eigene Bilder
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\AppData\Local\Verlauf
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\AppData\Local\Anwendungsdaten
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Anwendungsdaten
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 ____D () C:\Users\USER\AppData\Local\VirtualStore
2014-07-22 17:16 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-22 17:16 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-17 06:15 - 2014-07-17 06:15 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-17 06:15 - 2010-03-31 15:42 - 00020574 _____ () C:\windows\system32\logo.bmp
2014-07-17 06:14 - 2014-07-16 15:07 - 00000000 ____D () C:\windows\Panther
2014-07-17 06:09 - 2013-09-17 04:19 - 01795952 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01011.dll
2014-07-17 06:09 - 2013-09-17 04:19 - 00099288 _____ (Intel Corporation) C:\windows\system32\Drivers\TeeDriverx64.sys
2014-07-17 06:09 - 2013-08-14 09:01 - 00034544 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2014-07-17 06:09 - 2013-08-14 09:01 - 00030448 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_AMDASF.sys
2014-07-17 06:09 - 2013-07-02 16:20 - 03472600 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys
2014-07-17 06:09 - 2013-07-02 12:26 - 00615249 _____ () C:\windows\system32\Drivers\RTAIODAT.DAT
2014-07-17 06:09 - 2013-07-02 10:20 - 00147160 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoInstII64.dll
2014-07-17 06:09 - 2013-07-02 09:56 - 28280832 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoRes64.dat
2014-07-17 06:09 - 2013-06-27 11:01 - 03760856 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkAPO64.dll
2014-07-17 06:09 - 2013-06-27 08:12 - 02795224 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtPgEx64.dll
2014-07-17 06:09 - 2013-06-21 05:01 - 00109848 _____ () C:\windows\system32\AcpiServiceVnA64.dll
2014-07-17 06:09 - 2013-06-18 13:52 - 01004248 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkApi64.dll
2014-07-17 06:09 - 2013-06-18 11:44 - 02736160 _____ (Fortemedia Corporation) C:\windows\system32\FMAPO64.dll
2014-07-17 06:09 - 2013-06-18 11:00 - 00947760 _____ (Sony Corporation) C:\windows\system32\SFSS_APO.dll
2014-07-17 06:09 - 2013-06-13 13:20 - 05448460 _____ () C:\windows\system32\Drivers\rtvienna.dat
2014-07-17 06:09 - 2013-06-10 21:10 - 00791808 _____ (SRS Labs, Inc.) C:\windows\system32\slcnt64.dll
2014-07-17 06:09 - 2013-06-10 21:10 - 00633088 _____ (SRS Labs, Inc.) C:\windows\system32\sltech64.dll
2014-07-17 06:09 - 2013-06-10 21:10 - 00521472 _____ (SRS Labs, Inc.) C:\windows\system32\sl3apo64.dll
2014-07-17 06:09 - 2013-06-10 21:10 - 00213760 _____ (TODO: <Company name>) C:\windows\system32\slprp64.dll
2014-07-17 06:09 - 2013-06-05 15:42 - 00208072 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAC64.dll
2014-07-17 06:09 - 2013-05-30 07:59 - 04810008 _____ (ASUSTeKcomputer.Inc) C:\windows\system32\RTKSMlfx.dll
2014-07-17 06:09 - 2013-05-30 07:57 - 00758104 _____ (A-Volute) C:\windows\system32\RTKSMSettingsIPC.dll
2014-07-17 06:09 - 2013-05-02 06:01 - 02103040 _____ (Waves Audio Ltd.) C:\windows\system32\WavesGUILib64.dll
2014-07-17 06:09 - 2013-05-02 06:01 - 02032896 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioEQ64.dll
2014-07-17 06:09 - 2013-05-02 06:00 - 00920320 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPOShell64.dll
2014-07-17 06:09 - 2013-04-26 11:24 - 00786416 _____ (Intel Corporation) C:\windows\system32\Drivers\iusb3xhc.sys
2014-07-17 06:09 - 2013-04-26 11:24 - 00368112 _____ (Intel Corporation) C:\windows\system32\Drivers\iusb3hub.sys
2014-07-17 06:09 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTSnMg64.cpl
2014-07-17 06:09 - 2013-04-22 12:34 - 09123608 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioVnA64.dll
2014-07-17 06:09 - 2013-04-18 07:49 - 14035712 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioRealtek64.dll
2014-07-17 06:09 - 2013-04-18 07:48 - 03138304 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioVnN64.dll
2014-07-17 06:09 - 2013-04-18 07:48 - 01903872 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioRealtek264.dll
2014-07-17 06:09 - 2013-04-15 05:19 - 00722688 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO5064.dll
2014-07-17 06:09 - 2013-04-08 11:37 - 00148912 _____ (TOSHIBA Corporation) C:\windows\system32\toseaeapo64.dll
2014-07-17 06:09 - 2013-04-08 11:36 - 00858032 _____ (TOSHIBA Corporation) C:\windows\system32\tossaeapo64.dll
2014-07-17 06:09 - 2013-04-08 11:36 - 00569256 _____ (TOSHIBA Corporation) C:\windows\system32\tosasfapo64.dll
2014-07-17 06:09 - 2013-04-03 16:02 - 00613448 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtDataProc64.dll
2014-07-17 06:09 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\windows\system32\MISS_APO.dll
2014-07-17 06:09 - 2013-02-20 12:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTCOM64.dll
2014-07-17 06:09 - 2013-02-13 11:28 - 00046568 _____ () C:\windows\system32\Drivers\ISCTD64.sys
2014-07-17 06:09 - 2013-01-11 20:02 - 00064624 _____ (Intel Corporation) C:\windows\system32\Drivers\HECIx64.sys
2014-07-17 06:09 - 2012-12-17 11:49 - 00547784 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO2064.dll
2014-07-17 06:09 - 2012-12-12 05:17 - 00395208 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO30.dll
2014-07-17 06:09 - 2012-10-02 08:41 - 00501192 _____ (DTS) C:\windows\system32\DTSU2PLFX64.dll
2014-07-17 06:09 - 2012-10-02 08:41 - 00487368 _____ (DTS) C:\windows\system32\DTSU2PGFX64.dll
2014-07-17 06:09 - 2012-10-02 08:41 - 00415688 _____ (DTS) C:\windows\system32\DTSU2PREC64.dll
2014-07-17 06:09 - 2012-09-10 14:06 - 00612728 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO4064.dll
2014-07-17 06:09 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\windows\system32\R4EEP64A.dll
2014-07-17 06:09 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\windows\system32\R4EED64A.dll
