| |
| |||||||
Log-Analyse und Auswertung: edealspop und n10.adshostnet.com/ads? störtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
03.03.2015, 10:25
| #1 |
 |  edealspop und n10.adshostnet.com/ads? stört Guten Tag, wie im Titel schon steht habe ich wohl einen Webvirus. Da mir letztes mal hier schon geholfen wurde, hoffe ich das mir jetzt wieder geholfen werden kann. Wie kann das angehen, das ich zwei mal den gleichen Virus bekomme? Gruß |
|
03.03.2015, 10:28
| #2 |
| /// the machine /// TB-Ausbilder    | edealspop und n10.adshostnet.com/ads? stört hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
03.03.2015, 10:33
| #3 |
| | edealspop und n10.adshostnet.com/ads? stört FRST:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015 Ran by André (administrator) on ALIENWAREGAMING on 03-03-2015 10:30:04 Running from C:\Users\André\Downloads Loaded Profiles: André & UpdatusUser & (Available profiles: André & UpdatusUser) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe () C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe (SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Program Files (x86)\Verbindungsassistent\WTGService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe () C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe (AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe () C:\Users\André\AppData\Local\codecwinsockapi\commanditvdataSched.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Dell) C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe () C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe () C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe () C:\Program Files (x86)\Opera\27.0.1689.76\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [] => [X] HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware) HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd) Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [NVIDIA GeForce Experience] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe [806688 2013-07-27] (NVIDIA) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [IAStorUI] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe [632376 2012-11-19] (Intel Corporation) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DsLauncher] => C:\Program Files (x86)\AlienRespawn\dslauncher.exe [312640 2012-01-27] (SoftThinks - Dell) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [PC-Doctor Module] => C:\Program Files\AlienAutopsy\pcdlauncher.exe [457720 2014-01-31] (PC-Doctor, Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DellSystemDetect] => C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe [283432 2015-02-20] (Dell) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [NVIDIA GeForce Experience] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe [806688 2013-07-27] (NVIDIA) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [IAStorUI] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe [632376 2012-11-19] (Intel Corporation) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DsLauncher] => C:\Program Files (x86)\AlienRespawn\dslauncher.exe [312640 2012-01-27] (SoftThinks - Dell) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [PC-Doctor Module] => C:\Program Files\AlienAutopsy\pcdlauncher.exe [457720 2014-01-31] (PC-Doctor, Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DellSystemDetect] => C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe [283432 2015-02-20] (Dell) HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll => c:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation) AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe () Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG) Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => No File ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => No File ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [S-1-5-21-829858747-3269657560-2013248277-1001] => Internet Explorer proxy is enabled. ProxyServer: [S-1-5-21-829858747-3269657560-2013248277-1001] => http=127.0.0.1:11786 ProxyEnable: [S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] => Internet Explorer proxy is enabled. ProxyServer: [S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] => http=127.0.0.1:11786 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01 HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01 SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 16 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll No File FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll No File FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @protectdisc.com/NPMPDRM -> C:\Users\André\AppData\Local\mpDRM\Binaries\NPMPDRM.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @protectdisc.com/NPMPDRM -> C:\Users\André\AppData\Local\mpDRM\Binaries\NPMPDRM.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF user.js: detected! => C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517\user.js StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR Profile: C:\Users\André\AppData\Local\Google\Chrome\User Data\default ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.) R2 codecwinsockapi.exe; C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe [229888 2015-03-02] () [File not signed] R2 controlfirmwareGUI; C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe [83456 2015-01-19] () [File not signed] S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-02-20] (Creative Labs) [File not signed] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-02-20] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-27] (Creative Technology Ltd) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-01] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation) R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed] R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-20] (Electronic Arts) R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed] R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2015-02-12] (AVG Technologies) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-12] (AVG Technologies) R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-12] (AVG Technologies) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [330696 2010-11-18] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.) R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-27] (Creative Technology Ltd) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] () R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation) S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-27] (DT Soft Ltd) S3 HDJCtrl; C:\Windows\System32\Drivers\HDJCtrl.sys [38704 2013-05-21] (© Guillemot R&D, 2012. All rights reserved.) S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [274736 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.) S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [121600 2013-05-11] (Huawei Technologies Co., Ltd.) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-11-20] (Intel Corporation) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-03] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-12-10] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-11-24] (TuneUp Software) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X] U5 ewusbnet; C:\Windows\SysWOW64\Drivers\ewusbnet.sys [256000 2013-05-11] (Huawei Technologies Co., Ltd.) U5 ew_hwusbdev; C:\Windows\SysWOW64\Drivers\ew_hwusbdev.sys [117248 2013-05-11] (Huawei Technologies Co., Ltd.) S4 NVHDA; system32\drivers\nvhda64v.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 10:30 - 2015-03-03 10:30 - 00028603 _____ () C:\Users\André\Downloads\FRST.txt 2015-03-03 10:29 - 2015-03-03 10:30 - 00000000 ____D () C:\FRST 2015-03-03 10:29 - 2015-03-03 10:29 - 02092544 _____ (Farbar) C:\Users\André\Downloads\FRST64.exe 2015-03-02 20:14 - 2015-03-02 20:14 - 00000000 ____D () C:\Users\André\AppData\Local\codecwinsockapi 2015-03-02 20:14 - 2015-03-02 20:10 - 02750425 _____ ( ) C:\Program Files (x86)\distribution-installer.exe 2015-03-02 20:14 - 2015-03-02 20:10 - 02664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe 2015-03-02 20:14 - 2015-02-26 10:48 - 01032603 _____ (wauctla ) C:\Program Files (x86)\wauctla-setup.exe 2015-03-02 16:53 - 2015-03-02 16:54 - 00000000 ____D () C:\Users\André\Desktop\40.Geburtstag 28.2.2015 2015-03-02 13:43 - 2015-03-02 13:43 - 00001768 _____ () C:\Users\André\Desktop\SCasino.lnk 2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\SysWOW64\NV 2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\system32\NV 2015-02-28 18:52 - 2015-02-28 18:52 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-27 11:26 - 2015-02-28 23:43 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner (2) 2015-02-26 09:27 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-26 09:27 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls 2015-02-25 22:55 - 2015-02-25 22:55 - 51133698 _____ () C:\Users\André\Downloads\bdp7500b2_12_fus_deu.zip 2015-02-25 22:29 - 2015-02-25 22:29 - 17304752 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-02-24 11:44 - 2015-02-24 11:44 - 18115808 _____ () C:\Users\André\Downloads\DMXControl_2.12.2_Setup.exe 2015-02-24 11:44 - 2015-02-24 11:44 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DMXControl 2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeStyler 2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\Program Files (x86)\FreeStyler 2015-02-24 11:21 - 2006-06-28 15:44 - 00262144 _____ () C:\Windows\SysWOW64\dashard2006.dll 2015-02-24 11:21 - 2004-03-16 11:04 - 00110592 _____ () C:\Windows\SysWOW64\dashard.dll 2015-02-24 11:03 - 2015-02-24 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Afterglow Slim 2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dw-lighting 2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\Program Files (x86)\dw-lighting 2015-02-23 23:03 - 2015-02-23 23:03 - 01432904 _____ (RealTimeGaming Software) C:\Users\André\Downloads\setup.exe 2015-02-23 23:03 - 2015-02-23 23:03 - 00001812 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Europa Casino.lnk 2015-02-23 23:02 - 2015-02-23 23:03 - 00000000 ____D () C:\Users\André\AppData\Local\Europa Casino 2015-02-22 21:38 - 