2014-07-17 06:09 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\windows\system32\R4EEL64A.dll
2014-07-17 06:09 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\windows\system32\R4EEA64A.dll
2014-07-17 06:09 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\windows\system32\R4EEG64A.dll
2014-07-17 06:09 - 2012-07-15 15:13 - 00394616 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVolumeSDAPO.dll
2014-07-17 06:09 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\windows\system32\CONEQMSAPOGUILibrary.dll
2014-07-17 06:09 - 2012-06-12 23:00 - 00726160 _____ (Realtek ) C:\windows\system32\Drivers\Rt64win7.sys
2014-07-17 06:09 - 2012-06-12 23:00 - 00107552 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RTNUninst64.dll
2014-07-17 06:09 - 2012-06-12 23:00 - 00074344 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RtNicProp64.dll
2014-07-17 06:09 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAR64.dll
2014-07-17 06:09 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo264.dll
2014-07-17 06:09 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\windows\system32\tepeqapo64.dll
2014-07-17 06:09 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtlCPAPI64.dll
2014-07-17 06:09 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCoLDR64.dll
2014-07-17 06:09 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\windows\system32\SFNHK64.dll
2014-07-17 06:09 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\windows\system32\SFCOM64.dll
2014-07-17 06:09 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\windows\system32\SFAPO64.dll
2014-07-17 06:09 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\windows\system32\KAAPORT64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\windows\system32\DTSS2SpeakerDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\windows\system32\DTSS2HeadphoneDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\windows\system32\DTSBoostDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\windows\system32\DTSBassEnhancementDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\windows\system32\DTSSymmetryDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\windows\system32\DTSVoiceClarityDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\windows\system32\DTSNeoPCDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\windows\system32\DTSLimiterDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\windows\system32\DTSGainCompensatorDLL64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\windows\system32\DTSLFXAPO64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\windows\system32\DTSGFXAPO64.dll
2014-07-17 06:09 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\windows\system32\DTSGFXAPONS64.dll
2014-07-17 06:09 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\windows\system32\tosade.dll
2014-07-17 06:09 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo.dll
2014-07-17 06:09 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEP64A.dll
2014-07-17 06:09 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DHT64.dll
2014-07-17 06:09 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DAA64.dll
2014-07-17 06:09 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEED64A.dll
2014-07-17 06:09 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEL64A.dll
2014-07-17 06:09 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEG64A.dll
2014-07-17 06:09 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCfg64.dll
2014-07-17 06:09 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO20.dll
2014-07-17 06:09 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\windows\SysWOW64\SFCOM.dll
2014-07-17 06:09 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSX64.dll
2014-07-17 06:09 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSH64.dll
2014-07-17 06:09 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSHP64.dll
2014-07-17 06:09 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\windows\system32\SRSWOW64.dll
2014-07-16 20:21 - 2014-07-22 17:20 - 00001912 _____ () C:\windows\epplauncher.mif
2014-07-16 20:20 - 2014-08-04 03:46 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2014-07-16 20:20 - 2014-07-16 20:20 - 00003298 _____ () C:\windows\System32\Tasks\SamsungMagician
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\ProgramData\Samsung
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\ProgramData\ATI
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 _____ () C:\windows\ativpsrm.bin
2014-07-16 20:19 - 2014-07-16 20:19 - 00062044 _____ () C:\windows\SysWOW64\CCCInstall_201407162019243925.log
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\ProgramData\AMD
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files\ATI
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files\AMD
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\AMD
2014-07-16 20:18 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-07-16 20:18 - 2014-04-18 04:43 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atiuxp64.dll
2014-07-16 20:18 - 2014-04-18 04:43 - 00127872 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdhcp64.dll
2014-07-16 20:18 - 2014-04-18 04:43 - 00117560 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdhcp32.dll
2014-07-16 20:18 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atimpc64.dll
2014-07-16 20:18 - 2014-04-18 04:43 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdpcom64.dll
2014-07-16 20:18 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atimpc32.dll
2014-07-16 20:18 - 2014-04-18 04:43 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdpcom32.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 10335208 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atidxx64.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 08866928 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atidxx32.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atiumd64.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atiumd6a.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atiumdag.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 06796592 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atiumdva.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 01343272 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\aticfx64.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 01117184 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\aticfx32.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atiuxpag.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atiu9p64.dll
2014-07-16 20:18 - 2014-04-18 04:42 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atiu9pag.dll
2014-07-16 20:18 - 2014-04-18 04:39 - 00274656 _____ (Advanced Micro Devices) C:\windows\system32\Drivers\amdacpksd.sys
2014-07-16 20:18 - 2014-04-18 04:36 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\atikmdag.sys
2014-07-16 20:18 - 2014-04-18 04:23 - 00231424 _____ () C:\windows\system32\clinfo.exe
2014-07-16 20:18 - 2014-04-18 04:22 - 28685824 _____ (Advanced Micro Devices Inc.) C:\windows\system32\amdocl64.dll
2014-07-16 20:18 - 2014-04-18 04:22 - 01187342 _____ () C:\windows\system32\amdocl_as64.exe
2014-07-16 20:18 - 2014-04-18 04:22 - 01061902 _____ () C:\windows\system32\amdocl_ld64.exe
2014-07-16 20:18 - 2014-04-18 04:22 - 00995342 _____ () C:\windows\SysWOW64\amdocl_as32.exe
2014-07-16 20:18 - 2014-04-18 04:22 - 00798734 _____ () C:\windows\SysWOW64\amdocl_ld32.exe
2014-07-16 20:18 - 2014-04-18 04:22 - 00098816 _____ (Advanced Micro Devices Inc.) C:\windows\system32\OpenVideo64.dll
2014-07-16 20:18 - 2014-04-18 04:22 - 00086528 _____ (Advanced Micro Devices Inc.) C:\windows\system32\OVDecode64.dll
2014-07-16 20:18 - 2014-04-18 04:22 - 00083456 _____ (Advanced Micro Devices Inc.) C:\windows\SysWOW64\OpenVideo.dll
2014-07-16 20:18 - 2014-04-18 04:22 - 00073216 _____ (Advanced Micro Devices Inc.) C:\windows\SysWOW64\OVDecode.dll
2014-07-16 20:18 - 2014-04-18 04:19 - 24107520 _____ (Advanced Micro Devices Inc.) C:\windows\SysWOW64\amdocl.dll
2014-07-16 20:18 - 2014-04-18 04:17 - 00065024 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2014-07-16 20:18 - 2014-04-18 04:17 - 00058880 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2014-07-16 20:18 - 2014-04-18 04:13 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\mantle64.dll
2014-07-16 20:18 - 2014-04-18 04:13 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\mantle32.dll
2014-07-16 20:18 - 2014-04-18 04:12 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atio6axx.dll
2014-07-16 20:18 - 2014-04-18 04:12 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmantle64.dll
2014-07-16 20:18 - 2014-04-18 03:58 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdmantle32.dll
2014-07-16 20:18 - 2014-04-18 03:51 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atioglxx.dll
2014-07-16 20:18 - 2014-04-18 03:46 - 15716352 _____ (Advanced Micro Devices Inc.) C:\windows\system32\aticaldd64.dll
2014-07-16 20:18 - 2014-04-18 03:46 - 00580816 _____ () C:\windows\SysWOW64\atiapfxx.blb
2014-07-16 20:18 - 2014-04-18 03:46 - 00580816 _____ () C:\windows\system32\atiapfxx.blb
2014-07-16 20:18 - 2014-04-18 03:46 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atiapfxx.exe
2014-07-16 20:18 - 2014-04-18 03:46 - 00062464 _____ (Advanced Micro Devices Inc.) C:\windows\system32\aticalrt64.dll
2014-07-16 20:18 - 2014-04-18 03:46 - 00055808 _____ (Advanced Micro Devices Inc.) C:\windows\system32\aticalcl64.dll
2014-07-16 20:18 - 2014-04-18 03:46 - 00052224 _____ (Advanced Micro Devices Inc.) C:\windows\SysWOW64\aticalrt.dll
2014-07-16 20:18 - 2014-04-18 03:46 - 00049152 _____ (Advanced Micro Devices Inc.) C:\windows\SysWOW64\aticalcl.dll
2014-07-16 20:18 - 2014-04-18 03:45 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\mantleaxl64.dll
2014-07-16 20:18 - 2014-04-18 03:45 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\mantleaxl32.dll
2014-07-16 20:18 - 2014-04-18 03:42 - 14302208 _____ (Advanced Micro Devices Inc.) C:\windows\SysWOW64\aticaldd.dll
2014-07-16 20:18 - 2014-04-18 03:33 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl6.dll
2014-07-16 20:18 - 2014-04-18 03:33 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdmmcl.dll
2014-07-16 20:18 - 2014-04-18 03:30 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atidemgy.dll
2014-07-16 20:18 - 2014-04-18 03:30 - 00031232 _____ (AMD) C:\windows\system32\atimuixx.dll
2014-07-16 20:18 - 2014-04-18 03:29 - 00586240 _____ (AMD) C:\windows\system32\atieclxx.exe
2014-07-16 20:18 - 2014-04-18 03:29 - 00239616 _____ (AMD) C:\windows\system32\atiesrxx.exe
2014-07-16 20:18 - 2014-04-18 03:28 - 03437632 _____ () C:\windows\system32\atiumd6a.cap
2014-07-16 20:18 - 2014-04-18 03:28 - 00190976 _____ (AMD) C:\windows\system32\atitmm64.dll
2014-07-16 20:18 - 2014-04-18 03:25 - 00204952 _____ () C:\windows\SysWOW64\ativvsvl.dat
2014-07-16 20:18 - 2014-04-18 03:25 - 00204952 _____ () C:\windows\system32\ativvsvl.dat
2014-07-16 20:18 - 2014-04-18 03:25 - 00157144 _____ () C:\windows\SysWOW64\ativvsva.dat
2014-07-16 20:18 - 2014-04-18 03:25 - 00157144 _____ () C:\windows\system32\ativvsva.dat
2014-07-16 20:18 - 2014-04-18 03:21 - 00806912 _____ (AMD) C:\windows\system32\coinst_14.100.dll
2014-07-16 20:18 - 2014-04-18 03:17 - 03471376 _____ () C:\windows\SysWOW64\atiumdva.cap
2014-07-16 20:18 - 2014-04-18 03:09 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atiadlxx.dll
2014-07-16 20:18 - 2014-04-18 03:09 - 00848896 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxy.dll
2014-07-16 20:18 - 2014-04-18 03:08 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdave64.dll
2014-07-16 20:18 - 2014-04-18 03:08 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdave32.dll
2014-07-16 20:18 - 2014-04-18 03:08 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atisamu64.dll