2015-02-22 21:38 - 00002038 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\888casino.lnk 2015-02-22 21:38 - 2015-02-22 21:38 - 00002014 _____ () C:\Users\UpdatusUser\Desktop\888casino.lnk 2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\888casino 2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\888casino 2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Program Files (x86)\CasinoOnNet 2015-02-22 12:46 - 2015-03-02 13:43 - 00001770 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\SCasino.lnk 2015-02-22 12:46 - 2015-03-02 13:43 - 00000000 ____D () C:\Users\André\AppData\Local\SCasino 2015-02-21 13:49 - 2015-02-21 13:49 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2015-02-20 22:08 - 2015-03-03 10:15 - 00000000 ____D () C:\ProgramData\Bigfoot Networks 2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2015-02-20 21:44 - 2015-03-03 10:13 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-20 21:44 - 2015-02-20 21:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2015-02-20 21:44 - 2015-02-20 21:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\SoftThinks 2015-02-20 21:44 - 2013-05-28 00:08 - 00002122 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2015-02-20 21:44 - 2013-04-28 10:02 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help 2015-02-20 21:44 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-20 21:44 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-02-20 21:43 - 2012-06-05 08:25 - 06156136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 03152232 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 02561896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00888680 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-02-20 21:43 - 2012-06-05 08:25 - 00862056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00118120 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00063336 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00055656 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2015-02-20 21:43 - 2012-06-05 08:24 - 02644963 _____ () C:\Windows\system32\nvcoproc.bin 2015-02-20 21:33 - 2013-12-10 15:32 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-02-20 21:33 - 2013-12-10 15:32 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-02-20 21:33 - 2013-12-10 15:32 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-02-20 21:33 - 2013-12-10 15:32 - 00023287 _____ () C:\Windows\system32\nvinfo.pb 2015-02-20 21:33 - 2012-06-05 13:55 - 01753448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll 2015-02-20 21:33 - 2012-06-05 13:55 - 01468264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll 2015-02-20 18:01 - 2015-02-20 18:01 - 00000000 ____D () C:\Users\André\AppData\Local\Downloaded Installations 2015-02-20 18:00 - 2015-02-24 11:18 - 00019522 _____ () C:\Windows\DPINST.LOG 2015-02-20 18:00 - 2015-02-20 18:00 - 00001292 _____ () C:\Windows\Synaptics.log 2015-02-20 17:56 - 2015-02-20 17:56 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00000184 _____ () C:\Windows\Setup.log 2015-02-20 17:56 - 2015-02-20 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative 2015-02-20 17:56 - 2012-01-13 11:23 - 01944064 ____N (Creative) C:\Windows\system32\Sens_oal.dll 2015-02-20 17:56 - 2012-01-13 11:21 - 02906586 ____N (Creative) C:\Windows\SysWOW64\Sens_oal.dll 2015-02-20 17:56 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\Windows\Updreg.EXE 2015-02-20 17:55 - 2012-03-27 18:58 - 01052760 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CtHda.sys 2015-02-20 17:55 - 2012-03-27 18:54 - 00134144 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaS64.exe 2015-02-20 17:55 - 2012-03-27 18:53 - 00574464 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaC64.dll 2015-02-20 17:55 - 2012-03-27 18:52 - 00470016 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaCtl.dll 2015-02-20 17:55 - 2012-03-27 18:52 - 00122880 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe 2015-02-20 17:55 - 2012-03-02 22:41 - 00025088 _____ (Creative Technology Ltd.) C:\Windows\MEptDef.exe 2015-02-20 17:55 - 2012-02-29 12:34 - 00010240 ____R (Creative Technology Ltd.) C:\Windows\InstHlp.exe 2015-02-20 17:55 - 2012-02-13 19:16 - 00889856 _____ (Creative Technology Ltd.) C:\Windows\system32\CtHRFX64.dll 2015-02-20 17:55 - 2012-02-13 19:15 - 00011180 _____ () C:\Windows\CtHRFX64.hda 2015-02-20 17:55 - 2011-10-28 11:45 - 00004894 _____ () C:\Windows\cthdaGER.reg 2015-02-20 17:55 - 2011-10-24 10:02 - 00004850 _____ () C:\Windows\cthdaeng.reg 2015-02-20 17:55 - 2010-09-15 11:39 - 00235520 _____ (Creative Technology Limited) C:\Windows\system32\CtDco64.dll 2015-02-20 17:55 - 2006-12-05 14:52 - 00048400 _____ (Creative Technology Ltd.) C:\Windows\AddCat.exe 2015-02-20 17:46 - 2012-02-23 05:46 - 00211496 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys 2015-02-20 17:46 - 2012-02-23 05:46 - 00184360 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys 2015-02-20 17:46 - 2012-02-23 05:46 - 00039976 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys 2015-02-20 17:46 - 2012-02-23 05:46 - 00021544 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys 2015-02-20 17:37 - 2015-02-20 17:37 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2015-02-20 17:32 - 2011-12-06 15:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2015-02-20 12:19 - 2015-02-12 17:39 - 00044856 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll 2015-02-20 12:19 - 2015-02-12 17:39 - 00036664 _____ (AVG Technologies) C:\Windows\SysWOW64\uxtuneup.dll 2015-02-20 11:07 - 2015-02-20 11:07 - 00000000 ____D () C:\Users\André\AppData\Roaming\PCDr 2015-02-20 11:06 - 2015-03-03 10:16 - 00003504 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2015-02-20 11:06 - 2015-02-20 11:06 - 00000000 ____D () C:\ProgramData\PCDr 2015-02-20 10:31 - 2015-02-20 10:31 - 00002227 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2015-02-20 10:31 - 2015-02-20 10:31 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-02-20 10:31 - 2015-02-20 10:31 - 00002203 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk 2015-02-20 10:31 - 2015-02-20 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-02-20 10:31 - 2015-02-12 17:39 - 00041784 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe 2015-02-20 10:31 - 2015-02-12 17:39 - 00030520 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll 2015-02-20 10:31 - 2015-02-12 17:39 - 00025912 _____ (AVG Technologies) C:\Windows\SysWOW64\authuitu.dll 2015-02-20 10:22 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-02-20 10:21 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files\iPod 2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files (x86)\iTunes 2015-02-20 10:01 - 2015-02-20 10:01 - 00000000 ____D () C:\Dell 2015-02-20 09:55 - 2015-02-20 09:56 - 00000000 ____D () C:\ProgramData\Dell 2015-02-18 23:17 - 2015-02-18 23:17 - 00040681 _____ () C:\ComboFix.txt 2015-02-18 23:08 - 2015-03-03 10:13 - 00008449 _____ () C:\Windows\setupact.log 2015-02-18 23:08 - 2015-03-03 10:12 - 00020428 _____ () C:\Windows\PFRO.log 2015-02-18 22:52 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-02-18 22:52 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-02-18 22:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-02-18 22:51 - 2015-02-18 23:18 - 00000000 ____D () C:\Qoobox 2015-02-18 22:03 - 2015-02-24 22:03 - 00003866 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1424293363 2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\Users\Public\Desktop\Opera 27.lnk 2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 27.lnk 2015-02-18 16:37 - 2015-02-19 12:52 - 00000000 ____D () C:\Windows\system32\log 2015-02-18 10:07 - 2015-02-18 10:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 2015-02-17 10:20 - 2015-02-18 16:55 - 00003858 _____ () C:\Windows\System32\Tasks\SSBkgdUpdate 2015-02-17 10:07 - 2015-02-17 10:07 - 00000000 ____D () C:\Users\André\AppData\Local\Scansoft 2015-02-16 11:43 - 2015-02-16 11:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2015-02-16 11:42 - 2015-02-16 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Benutzerregistrierung 2015-02-16 11:37 - 2015-02-16 11:37 - 00000424 _____ () C:\Windows\MAXLINK.INI 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Users\André\AppData\Roaming\ScanSoft 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\ScanSoft 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\InstallShield 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Program Files (x86)\ScanSoft 2015-02-16 11:33 - 2015-02-16 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Manual 2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Notes for Windows Vista 2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series 2015-02-16 11:28 - 2006-12-25 21:00 - 00236544 _____ (CANON INC.) C:\Windows\system32\CNMLM8R.DLL 2015-02-16 11:27 - 2015-02-16 11:27 - 00000000 ___HD () C:\Program Files\CanonBJ 2015-02-16 11:27 - 2006-11-10 03:03 - 01337344 _____ (CANON INC.) C:\Windows\system32\CNCC140.DLL 2015-02-16 11:27 - 2006-11-10 03:02 - 00049664 _____ (CANON INC.) C:\Windows\system32\CNCI140.DLL 2015-02-16 11:27 - 2006-06-29 06:30 - 00017408 _____ (Canon Inc.) C:\Windows\system32\cnco140.dll 2015-02-16 11:27 - 2006-05-26 08:23 - 00090624 _____ (Canon Inc.) C:\Windows\system32\CNCL140.DLL 2015-02-15 21:13 - 2015-02-15 21:13 - 00007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg 2015-02-15 20:26 - 2015-02-15 20:26 - 00000000 ____D () C:\Program Files\Dell 2015-02-15 14:06 - 2015-02-15 14:06 - 00003198 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask-Delay 2015-02-13 09:39 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-13 09:39 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-13 09:39 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-13 09:39 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-12 21:34 - 2015-02-12 21:34 - 00000000 ____D () C:\ProgramData\Grisoft 2015-02-12 21:29 - 2015-02-12 21:29 - 00000000 ____D () C:\Users\André\Downloads\backups 2015-02-11 13:33 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-02-11 13:33 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-11 13:33 