2014-07-16 20:18 - 2014-04-18 03:08 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atisamu32.dll
2014-07-16 20:18 - 2014-04-18 03:07 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\atikmpag.sys
2014-07-16 20:18 - 2014-04-18 03:07 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atig6txx.dll
2014-07-16 20:18 - 2014-04-18 03:07 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atigktxx.dll
2014-07-16 20:18 - 2014-04-18 03:07 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atig6pxx.dll
2014-07-16 20:18 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atiglpxx.dll
2014-07-16 20:18 - 2014-04-18 03:07 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atiglpxx.dll
2014-07-16 20:18 - 2014-04-18 03:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Drivers\ati2erec.dll
2014-07-16 20:18 - 2014-04-10 19:58 - 00082128 _____ () C:\windows\system32\ativce02.dat
2014-07-16 20:18 - 2014-04-01 00:06 - 00234804 _____ () C:\windows\system32\ativvaxy_cik.dat
2014-07-16 20:18 - 2014-04-01 00:04 - 00233008 _____ () C:\windows\system32\ativvaxy_cik_nd.dat
2014-07-16 20:18 - 2014-03-06 18:31 - 00042544 _____ () C:\windows\system32\kapp_ci.sbin
2014-07-16 20:18 - 2014-03-06 18:31 - 00035408 _____ () C:\windows\system32\kapp_si.sbin
2014-07-16 20:18 - 2014-02-06 17:45 - 00134192 _____ () C:\windows\system32\ativce03.dat
2014-07-16 20:18 - 2014-01-16 19:00 - 00273712 _____ () C:\windows\system32\ativvaxy_vi_nd.dat
2014-07-16 20:18 - 2014-01-16 18:59 - 00275124 _____ () C:\windows\system32\ativvaxy_vi.dat
2014-07-16 20:18 - 2014-01-16 10:34 - 00723841 _____ () C:\windows\system32\atiicdxx.dat
2014-07-16 20:18 - 2013-12-19 18:45 - 00094720 _____ (Advanced Micro Devices) C:\windows\system32\Drivers\AtihdW76.sys
2014-07-16 20:18 - 2013-12-19 18:44 - 00110080 _____ (Advanced Micro Devices) C:\windows\system32\DelayAPO.dll
2014-07-16 20:18 - 2013-12-12 15:53 - 00138832 _____ () C:\windows\system32\samu_krnl_isv_ci.sbin
2014-07-16 20:18 - 2013-12-12 15:53 - 00138832 _____ () C:\windows\system32\samu_krnl_ci.sbin
2014-07-16 20:18 - 2013-04-10 17:34 - 00332800 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\ATIODE.exe
2014-07-16 20:18 - 2013-04-10 17:34 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atibtmon.exe
2014-07-16 20:18 - 2013-04-10 17:34 - 00051200 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\ATIODCLI.exe
2014-07-16 20:18 - 2011-09-13 00:06 - 00003917 _____ () C:\windows\SysWOW64\atipblag.dat
2014-07-16 20:18 - 2011-09-13 00:06 - 00003917 _____ () C:\windows\system32\atipblag.dat
2014-07-16 20:17 - 2014-08-04 14:24 - 01631773 _____ () C:\windows\WindowsUpdate.log
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____D () C:\windows\SysWOW64\RTCOM
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____D () C:\windows\CSC
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____D () C:\Program Files\Realtek
2014-07-16 14:36 - 2014-07-16 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 15:00 - 2014-08-04 15:00 - 00012126 _____ () C:\Users\USER\Downloads\FRST.txt
2014-08-04 15:00 - 2014-08-04 14:59 - 00000000 ____D () C:\FRST
2014-08-04 14:59 - 2014-07-22 17:26 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Skype
2014-08-04 14:58 - 2014-08-04 14:58 - 02094080 _____ (Farbar) C:\Users\USER\Downloads\FRST64.exe
2014-08-04 14:24 - 2014-07-22 17:19 - 00001114 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 14:24 - 2014-07-16 20:17 - 01631773 _____ () C:\windows\WindowsUpdate.log
2014-08-04 13:59 - 2009-07-14 06:45 - 00026368 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-04 13:59 - 2009-07-14 06:45 - 00026368 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-04 13:56 - 2011-04-12 09:43 - 00698688 _____ () C:\windows\system32\perfh007.dat
2014-08-04 13:56 - 2011-04-12 09:43 - 00148828 _____ () C:\windows\system32\perfc007.dat
2014-08-04 13:56 - 2009-07-14 07:13 - 01618320 _____ () C:\windows\system32\PerfStringBackup.INI
2014-08-04 13:53 - 2014-08-04 13:53 - 06263496 _____ (TeamViewer GmbH) C:\Users\USER\Downloads\TeamViewer_Setup_de.exe
2014-08-04 13:52 - 2014-07-22 18:40 - 00000000 ___RD () C:\Users\USER\Dropbox
2014-08-04 13:52 - 2014-07-22 17:38 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Dropbox
2014-08-04 13:52 - 2014-07-22 17:19 - 00001110 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 13:52 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-08-04 13:52 - 2009-07-14 06:51 - 00048041 _____ () C:\windows\setupact.log
2014-08-04 03:46 - 2014-07-16 20:20 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2014-08-04 01:17 - 2014-07-23 14:04 - 00000000 ____D () C:\Users\USER\Documents\Arbeit
2014-08-04 00:05 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-08-03 21:56 - 2014-07-22 18:26 - 00000000 ____D () C:\Users\USER\AppData\Local\TimeCamp
2014-08-03 20:36 - 2014-08-03 20:36 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-08-03 20:36 - 2014-08-03 20:36 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-03 20:36 - 2014-08-03 20:36 - 00001346 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Knuddels.de.lnk
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\windows\Sun
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\ProgramData\Sun
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\Program Files (x86)\Knuddels
2014-08-03 20:36 - 2014-08-03 20:36 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-03 14:56 - 2014-07-22 17:19 - 00000000 ____D () C:\Users\USER\AppData\Local\Deployment
2014-08-01 20:18 - 2014-08-01 20:18 - 00276616 _____ () C:\windows\Minidump\080114-4602-01.dmp
2014-08-01 20:18 - 2014-07-30 17:28 - 485320965 _____ () C:\windows\MEMORY.DMP
2014-08-01 20:18 - 2014-07-30 17:28 - 00000000 ____D () C:\windows\Minidump
2014-08-01 13:21 - 2014-08-01 13:21 - 00000000 ____D () C:\Users\USER\AppData\Local\LiveChat,_Inc
2014-07-30 19:11 - 2014-07-29 20:05 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Apple Computer