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-02-11 13:33 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-11 13:33 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-11 13:33 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-11 13:33 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-11 13:33 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-11 13:33 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-11 13:33 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-11 13:33 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-11 13:33 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-11 13:33 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-11 13:33 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-11 13:33 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-11 13:33 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-11 13:33 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-11 13:33 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-11 13:33 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-11 13:33 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-11 13:33 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-02-11 13:33 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-11 13:33 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-11 13:33 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-11 13:33 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-11 13:33 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-11 13:33 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-11 13:33 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-11 13:33 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-11 13:33 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-11 13:33 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-11 13:33 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-11 13:33 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-11 13:33 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-11 13:33 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-11 13:33 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-11 13:33 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-11 13:33 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-11 13:33 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-11 13:33 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-11 13:33 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-11 13:33 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-11 13:33 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-11 13:33 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-11 13:33 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-11 13:33 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-11 13:33 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-11 13:33 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-11 13:33 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-02-11 13:33 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-11 13:33 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-11 13:33 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-11 13:33 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-11 13:33 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-11 13:33 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-02-11 13:32 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-11 13:32 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-02-11 13:32 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-11 13:32 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-02-11 13:32 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-02-11 13:32 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-02-11 13:32 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-02-11 13:32 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-02-11 13:32 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-11 13:32 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-02-11 13:32 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-11 13:32 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-02-11 13:32 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-02-11 13:32 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-02-11 13:32 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-11 13:32 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-02-11 13:32 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-11 13:32 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-11 13:32 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-11 13:32 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-11 13:32 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-11 13:32 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-11 13:32 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-11 13:32 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-11 13:31 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-11 13:31 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-11 13:31 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2015-02-11 13:29 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-11 13:29 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-11 13:26 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-11 13:26 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-02-11 13:26 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-02-11 13:26 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-02-11 13:26 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-02-11 13:26 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-02-11 13:26 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-02-11 13:26 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-11 12:07 - 2015-02-11 12:07 - 01128916 _____ (www.hellopdf.com ) C:\Users\André\Downloads\nw_33261_pdfwordsetupexe.exe 2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\goodChoice 2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\Color My SNS 2015-02-10 18:06 - 2015-02-10 18:06 - 00709564 _____ () C:\Users\André\Downloads\delfix_10.8.exe 2015-02-10 18:04 - 2015-02-10 18:05 - 01212872 _____ (Zugara Investments Limited ) C:\Users\André\Downloads\adwcleanerexe.exe 2015-02-09 21:41 - 2015-02-09 21:41 - 00000000 _____ () C:\autoexec.bat 2015-02-09 17:13 - 2015-02-10 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-09 17:13 - 2015-02-09 17:13 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-09 17:12 - 2015-02-10 14:42 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-09 17:02 - 2015-02-09 17:04 - 02418464 _____ (Piriform Ltd) C:\Users\André\Downloads\ccsetup502.exe.opdownload 2015-02-09 15:23 - 2015-02-10 14:42 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware 2015-02-09 14:18 - 2015-02-18 23:07 - 00000000 ____D () C:\Windows\erdnt 2015-02-09 11:25 - 2015-02-09 11:25 - 00005012 _____ () C:\Windows\wauctla.InstallState 2015-02-09 11:25 - 2015-02-09 11:25 - 00000529 _____ () C:\Windows\wauctla.InstallLog 2015-02-08 15:09 - 2015-02-08 15:11 - 00000000 ____D () C:\Users\André\AppData\Roaming\FreeAudioEditor 2015-02-08 15:07 - 2015-02-08 15:08 - 03529672 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeAudioEditor.exe 2015-02-08 15:05 - 2015-02-10 14:43 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack 2015-02-08 15:00 - 2015-02-08 15:01 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeYouTubeToMP354Converter.exe 2015-02-08 11:44 - 2015-02-10 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nival 2015-02-08 11:39 - 2015-02-08 11:39 - 15938760 _____ (Nival ) C:\Users\André\Downloads\PWSetup.exe 2015-02-04 15:27 - 2015-02-04 15:27 - 00000000 __SHD () C:\Users\André\AppData\Local\EmieBrowserModeList 2015-02-04 15:22 - 2015-02-04 15:22 - 00000000 ____D () C:\Users\André\AppData\Roaming\sparta123 2015-02-04 14:45 - 2015-02-04 14:45 - 00000000 ____D () C:\Windows\SysWOW64\controlfirmwareGUI 2015-02-04 11:05 - 2015-02-20 18:07 - 00000000 ____D () C:\Program Files\iTunes 2015-02-04 10:59 - 2015-02-04 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2015-02-02 12:42 - 2015-02-02 12:42 - 00000559 _____ () C:\Users\André\Downloads\qr_code.zip ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 10:22 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-03-03 10:22 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-03-03 10:19 - 2014-06-26 18:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-03-03 10:19 - 2013-04-23 04:25 - 01171094 _____ () C:\Windows\WindowsUpdate.log 2015-03-03 10:18 - 2013-04-27 20:01 - 00000000 ____D () C:\Program Files (x86)\Opera 2015-03-03 10:13 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks 2015-03-03 10:13 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks 2015-03-03 10:13 - 2013-04-23 11:55 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn 2015-03-03 10:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-03-02 22:43 - 2013-04-23 11:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-03-02 11:45 - 2010-11-21 07:50 - 00700794 _____ () C:\Windows\system32\perfh007.dat 2015-03-02 11:45 - 2010-11-21 07:50 - 00150400 _____ () C:\Windows\system32\perfc007.dat 2015-03-02 11:45 - 2009-07-14 06:13 - 01624426 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-03-01 01:12 - 2013-06-17 21:38 - 00000000 ____D () C:\Users\André\Desktop\dj 2015-02-28 11:59 - 2013-04-28 15:47 - 00000000 ____D () C:\Users\André\Desktop\Eigenschaften 2015-02-28 10:57 - 2013-08-13 21:16 - 00000000 ____D () C:\Users\André\Desktop\HVH 2015-02-28 10:47 - 2013-04-23 11:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-02-28 10:44 - 2014-09-18 21:43 - 00000000 ____D () C:\Users\André\Desktop\HTML 2015-02-28 10:43 - 2014-11-29 11:02 - 00000000 ____D () C:\Users\André\Desktop\fun 2015-02-28 10:43 - 2013-04-28 14:01 - 00000000 ____D () C:\Users\André\Desktop\Ipod 2015-02-25 22:30 - 2013-04-23 11:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-25 22:30 - 2013-04-23 11:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-02-25 22:30 - 2013-04-23 11:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-02-24 22:12 - 2014-03-15 11:57 - 00000000 ____D () C:\Users\André\AppData\Roaming\UseNeXT 