2014-07-30 19:10 - 2014-07-30 19:10 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-07-30 17:28 - 2014-07-30 17:28 - 00276616 _____ () C:\windows\Minidump\073014-3884-01.dmp
2014-07-29 20:08 - 2014-07-29 20:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-29 20:08 - 2014-07-29 20:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-29 20:05 - 2014-07-29 20:05 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Users\USER\AppData\Local\Apple Computer
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Users\USER\AppData\Local\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\ProgramData\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\iTunes
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\iPod
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files\Bonjour
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-07-29 20:05 - 2014-07-29 20:05 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-07-29 14:49 - 2014-07-29 14:49 - 00000000 ____D () C:\windows\pss
2014-07-27 21:23 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-27 11:32 - 2010-11-21 05:47 - 00007524 _____ () C:\windows\PFRO.log
2014-07-26 20:07 - 2014-07-26 15:27 - 00000000 ____D () C:\Users\USER\AppData\Roaming\TeamViewer
2014-07-26 13:45 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-24 20:16 - 2014-07-22 17:16 - 00000000 ____D () C:\Users\USER
2014-07-24 16:51 - 2014-07-22 17:30 - 00000000 ____D () C:\Users\USER\Documents\Desktop-Backup
2014-07-23 21:10 - 2014-07-22 18:35 - 00000039 _____ () C:\windows\vbaddin.ini
2014-07-23 21:10 - 2014-07-22 18:21 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-22 19:27 - 2014-07-22 19:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-07-22 19:27 - 2014-07-22 19:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-07-22 18:59 - 2014-07-22 18:00 - 00000000 ____D () C:\ProgramData\G Data
2014-07-22 18:59 - 2009-07-14 07:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2014-07-22 18:55 - 2014-07-22 17:44 - 00000000 ____D () C:\Users\USER\AppData\Roaming\PhonerLite
2014-07-22 18:55 - 2009-07-14 06:45 - 00346432 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-22 18:54 - 2014-07-22 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data AntiVirus
2014-07-22 18:54 - 2014-07-22 18:04 - 00064000 _____ (G Data Software AG) C:\windows\system32\Drivers\PktIcpt.sys
2014-07-22 18:54 - 2014-07-22 18:03 - 00142336 _____ (G Data Software AG) C:\windows\system32\Drivers\MiniIcpt.sys
2014-07-22 18:54 - 2014-07-22 18:03 - 00064000 _____ (G Data Software AG) C:\windows\system32\Drivers\gdwfpcd64.sys
2014-07-22 18:54 - 2014-07-22 18:03 - 00061440 _____ (G Data Software AG) C:\windows\system32\Drivers\HookCentre.sys
2014-07-22 18:54 - 2014-07-22 18:03 - 00055808 _____ (G Data Software AG) C:\windows\system32\Drivers\GDBehave.sys
2014-07-22 18:54 - 2014-07-22 18:03 - 00020992 _____ (G Data Software AG) C:\windows\system32\Drivers\GDKBFlt64.sys
2014-07-22 18:53 - 2014-07-22 18:03 - 00004018 _____ () C:\windows\DPINST.LOG
2014-07-22 18:44 - 2014-07-22 18:44 - 00000000 ____D () C:\Users\USER\AppData\Local\Adobe
2014-07-22 18:44 - 2014-07-22 17:17 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Adobe
2014-07-22 18:36 - 2014-07-22 18:36 - 00000000 ___SD () C:\Users\USER\Documents\Meine Shapes
2014-07-22 18:35 - 2014-07-22 18:35 - 00000162 _____ () C:\windows\ODBC.INI
2014-07-22 18:35 - 2014-07-22 18:23 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Neues Microsoft Office-Dokument.lnk
2014-07-22 18:35 - 2014-07-22 18:23 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Microsoft Office-Dokument öffnen.lnk
2014-07-22 18:35 - 2014-07-22 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-22 18:29 - 2014-07-22 18:29 - 00000000 ____D () C:\Users\USER\AppData\Local\TechSmith
2014-07-22 18:29 - 2014-07-22 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-07-22 18:29 - 2014-07-22 18:29 - 00000000 ____D () C:\Program Files (x86)\TechSmith
2014-07-22 18:29 - 2014-07-22 17:17 - 00086160 _____ () C:\Users\USER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-22 18:26 - 2014-07-22 18:26 - 00000000 ____D () C:\Users\USER\AppData\Roaming\TimeCamp
2014-07-22 18:26 - 2014-07-22 18:26 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\TimeCamp
2014-07-22 18:24 - 2014-07-22 18:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-07-22 18:23 - 2014-07-22 18:23 - 00000000 ____D () C:\windows\PCHEALTH
2014-07-22 18:23 - 2014-07-22 18:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-07-22 18:23 - 2014-07-22 18:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-22 18:22 - 2014-07-22 18:22 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-22 18:22 - 2011-04-12 09:55 - 00000000 ____D () C:\windows\ShellNew
2014-07-22 18:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-22 18:21 - 2014-07-22 18:21 - 00000000 __RHD () C:\MSOCache
2014-07-22 18:21 - 2014-07-22 18:21 - 00000000 ____D () C:\Users\USER\AppData\Local\Microsoft Help
2014-07-22 18:20 - 2014-07-22 18:19 - 00000000 ____D () C:\Users\USER\AppData\Roaming\DAEMON Tools Lite
2014-07-22 18:20 - 2014-07-22 18:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-07-22 18:20 - 2014-07-22 18:18 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-07-22 18:19 - 2014-07-22 18:19 - 00283064 _____ (Disc Soft Ltd) C:\windows\system32\Drivers\dtsoftbus01.sys
2014-07-22 18:19 - 2014-07-22 18:19 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-07-22 18:17 - 2014-07-22 18:17 - 00106272 _____ (G Data Software) C:\windows\system32\Drivers\GRD.sys
2014-07-22 18:17 - 2014-07-22 18:17 - 00018160 _____ (G Data Software) C:\windows\system32\Drivers\GdPhyMem.sys
2014-07-22 18:05 - 2014-07-22 17:49 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-22 18:03 - 2014-07-22 18:03 - 00000779 _____ () C:\Users\USER\AppData\Roaming\gdscan.log
2014-07-22 18:03 - 2014-07-22 18:03 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf
2014-07-22 18:03 - 2014-07-22 18:03 - 00000000 ____D () C:\Program Files (x86)\G Data
2014-07-22 17:49 - 2014-07-22 17:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-22 17:49 - 2014-07-22 17:49 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-22 17:44 - 2014-07-22 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhonerLite
2014-07-22 17:44 - 2014-07-22 17:44 - 00000000 ____D () C:\Program Files (x86)\PhonerLite
2014-07-22 17:39 - 2014-07-22 17:39 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-22 17:38 - 2014-07-22 17:38 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LiveChat
2014-07-22 17:38 - 2014-07-22 17:38 - 00000000 ____D () C:\Users\USER\AppData\Roaming\LiveChat
2014-07-22 17:34 - 2014-07-22 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-07-22 17:34 - 2014-07-22 17:34 - 00000000 ____D () C:\Program Files\7-Zip
2014-07-22 17:29 - 2014-07-22 17:28 - 00000000 ____D () C:\Program Files (x86)\Belvedere
2014-07-22 17:28 - 2014-07-22 17:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belvedere
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\Users\USER\AppData\Local\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\ProgramData\Skype
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-22 17:23 - 2014-06-12 13:47 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-22 17:23 - 2011-04-12 09:55 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-22 17:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-22 17:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-22 17:22 - 2014-07-22 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-22 17:22 - 2014-07-22 17:19 - 00000000 ____D () C:\Users\USER\AppData\Local\Google
2014-07-22 17:22 - 2014-07-22 17:19 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-22 17:22 - 2014-06-12 13:35 - 00000000 ____D () C:\windows\system32\MRT
2014-07-22 17:22 - 2014-06-12 13:34 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-22 17:20 - 2014-07-16 20:21 - 00001912 _____ () C:\windows\epplauncher.mif
2014-07-22 17:19 - 2014-07-22 17:19 - 00004110 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-22 17:19 - 2014-07-22 17:19 - 00003858 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-22 17:19 - 2014-07-22 17:19 - 00000000 ____D () C:\Users\USER\AppData\Local\Apps\2.0
2014-07-22 17:18 - 2014-07-22 17:18 - 00000000 __SHD () C:\Users\USER\AppData\Local\EmieUserList
2014-07-22 17:18 - 2014-07-22 17:18 - 00000000 __SHD () C:\Users\USER\AppData\Local\EmieSiteList
2014-07-22 17:17 - 2014-07-22 17:17 - 00001431 _____ () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-22 17:17 - 2014-07-22 17:17 - 00000000 ____D () C:\Users\USER\AppData\Roaming\ATI
2014-07-22 17:17 - 2014-07-22 17:17 - 00000000 ____D () C:\Users\USER\AppData\Local\ATI
2014-07-22 17:16 - 2014-07-22 17:16 - 00000020 ___SH () C:\Users\USER\ntuser.ini
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Vorlagen
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Startmenü
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Netzwerkumgebung
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Lokale Einstellungen
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Eigene Dateien
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Druckumgebung
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Documents\Eigene Musik
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Documents\Eigene Bilder
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\AppData\Local\Verlauf
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\AppData\Local\Anwendungsdaten
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 _SHDL () C:\Users\USER\Anwendungsdaten
2014-07-22 17:16 - 2014-07-22 17:16 - 00000000 ____D () C:\Users\USER\AppData\Local\VirtualStore
2014-07-17 06:15 - 2014-07-17 06:15 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-17 06:14 - 2009-07-14 07:32 - 00032768 _____ () C:\windows\system32\config\BCD-Template
2014-07-16 20:24 - 2009-07-14 07:32 - 00000000 ____D () C:\windows\system32\restore
2014-07-16 20:21 - 2014-06-10 13:33 - 00000051 _____ () C:\windows\smsts.ini
2014-07-16 20:21 - 2014-06-10 13:32 - 00000000 _____ () C:\windows\authtest.txt
2014-07-16 20:20 - 2014-07-16 20:20 - 00003298 _____ () C:\windows\System32\Tasks\SamsungMagician
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\ProgramData\Samsung
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\ProgramData\ATI
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-07-16 20:20 - 2014-07-16 20:20 - 00000000 _____ () C:\windows\ativpsrm.bin
2014-07-16 20:19 - 2014-07-16 20:19 - 00062044 _____ () C:\windows\SysWOW64\CCCInstall_201407162019243925.log
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\ProgramData\AMD
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files\ATI
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files\AMD
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-07-16 20:19 - 2014-07-16 20:19 - 00000000 ____D () C:\AMD
2014-07-16 20:19 - 2014-07-16 20:18 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-07-16 20:18 - 2014-06-17 13:56 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-16 20:17 - 2014-06-10 13:32 - 00000000 __SHD () C:\Recovery
2014-07-16 20:17 - 2014-06-10 12:55 - 00003652 _____ () C:\windows\TSSysprep.log
2014-07-16 20:17 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____D () C:\windows\SysWOW64\RTCOM
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____D () C:\windows\CSC
2014-07-16 20:16 - 2014-07-16 20:16 - 00000000 ____D () C:\Program Files\Realtek
2014-07-16 15:07 - 2014-07-17 06:14 - 00000000 ____D () C:\windows\Panther
2014-07-16 15:07 - 2009-07-14 06:46 - 00004059 _____ () C:\windows\DtcInstall.log
2014-07-16 15:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\sysprep
2014-07-16 14:36 - 2014-07-16 14:36 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