2015-02-24 22:09 - 2014-03-17 22:22 - 00000000 ____D () C:\Users\André\Documents\UseNeXT 2015-02-24 11:44 - 2013-06-15 09:43 - 00000000 ____D () C:\Program Files (x86)\DMXControl 2015-02-24 11:08 - 2013-06-15 10:13 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DMXControl.lnk 2015-02-24 09:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2015-02-22 21:46 - 2014-12-27 17:40 - 00000000 ____D () C:\Users\André\AppData\Roaming\CasinoOnNet 2015-02-20 22:08 - 2013-04-23 11:42 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-02-20 21:44 - 2013-04-23 11:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-02-20 21:43 - 2013-04-23 11:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-02-20 21:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2015-02-20 18:44 - 2009-07-14 05:45 - 00021504 _____ () C:\Windows\system32\umstartup.etl 2015-02-20 18:31 - 2013-04-23 04:23 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-02-20 18:08 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display 2015-02-20 18:06 - 2013-04-23 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware 2015-02-20 17:59 - 2013-04-23 11:53 - 00000000 ____D () C:\ProgramData\Creative 2015-02-20 17:58 - 2013-04-23 11:44 - 00000000 ____D () C:\Program Files (x86)\ST Microelectronics 2015-02-20 17:56 - 2013-04-23 11:52 - 00000550 ___RH () C:\Windows\ctfile.rfc 2015-02-20 17:56 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Creative 2015-02-20 17:52 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-20 17:39 - 2013-04-23 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-02-20 12:25 - 2013-04-27 21:25 - 00000000 ____D () C:\Users\André\AppData\Roaming\Skype 2015-02-20 12:25 - 2013-04-23 11:57 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-20 10:21 - 2013-04-27 21:03 - 00000000 ____D () C:\Program Files\Common Files\Apple 2015-02-20 10:18 - 2014-03-26 15:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell 2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Deployment 2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\2.0 2015-02-19 14:28 - 2014-07-06 22:21 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2015-02-19 14:26 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2015-02-18 23:11 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2015-02-18 23:07 - 2009-07-14 03:34 - 92274688 _____ () C:\Windows\system32\config\software.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 25165824 _____ () C:\Windows\system32\config\system.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 00061440 _____ () C:\Windows\system32\config\sam.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 00024576 _____ () C:\Windows\system32\config\security.bak 2015-02-18 17:00 - 2013-04-28 13:42 - 00000000 ____D () C:\Users\André\AppData\Roaming\vlc 2015-02-18 16:44 - 2014-01-05 20:24 - 00000000 ____D () C:\Windows\WindowsMobile 2015-02-18 16:44 - 2013-06-20 17:21 - 00000000 ____D () C:\Users\André\Documents\VirtualDJ 2015-02-18 14:55 - 2014-12-02 19:18 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-18 14:55 - 2014-06-26 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-18 14:55 - 2014-06-26 18:35 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-18 10:07 - 2013-04-27 22:01 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-02-18 10:06 - 2013-04-27 21:58 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-02-17 10:04 - 2013-05-13 20:51 - 00000000 ____D () C:\Windows\1CE60928832549A88B06633E48DD2B67.TMP 2015-02-16 12:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-02-16 11:43 - 2014-08-13 11:07 - 00000000 ____D () C:\Users\André\AppData\Roaming\Canon 2015-02-16 11:43 - 2014-08-13 11:00 - 00000000 ____D () C:\Program Files (x86)\Canon 2015-02-12 19:42 - 2013-04-27 21:06 - 00001063 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-12 19:42 - 2013-04-27 21:06 - 00001051 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-12 19:42 - 2013-04-27 20:01 - 00000977 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-02-12 19:42 - 2013-04-27 20:01 - 00000965 _____ () C:\Users\Public\Desktop\Opera.lnk 2015-02-12 19:42 - 2013-04-26 10:10 - 00000997 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-12 18:38 - 2014-06-15 21:37 - 00597344 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-12 18:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PLA 2015-02-12 18:36 - 2014-12-16 17:58 - 00000000 ____D () C:\Windows\system32\appraiser 2015-02-12 18:36 - 2014-05-08 11:26 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-02-12 17:00 - 2013-12-06 20:10 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2015-02-12 10:54 - 2013-06-15 16:57 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-12 10:45 - 2009-07-14 03:34 - 00000609 _____ () C:\Windows\win.ini 2015-02-12 10:44 - 2013-06-03 19:06 - 00002155 _____ () C:\Windows\epplauncher.mif 2015-02-12 10:44 - 2013-06-03 19:05 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2015-02-12 10:35 - 2013-09-25 15:24 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-12 10:25 - 2013-09-25 15:24 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-11 13:43 - 2013-06-03 19:12 - 00004064 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask 2015-02-11 13:43 - 2013-06-03 19:12 - 00003242 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest 2015-02-11 13:42 - 2013-04-23 12:00 - 00000000 ____D () C:\Program Files\AlienAutopsy 2015-02-11 13:42 - 2013-04-23 11:48 - 00000000 ____D () C:\Program Files\Alienware 2015-02-10 17:18 - 2015-01-20 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Theme Hospital 2015-02-10 17:18 - 2014-01-17 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sport-DJ 2015-02-10 14:49 - 2013-04-26 10:07 - 00000000 ____D () C:\Users\André 2015-02-10 14:43 - 2014-12-27 17:39 - 00000000 ____D () C:\Users\André\AppData\Local\PokerStars.EU 2015-02-10 14:43 - 2014-12-27 17:35 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU 2015-02-10 14:43 - 2014-03-10 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dynamics 2015-02-10 14:43 - 2014-03-10 22:34 - 00000000 ____D () C:\Program Files (x86)\Dynamics 2015-02-10 14:43 - 2014-02-17 21:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-10 14:43 - 2014-01-17 13:53 - 00000000 ____D () C:\Program Files\Sport_DJ 2015-02-10 14:43 - 2014-01-16 20:51 - 00000000 ____D () C:\Program Files (x86)\Preh 2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\Windows 7 USB DVD Download Tool 2015-02-10 14:43 - 2013-09-05 17:09 - 00000000 ____D () C:\ProgramData\PMB Files 2015-02-10 14:43 - 2013-06-21 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\DVDVideoSoft 2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2015-02-10 14:43 - 2013-06-20 13:54 - 00000000 ____D () C:\ProgramData\Netzmanager 2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent 2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\Program Files (x86)\Verbindungsassistent 2015-02-10 14:43 - 2013-04-27 22:01 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2015-02-10 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-02-10 14:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2015-02-10 14:42 - 2013-04-27 22:56 - 00000000 ____D () C:\Windows\System32\Tasks\Games 2015-02-10 14:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-02-10 14:41 - 2013-08-26 19:00 - 00000000 ____D () C:\Users\André\AppData\Roaming\TeamViewer 2015-02-10 14:41 - 2013-04-27 21:50 - 00000000 ____D () C:\Users\André\AppData\Roaming\DAEMON Tools Lite 2015-02-10 14:39 - 2013-09-05 17:09 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2015-02-10 14:39 - 2013-04-28 11:05 - 00000000 ____D () C:\Games 2015-02-10 14:39 - 2013-04-27 21:58 - 00000000 __RHD () C:\MSOCache 2015-02-09 17:20 - 2013-08-15 10:55 - 00000000 ____D () C:\Users\André\AppData\Roaming\FileZilla 2015-02-09 14:55 - 2013-08-12 20:22 - 00000000 ____D () C:\Users\Andr� 2015-02-09 13:13 - 2013-05-28 00:11 - 00000000 ____D () C:\Windows\de 2015-02-04 14:27 - 2014-03-10 22:36 - 00000000 ____D () C:\Users\André\Desktop\Laser ==================== Files in the root of some directories ======= 2015-03-02 20:14 - 2015-03-02 20:10 - 2750425 _____ ( ) C:\Program Files (x86)\distribution-installer.exe 2015-03-02 20:14 - 2015-03-02 20:10 - 2664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe 2015-03-02 20:14 - 2015-02-26 10:48 - 1032603 _____ (wauctla ) C:\Program Files (x86)\wauctla-setup.exe 2013-12-02 23:26 - 2013-12-02 23:26 - 0010020 _____ () C:\Users\André\AppData\Local\CleanupUninstall.txt 2014-07-04 15:47 - 2014-07-04 15:47 - 0003584 _____ () C:\Users\André\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-12-03 10:51 - 2014-12-03 10:51 - 0002102 _____ () C:\Users\André\AppData\Local\recently-used.xbel 2015-02-15 21:13 - 2015-02-15 21:13 - 0007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg 2014-09-14 19:28 - 2014-09-14 19:28 - 0000057 _____ () C:\ProgramData\Ament.ini ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-13 01:01 ==================== End Of Log ============================ |
|
03.03.2015, 15:53
| #4 |
| | edealspop und n10.adshostnet.com/ads? stört Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2015
Ran by André at 2015-03-03 10:30:40
Running from C:\Users\André\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
888casino (HKLM-x32\...\888casino) (Version: - )
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.123 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Afterglow Slim v1.0 (HKLM-x32\...\Afterglow Slim_is1) (Version: - Next Generation Technologies)
Age of Empires III - The Asian Dynasties (HKLM-x32\...\InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III - The Asian Dynasties (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III (HKLM-x32\...\InstallShield_{A8CF5C37-8EC5-4C33-BB4A-87F468B77D45}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
AlienRespawn - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Alienware)
AlienRespawn (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Alienware)
Alienware Command Center (HKLM-x32\...\InstallShield_{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}) (Version: 2.8.8.0 - Alienware Corp.)
Alienware Command Center (Version: 2.8.8.0 - Alienware Corp.) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Artisteer 4 (HKLM-x32\...\Artisteer 4) (Version: 4.1 - Extensoft)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.8.8 - Atheros Communications Inc.)
AutoBinarySEA (HKLM-x32\...\{78A20C59-1EE7-42EA-B9D7-A764FB341150}) (Version: 2.2.5170.26769 - AutoBinarySEA DE)
AVG PC TuneUp 2015 (de-DE) (x32 Version: 15.0.1001.393 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (HKLM-x32\...\AVG PC TuneUp) (Version: 15.0.1001.393 - AVG Technologies)
AVG PC TuneUp 2015 (x32 Version: 15.0.1001.393 - AVG Technologies) Hidden
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Bitcoin (HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Bitcoin) (Version: 0.8.6 - Bitcoin project)
Bitcoin (HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Bitcoin) (Version: 0.8.6 - Bitcoin project)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.00.0000 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision) Hidden
Canon MP Navigator 3.1 (HKLM-x32\...\MP Navigator 3.1) (Version: - )
Canon MP140 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series) (Version: - )
Canon MP140 series Benutzerregistrierung (HKLM-x32\...\Canon MP140 series Benutzerregistrierung) (Version: - )
Canon Utilities Easy-LayoutPrint (HKLM-x32\...\Easy-LayoutPrint) (Version: - )
Canon Utilities Easy-PhotoPrint (HKLM-x32\...\Easy-PhotoPrint) (Version: - )
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4255 - CDBurnerXP)
Cisco Systems VPN Client 5.0.07.0440 (HKLM\...\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}) (Version: 5.0.7 - Cisco Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)
Dell System Detect - 1 (HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\73f463568823ebbe) (Version: 5.14.0.9 - Dell)
Dell System Detect - 1 (HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\73f463568823ebbe) (Version: 5.14.0.9 - Dell)
Dell System Detect (HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\9204f5692a8faf3b) (Version: 5.6.0.4 - Dell)
Dell System Detect (HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\9204f5692a8faf3b) (Version: 5.6.0.4 - Dell)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Die Siedler - Aufbruch der Kulturen (HKLM-x32\...\SADK) (Version: - )
DJ Intro version 1.1.2 (HKLM-x32\...\{36625871-9D4B-4046-A837-677974F51CAC}_is1) (Version: 1.1.2 - Serato Audio Research)
DJI driver version 2.02 (HKLM-x32\...\{EDFDE5EE-84C7-4936-804C-6563943E5754}_is1) (Version: 2.02 - DJI)
DJI iOSD Assistant version 4.0 (HKLM-x32\...\{8CA48822-4CC7-40FE-9F4E-1BDC314F58F3}_is1) (Version: 4.0 - DJI)
DJI WookongM Assistant version 2.04 (HKLM-x32\...\{FAA9FD58-F448-44C9-A850-CE9744A465A3}_is1) (Version: 2.04 - DJI)
DMXControl 2.12.2 (HKLM-x32\...\DMXControl) (Version: 2.12.2 - PopSoft)
Dota 2 Test (HKLM-x32\...\Steam App 205790) (Version: - )
dw-lighting Version 1.1 (HKLM-x32\...\{4BDD34B2-482A-4E84-98F9-8965C20E42CF}_is1) (Version: 1.1 - D.Weber)
DYNAMICS Demoversion, Version: 30.4.2013 (HKLM-x32\...\DYNAMICS_is1) (Version: - )
Empire Earth III (HKLM-x32\...\{B17E235C-7A3B-4482-B650-21FFDE1D452E}) (Version: 1.00.0000 - Sierra Entertainment)
EMSC (x32 Version: 0.0.0.22C - Compal Electronics, Inc.) Hidden
Euro Truck Simulator 1.3 (HKLM-x32\...\Euro Truck Simulator) (Version: 1.3 - SCS Software)
Europa Casino (HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Europa Casino) (Version: - )
Europa Casino (HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Europa Casino) (Version: - )
Event Music Machine 1.1.6 (HKLM-x32\...\Event Music Machine) (Version: 1.1.6 - Christoph Krämer)
EventSoundControl (HKLM-x32\...\9B96C7FA-95B6-40BD-859A-46C15A64EBDB) (Version: 2.1.32 - clearsounds.de - Medienagentur)
FileZilla Client 3.10.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.10.0.2 - Tim Kosse)
Firstload (HKLM-x32\...\Firstload) (Version: - Lumaris.net)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Audio Editor version 1.0.8.128 (HKLM-x32\...\Free Audio Editor_is1) (Version: 1.0.8.128 - DVDVideoSoft Ltd.)
Free Video Flip and Rotate version 2.1.9.827 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.9.827 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
FreeStyler (HKLM-x32\...\FreeStyler_is1) (Version: - Raphaël Wellekens)
Gameforge Live 1.6.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.6.0 - Gameforge)
GeoGebra 4.2 (HKLM-x32\...\GeoGebra 4.2) (Version: 4.2.55.0 - International GeoGebra Institute)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Google Update Helper (x32 Version: 1.3.23.0 - SaveSense) Hidden <==== ATTENTION
Grand Theft Auto IV - Episodes From Liberty City (HKLM-x32\...\{8ED35B48-AFBD-4F32-8271-2257AD8B907E}_is1) (Version: - )
HD2 Toolkit Version 4.3 (HKLM-x32\...\{12EE0B2A-84C6-494E-A7AC-6771E898F6A0}_is1) (Version: 4.3 - Kaushal Subedi (KSubedi))
HP ePrint (HKLM-x32\...\{2794875B-6CCF-48B8-84A5-5B10DB98BEE6}) (Version: 14.0.14176.1823 - Hewlett-Packard)
HP Officejet 6700 - Grundlegende Software für das Gerät (HKLM\...\{9086D601-50B7-491D-A143-28193DADE36B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6700 Hilfe (HKLM-x32\...\{E1AE0CB7-1333-4728-8520-CB3F88A252B4}) (Version: 140.0.2.2 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Integrated Webcam Live! Central (HKLM-x32\...\Integrated Webcam Live! Central) (Version: 2.01.15 - Creative Technology Ltd)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2653 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle)
Java 8 Update 5 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218005FF}) (Version: 8.0.50 - Oracle Corporation)
Java SE Development Kit 7 Update 21 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170210}) (Version: 1.7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Lumac (HKLM-x32\...\InstallShield_{5DE11949-2B11-4F13-BAD5-1C237122CFDB}) (Version: 1.1.86.0 - Firstload)
Lumac (x32 Version: 1.1.86.0 - Firstload) Hidden
MAGIX Screenshare (HKLM-x32\...\{AAE31374-02C2-452E-88EC-2F16D92731A9}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Video deluxe 17 Premium Download-Version (HKLM-x32\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.0.32 - MAGIX AG)
MAGIX Video deluxe 17 Premium Download-Version (x32 Version: 10.0.0.32 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Michas Jingle-Player (HKLM-x32\...\Michas Jingle-Player) (Version: - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{A1C962E2-2426-49C6-A38B-9A07E40D607C}) (Version: 3.2.217.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}) (Version: 3.1.99.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
NVIDIA 3D Vision Treiber 302.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 302.77 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6 - NVIDIA Corporation)
NVIDIA Grafiktreiber 302.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 302.77 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.16.0 - NVIDIA Corporation)
NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0604 - NVIDIA Corporation)
NVIDIA Update 1.9.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.9.10 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.1 - NVIDIA Corporation)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Opera 12.16 (HKLM-x32\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
Opera Stable 27.0.1689.76 (HKLM-x32\...\Opera 27.0.1689.76) (Version: 27.0.1689.76 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PDF24 Creator 6.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
Pioneer DDJ_SB Driver (HKLM-x32\...\Pioneer DDJ_SB ASIO) (Version: 1.000.000.002 - Pioneer Corporation.)
PIXMA Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - )
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu)
Prime World Version 10.1 (HKLM-x32\...\{F6F3C462-2729-4555-8A95-CC317A90F8FF}_is1) (Version: 10.1 - Nival)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
Qualcomm Atheros Killer Network Manager (HKLM-x32\...\InstallShield_{DF446558-ADF7-4884-9B2D-281979CCE71F}) (Version: 6.1.0.304 - Qualcomm Atheros)
Qualcomm Atheros Killer Network Manager (Version: 6.1.0.304 - Qualcomm Atheros) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.15.20888 - Razer Inc.)