Some content of TEMP:
====================
C:\Users\USER\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprn_wtl.dll
C:\Users\USER\AppData\Local\Temp\JavaRa.exe
C:\Users\USER\AppData\Local\Temp\jli.dll
C:\Users\USER\AppData\Local\Temp\jre-7u65-windows-i586.exe
C:\Users\USER\AppData\Local\Temp\keytool.exe
C:\Users\USER\AppData\Local\Temp\msvcr100.dll
C:\Users\USER\AppData\Local\Temp\node.exe
C:\Users\USER\AppData\Local\Temp\ose00000.exe
C:\Users\USER\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-28 13:29

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---


Addition
Zitat:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-08-2014
Ran by USER at 2014-08-04 15:00:47
Running from C:\Users\USER\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data AntiVirus (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data AntiVirus (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ACP Application (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Belvedere 0.7.1 (HKLM-x32\...\Belvedere) (Version: 0.7.1 - Lifehacker)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)
G Data AntiVirus (HKLM-x32\...\{B9FC0A7D-FA1D-4347-ABED-AD8AD5305633}) (Version: 25.0.1.4 - G Data Software AG)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
Jing (HKLM-x32\...\{22800204-9E53-45C7-B6F3-5BB0F1C1A147}) (Version: 2.8.13007.1 - TechSmith Corporation)
LiveChat (HKCU\...\f2e845e06ef272ed) (Version: 8.0.1.5 - LiveChat)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft)
Microsoft Office Visio 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Visio MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio Professional 2007 (HKLM-x32\...\VISPRO) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Visio Professional 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
PhonerLite 2.16 (HKLM-x32\...\PhonerLite_is1) (Version: 2.16 - Heiko Sommerfeldt)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6959 - Realtek Semiconductor Corp.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.4.0 - Samsung Electronics)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
TimeCamp (HKCU\...\TimeCamp) (Version: 1.3.4 - Time Solutions)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_VISPRO_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1847539703-1180513616-4123613610-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

01-08-2014 11:23:16 Windows Update
02-08-2014 10:01:45 Windows Update
03-08-2014 18:36:38 Knuddels Updater

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {4834B3E5-4B00-43E2-90A2-E593B02C6350} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-05-19] (Samsung Electronics.)
Task: {6AE64C5B-7698-4BAB-BF42-6884BA54BD2E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)
Task: {D47A2594-84A7-4E57-BBF3-014E4F5EF506} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D818B18C-250D-4591-BA68-7EE02FDFDF88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-04-17 21:55 - 2014-04-17 21:55 - 00082432 _____ () C:\AMD\amdacpusrsvc.exe
2014-05-20 03:38 - 2014-05-20 03:38 - 00340088 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-08-04 13:52 - 2014-08-04 13:52 - 00043008 _____ () c:\users\USER\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprn_wtl.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\USER\AppData\Roaming\Dropbox\bin\libcef.dll
2014-07-22 17:22 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-22 17:22 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-22 17:22 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-22 17:22 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-22 17:22 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^USER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^PhonerLite.lnk => C:\windows\pss\PhonerLite.lnk.Startup
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LiveChat => C:\Users\USER\AppData\Local\Apps\2.0\81ZM5WMC.T3G\BPM33G9A.HH9\live..tion_53d0b2ec63c927ff_0008.0000_451c6c489fc3088f\LiveChat.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: TimeCamp => "C:\Users\USER\AppData\Local\TimeCamp\timecamp.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/04/2014 01:54:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2014 03:46:26 AM) (Source: amdacpusrsvc) (EventID: 0) (User: )
Description: amdacpusrsvc[EVENT]: SERVICE_CONTROL_POWEREVENT: RESUME: FAILED.

Error: (08/04/2014 03:46:26 AM) (Source: amdacpusrsvc) (EventID: 0) (User: )
Description: amdacpusrsvcacpusrsvc: GraphicsMemory API Wrapper: Dummy Packet Submission FAILED

Error: (08/04/2014 01:12:15 AM) (Source: amdacpusrsvc) (EventID: 0) (User: )
Description: amdacpusrsvc[EVENT]: SERVICE_CONTROL_POWEREVENT: RESUME: FAILED.