RCT3 Soaked (HKLM-x32\...\{EA926717-CE5A-4CB4-AB21-9E6E9565A458}) (Version: 1.00.000 - )
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
RollerCoaster Tycoon® 3 (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - )
ScanSoft OmniPage SE 4 (HKLM-x32\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
SCasino (HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Swiss Casino) (Version: - )
SCasino (HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Swiss Casino) (Version: - )
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
SHIELD Streaming (Version: 1.05.19 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sound Blaster Recon3Di (HKLM-x32\...\{C8AAFCDC-CD3A-40AD-9FA9-07FB70F08224}) (Version: 1.00.08 - Creative Technology Limited)
Sound Blaster Recon3Di Extras (HKLM-x32\...\{C45E715E-442E-4D82-BD46-A08A0870957C}) (Version: 1.0 - Creative Technology Limited)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Sublime Text 2.0.1 (HKLM\...\Sublime Text 2_is1) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.4.0 - Synaptics Incorporated)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.38846 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - )
The Polynomial (HKLM-x32\...\Steam App 67000) (Version: - Dmytry Lavrov)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.2 - Electronic Arts)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
Verbindungsassistent (HKLM-x32\...\Verbindungsassistent) (Version: 3.1 - Verbindungsassistent)
Version 1.01 (HKLM-x32\...\Sport-DJ_is1) (Version: - )
VirtualDJ PRO Full (HKLM-x32\...\{C515E2A3-4878-4C85-A519-52630C7AB08B}) (Version: 7.3 - Atomix Productions)
VLC media player 2.0.6 (HKLM\...\VLC media player) (Version: 2.0.6 - VideoLAN)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WBFS Manager 3.0 (HKLM-x32\...\WBFS Manager 3.0) (Version: 3.0 - AlexDP)
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2410 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - dji-innovations inc. (usbser) Ports (01/19/2011 5.1.2600.5512) (HKLM\...\2DC11E587B8BA912FF8FD5433B426EE46F8E22DD) (Version: 01/19/2011 5.1.2600.5512 - dji-innovations inc.)
Windows-Treiberpaket - dji-innovations inc. (usbser) Ports (12/06/2012 5.1.2600.5512) (HKLM\...\F731C4A8B354FB9B7579C5D98402D2F988E8B95C) (Version: 12/06/2012 5.1.2600.5512 - dji-innovations inc.)
Windows-Treiberpaket - FTDI CDM Driver Package (10/22/2009 2.06.00) (HKLM\...\3134FEF0E1D959EC0CC2E458C94B7057B2AC0CC9) (Version: 10/22/2009 2.06.00 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package (10/22/2009 2.06.00) (HKLM\...\88EB56038379B8B7DCFB4D2448A60F52E064B265) (Version: 10/22/2009 2.06.00 - FTDI)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-829858747-3269657560-2013248277-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-829858747-3269657560-2013248277-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-829858747-3269657560-2013248277-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-829858747-3269657560-2013248277-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
26-02-2015 09:26:43 Windows Update
01-03-2015 12:39:45 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-02-19 14:26 - 2015-02-19 21:48 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {3F7E5641-C08A-4F58-BBF6-12D0CEB8E023} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {4A3A143C-2D3C-4820-839B-E683FA90F25A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {4F026846-FCB2-4C8B-A567-4D06572BBFDA} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Alienware\SupportAssist\uaclauncher.exe [2015-02-03] (PC-Doctor, Inc.)
Task: {574111F7-9E9D-4B95-8DB7-039BDC40F840} - System32\Tasks\SSBkgdUpdate => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {582C1351-0A8B-400A-B5D6-FB758ABB587F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {6142C201-7FF1-47E7-9BD3-5D6139C180F4} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {888FD2E2-ACE1-40C2-B024-EEC8BFDEF949} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Alienware\SupportAssist\sessionchecker.exe [2015-02-03] (PC-Doctor, Inc.)
Task: {9EBEE2CA-8B1C-43E3-81F6-57A80C570466} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A1992B46-7C93-4458-89FE-C61CA4C00196} - System32\Tasks\PCDoctorBackgroundMonitorTask-Delay => C:\Program Files\Alienware\SupportAssist\uaclauncher.exe [2015-02-03] (PC-Doctor, Inc.)
Task: {A285A914-CAD2-4ED6-AA85-2BACA9F0422E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {C1180A38-D562-4FDA-BA82-D1B9906D7D49} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2015-02-12] (AVG Technologies)
Task: {DBF47455-4FA1-4DF3-908B-FADDD23A3D61} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-25] (Adobe Systems Incorporated)
Task: {ECCFDDB6-B8BA-4ABB-B9CD-01020EA1E7BE} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {F9874B1B-2272-4672-A21F-6D28F2B83C46} - System32\Tasks\Opera scheduled Autoupdate 1424293363 => C:\Program Files (x86)\Opera\launcher.exe [2015-02-23] (Opera Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2015-02-20 21:43 - 2012-06-05 08:24 - 00084840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-03-02 20:14 - 2015-03-02 20:14 - 00229888 _____ () C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe
2015-02-16 11:43 - 2006-11-10 07:12 - 00099936 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2013-08-02 13:05 - 2013-07-27 09:48 - 00267040 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libzmq.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00492032 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
2011-05-09 19:46 - 2011-05-09 19:46 - 02760192 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtCore4.dll
2011-05-09 19:56 - 2011-05-09 19:56 - 09856000 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtGui4.dll
2011-05-09 19:47 - 2011-05-09 19:47 - 00416256 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtXml4.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00217600 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFCommon.dll
2011-05-10 11:32 - 2011-05-10 11:32 - 00731648 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\qwt5.dll
2011-05-09 19:48 - 2011-05-09 19:48 - 00990720 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtNetwork4.dll
2015-02-12 17:39 - 2015-02-12 17:39 - 00712504 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\avgrepliba.dll
2013-05-11 19:50 - 2010-11-18 12:09 - 00330696 _____ () C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
2014-12-08 11:10 - 2014-12-08 11:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-04-23 11:55 - 2012-01-27 03:49 - 02751808 ____N () C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
2015-02-12 17:39 - 2015-02-12 17:39 - 00855864 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\tulnga.dll
2015-03-02 20:14 - 2015-03-02 20:14 - 00452096 _____ () C:\Users\André\AppData\Local\codecwinsockapi\commanditvdataSched.exe
2013-04-23 13:13 - 2012-02-14 18:53 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-04-27 20:12 - 2007-09-02 12:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2012-02-15 14:37 - 2012-02-15 14:37 - 00549888 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
2012-02-15 14:37 - 2012-02-15 14:37 - 00404992 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modApplications.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00036864 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modFeatures.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00025088 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modFraps.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00241152 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modGraph.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00062464 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modlcd.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00289280 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modNetwork.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00184832 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modNpu.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00210944 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modOptions.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00055808 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modOverview.dll
2012-02-15 14:37 - 2012-02-15 14:37 - 00329216 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modSystemInfo.dll
2015-02-04 14:45 - 2015-01-19 13:29 - 00083456 _____ () C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe
2015-02-24 22:03 - 2015-02-24 22:03 - 00552056 _____ () C:\Program Files (x86)\Opera\27.0.1689.76\opera_crashreporter.exe
2015-03-02 20:14 - 2014-07-08 08:22 - 00095232 _____ () C:\Users\André\AppData\Local\codecwinsockapi\qjson0.dll
2011-03-04 11:49 - 2011-03-04 11:49 - 00202752 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2013-04-27 20:12 - 2007-09-02 12:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-12-22 17:31 - 2011-12-22 17:31 - 00593920 _____ () C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\de-DE\SBRcni.resources.dll
2014-10-16 18:21 - 2014-10-16 18:21 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\712c383e9837b8c37b3107f22be9455c\PSIClient.ni.dll
2015-01-16 16:34 - 2015-01-16 16:34 - 00039200 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2015-02-24 22:03 - 2015-02-24 22:03 - 01408632 _____ () C:\Program Files (x86)\Opera\27.0.1689.76\libglesv2.dll
2015-02-24 22:03 - 2015-02-24 22:03 - 00219256 _____ () C:\Program Files (x86)\Opera\27.0.1689.76\libegl.dll
2015-02-24 22:03 - 2015-02-24 22:03 - 09510520 _____ () C:\Program Files (x86)\Opera\27.0.1689.76\pdf.dll
2015-02-25 22:29 - 2015-02-25 22:29 - 14970032 _____ () C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_123.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\André\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-829858747-3269657560-2013248277-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\André\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-829858747-3269657560-2013248277-500 - Administrator - Disabled)
André (S-1-5-21-829858747-3269657560-2013248277-1001 - Administrator - Enabled) => C:\Users\André
Gast (S-1-5-21-829858747-3269657560-2013248277-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-829858747-3269657560-2013248277-1003 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/03/2015 10:14:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/03/2015 10:13:33 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcUnregistering VAD endpoint [0]
Error: (03/03/2015 10:13:23 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registered successfully [0]
Error: (03/03/2015 10:06:14 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (03/02/2015 11:09:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6006
Error: (03/02/2015 11:09:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6006
Error: (03/02/2015 11:09:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (03/02/2015 11:09:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5007
Error: (03/02/2015 11:09:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5007
Error: (03/02/2015 11:09:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (03/03/2015 10:25:16 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (03/03/2015 10:15:16 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (03/03/2015 10:15:00 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "codecwinsockapi.exe" wurde nicht richtig gestartet.
Error: (03/03/2015 10:13:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DriverLINX Port I/O Driver" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (03/03/2015 10:13:18 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\DLPortIO.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (03/03/2015 10:13:08 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 03.03.2015 um 10:12:18 unerwartet heruntergefahren.
Error: (03/03/2015 10:11:03 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (03/03/2015 10:01:03 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (03/02/2015 11:04:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (03/02/2015 10:54:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (03/03/2015 10:14:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/03/2015 10:13:33 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcUnregistering VAD endpoint [0]
Error: (03/03/2015 10:13:23 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registered successfully [0]
Error: (03/03/2015 10:06:14 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (03/02/2015 11:09:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6006
Error: (03/02/2015 11:09:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6006
Error: (03/02/2015 11:09:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (03/02/2015 11:09:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5007
Error: (03/02/2015 11:09:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5007
Error: (03/02/2015 11:09:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
CodeIntegrity Errors:
===================================
Date: 2015-02-18 23:05:46.082
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-02-18 23:05:46.061
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-02-09 14:33:54.015
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-02-09 14:33:53.992
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-10 15:52:51.094
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\ Malwarebytes Anti-Malware \mbampt.exe" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-10 15:52:51.062
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\ Malwarebytes Anti-Malware \mbampt.exe" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3740QM CPU @ 2.70GHz
Percentage of memory in use: 31%
Total physical RAM: 12170.31 MB
Available physical RAM: 8373.18 MB
Total Pagefile: 24338.8 MB
Available Pagefile: 19947.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:494.55 GB) (Free:187.01 GB) NTFS
Drive d: (DATAPART1) (Fixed) (Total:29.81 GB) (Free:28.38 GB) NTFS
Drive f: (Musik) (Fixed) (Total:195.31 GB) (Free:76.78 GB) NTFS
Drive h: (RCT3_WILD) (CDROM) (Total:0.64 GB) (Free:0 GB) CDFS
Drive i: () (Removable) (Total:15.07 GB) (Free:13.91 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: B55A8670)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=8.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=494.5 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=195.3 GB) - (Type=OF Extended)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 29.8 GB) (Disk ID: B55ABA8A)
Partition 1: (Not Active) - (Size=29.8 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 15.1 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
==================== End Of Log ============================
|
|
03.03.2015, 16:47
| #5 |
| /// the machine /// TB-Ausbilder | edealspop und n10.adshostnet.com/ads? stört Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.03.2015, 17:41
| #6 |
| | edealspop und n10.adshostnet.com/ads? stört Was soll ich machen, wenn ich in Revo Uninstaller keine Google Update Helper habe und so keine löschen kann? log.txt Code:
ATTFilter ComboFix 15-03-01.01 - André 03.03.2015 17:21:02.2.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.12170.8140 [GMT 1:00]
ausgeführt von:: c:\users\AndrÚ\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Enabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-02-03 bis 2015-03-03 ))))))))))))))))))))))))))))))
.
.
2015-03-03 16:30 . 2015-03-03 16:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-03 16:09 . 2015-03-03 16:09 -------- d-----w- c:\program files (x86)\VS Revo Group
2015-03-03 14:52 . 2015-01-29 09:07 11910896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{EBD1EB74-868E-4647-A298-A6AFDDD1D4BF}\mpengine.dll
2015-03-03 09:29 . 2015-03-03 09:31 -------- d-----w- C:\FRST
2015-03-02 19:14 . 2015-03-02 19:14 -------- d-----w- c:\users\André\AppData\Local\codecwinsockapi
2015-03-02 19:14 . 2015-02-26 09:48 1032603 ----a-w- c:\program files (x86)\wauctla-setup.exe
2015-03-02 19:14 . 2015-03-02 19:10 2664983 ----a-w- c:\program files (x86)\ExtensionsInstallerAsUpdate.exe
2015-03-02 19:14 . 2015-03-02 19:10 2750425 ----a-w- c:\program files (x86)\distribution-installer.exe
2015-03-02 12:49 . 2015-01-29 09:07 11910896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-02-28 18:00 . 2015-02-28 18:00 -------- d-----w- c:\windows\SysWow64\NV
2015-02-28 18:00 . 2015-02-28 18:00 -------- d-----w- c:\windows\system32\NV
2015-02-25 21:29 . 2015-02-25 21:29 17304752 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2015-02-24 10:21 . 2006-06-28 14:44 262144 ----a-w- c:\windows\SysWow64\dashard2006.dll
2015-02-24 10:21 . 2004-03-16 10:04 110592 ----a-w- c:\windows\SysWow64\dashard.dll
2015-02-24 10:21 . 2015-02-24 10:21 -------- d-----w- c:\program files (x86)\FreeStyler
2015-02-24 09:51 . 2015-02-24 10:18 -------- d-----w- c:\program files (x86)\dw-lighting
2015-02-23 22:02 . 2015-02-23 22:03 -------- d-----w- c:\users\André\AppData\Local\Europa Casino
2015-02-22 20:38 . 2015-02-22 20:38 -------- d-----w- c:\program files (x86)\CasinoOnNet
2015-02-22 11:46 . 2015-03-02 12:43 -------- d-----w- c:\users\André\AppData\Local\SCasino
2015-02-22 11:36 . 2014-09-16 20:53 1188440 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B1295466-44E7-4EE2-8BD2-26F12949B675}\gapaengine.dll
2015-02-20 21:08 . 2015-03-03 09:15 -------- d-----w- c:\programdata\Bigfoot Networks
2015-02-20 21:08 . 2015-02-20 21:08 -------- d-----w- c:\program files\Qualcomm Atheros
2015-02-20 20:44 . 2015-03-03 09:13 -------- d-----w- c:\programdata\NVIDIA
2015-02-20 20:44 . 2015-02-20 20:44 -------- d-----w- c:\users\UpdatusUser
2015-02-20 20:43 . 2012-06-05 07:25 2561896 ----a-w- c:\windows\system32\nvsvcr.dll
2015-02-20 20:43 . 2012-06-05 07:25 888680 ----a-w- c:\windows\system32\nvvsvc.exe
2015-02-20 20:43 . 2012-06-05 07:25 862056 ----a-w- c:\windows\system32\nv3dappshext.dll
2015-02-20 20:43 . 2012-06-05 07:25 63336 ----a-w- c:\windows\system32\nvshext.dll
2015-02-20 20:43 . 2012-06-05 07:25 55656 ----a-w- c:\windows\system32\nv3dappshextr.dll
2015-02-20 20:43 . 2012-06-05 07:25 118120 ----a-w- c:\windows\system32\nvmctray.dll
2015-02-20 20:43 . 2012-06-05 07:25 6156136 ----a-w- c:\windows\system32\nvcpl.dll