Error: (08/04/2014 01:12:15 AM) (Source: amdacpusrsvc) (EventID: 0) (User: )
Description: amdacpusrsvcacpusrsvc: GraphicsMemory API Wrapper: Dummy Packet Submission FAILED

Error: (08/03/2014 07:06:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/03/2014 03:34:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/03/2014 01:46:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2014 09:08:35 PM) (Source: amdacpusrsvc) (EventID: 0) (User: )
Description: amdacpusrsvc[EVENT]: SERVICE_CONTROL_POWEREVENT: RESUME: FAILED.

Error: (08/02/2014 09:08:35 PM) (Source: amdacpusrsvc) (EventID: 0) (User: )
Description: amdacpusrsvcacpusrsvc: GraphicsMemory API Wrapper: Dummy Packet Submission FAILED


System errors:
=============
Error: (08/04/2014 01:52:12 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GDKBFlt

Error: (08/03/2014 07:06:21 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (08/03/2014 07:06:21 PM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (08/03/2014 07:06:20 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (08/03/2014 07:06:20 PM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (08/03/2014 07:04:58 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GDKBFlt

Error: (08/03/2014 03:32:43 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GDKBFlt

Error: (08/03/2014 02:29:02 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (08/03/2014 02:29:02 PM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (08/03/2014 02:29:02 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 30%
Total physical RAM: 8120.01 MB
Available physical RAM: 5668.36 MB
Total Pagefile: 16238.2 MB
Available Pagefile: 13119.15 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OSDisk) (Fixed) (Total:81.13 GB) (Free:43.87 GB) NTFS
Drive d: () (Fixed) (Total:30.17 GB) (Free:14.21 GB) NTFS
Drive g: (MSOfficeSESP3) (CDROM) (Total:1.87 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: BC610667)
Partition 1: (Active) - (Size=499 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=81 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS)

==================== End Of Log ============================
__________________
Geändert von nearmint (04.08.2014 um 14:43 Uhr) Grund: user omitted

Alt 05.08.2014, 06:30   #4
schrauber
/// the machine
/// TB-Ausbilder
 
http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt - Standard

http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt


Jo, das ist bekannte Malware.

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt
anwendung, beenden, browser, exploit, fenster, foto, gdata, gekauft, komplett, leute, links, neuem, neuen, nichts, privatsphäre, problem, programme, scan, scanner, schließen, tabs öffnen, threads, ungewollt, windows, windows 7, öffnet


« Nach flash Video Internet langsam | DHL fake Mail »


Ähnliche Themen: http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt


  1. Windows 7: Firefox öffnet selbstständig in kurzen Abständen URL: http://98uj8.de/[...]
    Log-Analyse und Auswertung - 22.08.2014 (19)
  2. Laptop ruft selbst die seite: http://98uj8.de/s3brsn5ba66mgfzeinrum#noad site:www.trojaner-board.de auf
    Log-Analyse und Auswertung - 15.08.2014 (11)
  3. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad Öffnet mehrere Seiten im Firefox
    Plagegeister aller Art und deren Bekämpfung - 07.08.2014 (9)
  4. Browser öffnet 98uj8.de/s3brsn5ba66mgfzeinrum#noad
    Plagegeister aller Art und deren Bekämpfung - 06.08.2014 (12)
  5. Webseite http://www.98uj8.de/s3brsn5ba66mgfzeinrum#noad öffnet sich von alleine
    Log-Analyse und Auswertung - 06.08.2014 (9)
  6. http://98uj8.de/s3brsn5ba66mgfzeinrum öffnet sich x mal
    Plagegeister aller Art und deren Bekämpfung - 06.08.2014 (18)
  7. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öffnet sich im Sekundentakt
    Log-Analyse und Auswertung - 05.08.2014 (5)
  8. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad Öffnet sich mehrmals im Browser. :(
    Plagegeister aller Art und deren Bekämpfung - 05.08.2014 (18)
  9. Mein Computer hat eigenmächtig die Seite http://98uj8.de/s3brsn5ba66mgfzeinrum#noad aufgerufen
    Plagegeister aller Art und deren Bekämpfung - 05.08.2014 (17)
  10. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öfnet sich hintereinander
    Plagegeister aller Art und deren Bekämpfung - 04.08.2014 (9)
  11. h**p://98uj8.de/s3brsn5ba66mgfzeinrum#ad 98uj8.de öffnet sich selbstständig
    Plagegeister aller Art und deren Bekämpfung - 04.08.2014 (17)
  12. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öffnet sich Mehrfach
    Plagegeister aller Art und deren Bekämpfung - 03.08.2014 (14)
  13. http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öffnete sich selbstständig ca 30x
    Plagegeister aller Art und deren Bekämpfung - 02.08.2014 (4)
  14. Google Chrome öffnet 98uj8.de/s3brsn5ba66mgfzeinrum#noad selbstständig
    Plagegeister aller Art und deren Bekämpfung - 02.08.2014 (1)
  15. Windows 8: Firefox öffnet aus dem nichts unzählige Male "hXXp://98uj8.de/s3brsn5ba66mgfzeinrum#noad"
    Log-Analyse und Auswertung - 01.08.2014 (9)
  16. Windows 7 Trojaner : h**p://98uj8.de/s3brsn5ba66mgfzeinrum#noad
    Plagegeister aller Art und deren Bekämpfung - 01.08.2014 (5)
  17. Windows 7: Firefox öffnet http://98uj8.de/s3brsn5ba66mgfzeinrum#noad
    Plagegeister aller Art und deren Bekämpfung - 01.08.2014 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt - Wie hier schon viele Leute, haben wir bei einem neuem PC das Problem, dass sich hin- und wieder hxxp://98uj8.de/ [...] #noad #ad Links ausschließlich im in Windows konfigurierten Standartbrowser von - http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt...
Archiv
Du betrachtest: http://98uj8.de/ ... #noad #ad - Webbrowser öffnet sich ungewollt auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132