2015-02-20 20:43 . 2012-06-05 07:25 3152232 ----a-w- c:\windows\system32\nvsvc64.dll
2015-02-20 20:43 . 2012-06-05 07:24 2644963 ----a-w- c:\windows\system32\nvcoproc.bin
2015-02-20 20:33 . 2013-12-10 14:32 1435504 ----a-w- c:\windows\system32\nvumdshimx.dll
2015-02-20 20:33 . 2013-12-10 14:32 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2015-02-20 20:33 . 2013-12-10 14:32 3067560 ----a-w- c:\windows\system32\nvapi64.dll
2015-02-20 20:33 . 2012-06-05 12:55 1753448 ----a-w- c:\windows\system32\nvdispco64.dll
2015-02-20 20:33 . 2012-06-05 12:55 1468264 ----a-w- c:\windows\system32\nvdispgenco64.dll
2015-02-20 17:01 . 2015-02-20 17:01 -------- d-----w- c:\users\André\AppData\Local\Downloaded Installations
2015-02-20 16:56 . 2000-05-11 00:00 90112 ------w- c:\windows\Updreg.EXE
2015-02-20 16:56 . 2015-02-20 16:56 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2015-02-20 16:56 . 2015-02-20 16:56 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2015-02-20 16:56 . 2015-02-20 16:56 123480 ----a-w- c:\windows\system32\OpenAL32.dll
2015-02-20 16:56 . 2015-02-20 16:56 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2015-02-20 16:56 . 2012-01-13 10:23 1944064 ------w- c:\windows\system32\Sens_oal.dll
2015-02-20 16:56 . 2012-01-13 10:21 2906586 ------w- c:\windows\SysWow64\Sens_oal.dll
2015-02-20 16:56 . 2015-02-20 16:56 -------- d-----w- c:\program files (x86)\Common Files\Creative Labs Shared
2015-02-20 16:55 . 2012-03-27 17:58 1052760 ----a-w- c:\windows\system32\drivers\CtHda.sys
2015-02-20 16:55 . 2012-03-27 17:54 134144 ----a-w- c:\windows\system32\CtHdaS64.exe
2015-02-20 16:55 . 2012-03-27 17:53 574464 ----a-w- c:\windows\system32\CtHdaC64.dll
2015-02-20 16:55 . 2012-03-27 17:52 122880 ----a-w- c:\windows\SysWow64\CtHdaSvc.exe
2015-02-20 16:55 . 2012-03-27 17:52 470016 ----a-w- c:\windows\SysWow64\CtHdaCtl.dll
2015-02-20 16:55 . 2012-03-02 21:41 25088 ----a-w- c:\windows\MEptDef.exe
2015-02-20 16:55 . 2012-02-29 11:34 10240 ----a-r- c:\windows\InstHlp.exe
2015-02-20 16:55 . 2012-02-13 18:16 889856 ----a-w- c:\windows\system32\CtHRFX64.dll
2015-02-20 16:55 . 2011-10-28 10:45 4894 ----a-w- c:\windows\cthdaGER.reg
2015-02-20 16:55 . 2011-10-24 09:02 4850 ----a-w- c:\windows\cthdaeng.reg
2015-02-20 16:55 . 2010-09-15 10:39 235520 ----a-w- c:\windows\system32\CtDco64.dll
2015-02-20 16:55 . 2006-12-05 13:52 48400 ----a-w- c:\windows\AddCat.exe
2015-02-20 16:46 . 2012-02-23 04:46 39976 ----a-w- c:\windows\system32\drivers\btwl2cap.sys
2015-02-20 16:46 . 2012-02-23 04:46 21544 ----a-w- c:\windows\system32\drivers\btwrchid.sys
2015-02-20 16:46 . 2012-02-23 04:46 211496 ----a-w- c:\windows\system32\drivers\btwavdt.sys
2015-02-20 16:46 . 2012-02-23 04:46 184360 ----a-w- c:\windows\system32\drivers\btwaudio.sys
2015-02-20 16:37 . 2015-02-20 16:37 -------- d-----w- c:\windows\SysWow64\Atheros_L1e
2015-02-20 16:32 . 2011-12-06 14:55 53248 ----a-w- c:\windows\SysWow64\CSVer.dll
2015-02-20 11:19 . 2015-02-12 16:39 44856 ----a-w- c:\windows\system32\uxtuneup.dll
2015-02-20 11:19 . 2015-02-12 16:39 36664 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2015-02-20 10:07 . 2015-02-20 10:07 -------- d-----w- c:\users\André\AppData\Roaming\PCDr
2015-02-20 10:06 . 2015-02-20 10:06 -------- d-----w- c:\programdata\PCDr
2015-02-20 09:31 . 2015-02-12 16:39 41784 ----a-w- c:\windows\system32\TURegOpt.exe
2015-02-20 09:31 . 2015-02-12 16:39 30520 ----a-w- c:\windows\system32\authuitu.dll
2015-02-20 09:31 . 2015-02-12 16:39 25912 ----a-w- c:\windows\SysWow64\authuitu.dll
2015-02-20 09:21 . 2015-02-20 09:21 -------- d-----w- c:\program files (x86)\iTunes
2015-02-20 09:21 . 2015-02-20 09:22 -------- d-----w- c:\programdata\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-20 09:21 . 2015-02-20 09:21 -------- d-----w- c:\program files\iPod
2015-02-20 09:01 . 2015-02-20 09:01 -------- d-----w- C:\Dell
2015-02-20 08:55 . 2015-02-20 08:56 -------- d-----w- c:\programdata\Dell
2015-02-19 13:26 . 2015-02-19 20:48 -------- d-----w- c:\windows\system32\drivers\etc
2015-02-18 15:37 . 2015-02-19 11:52 -------- d-----w- c:\windows\system32\log
2015-02-18 09:07 . 2015-02-18 09:07 -------- d-----w- c:\program files (x86)\Microsoft CAPICOM 2.1.0.2
2015-02-17 09:07 . 2015-02-17 09:07 -------- d-----w- c:\users\André\AppData\Local\Scansoft
2015-02-16 10:43 . 2015-02-16 10:43 -------- d-----w- c:\programdata\CanonIJPLM
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\programdata\InstallShield
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\users\André\AppData\Roaming\ScanSoft
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\programdata\ScanSoft
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\program files (x86)\Common Files\ScanSoft Shared
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\program files (x86)\ScanSoft
2015-02-16 10:28 . 2015-02-16 10:28 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2015-02-16 10:28 . 2006-12-25 20:00 236544 ----a-w- c:\windows\system32\CNMLM8R.DLL
2015-02-16 10:27 . 2006-06-29 05:30 17408 ----a-w- c:\windows\system32\cnco140.dll
2015-02-16 10:27 . 2006-11-10 02:03 1337344 ----a-w- c:\windows\system32\CNCC140.DLL
2015-02-16 10:27 . 2006-11-10 02:02 49664 ----a-w- c:\windows\system32\CNCI140.DLL
2015-02-16 10:27 . 2006-05-26 07:23 90624 ----a-w- c:\windows\system32\CNCL140.DLL
2015-02-16 10:27 . 2015-02-16 10:27 -------- d--h--w- c:\program files\CanonBJ
2015-02-15 19:26 . 2015-02-15 19:26 -------- d-----w- c:\program files\Dell
2015-02-13 08:39 . 2015-01-23 03:43 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2015-02-13 08:39 . 2015-01-23 04:41 6041600 ----a-w- c:\windows\system32\jscript9.dll
2015-02-13 08:39 . 2015-01-23 03:17 4300800 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-02-13 08:39 . 2015-01-23 04:42 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-02-12 20:34 . 2015-02-12 20:34 -------- d-----w- c:\programdata\Grisoft
2015-02-11 12:32 . 2015-01-13 03:10 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-02-11 12:31 . 2014-10-04 02:10 3722752 ----a-w- c:\windows\system32\mstscax.dll
2015-02-11 12:31 . 2014-10-04 01:42 3221504 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-02-11 12:31 . 2014-10-04 01:42 131584 ----a-w- c:\windows\SysWow64\aaclient.dll
2015-02-11 12:29 . 2014-12-08 03:09 406528 ----a-w- c:\windows\system32\scesrv.dll
2015-02-11 12:29 . 2014-12-08 02:46 308224 ----a-w- c:\windows\SysWow64\scesrv.dll
2015-02-11 12:26 . 2015-01-14 06:09 5554112 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-02-11 12:26 . 2015-01-14 05:44 3972544 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2015-02-11 12:26 . 2015-01-14 05:44 3917760 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2015-02-11 12:26 . 2015-01-14 06:05 503808 ----a-w- c:\windows\system32\srcore.dll
2015-02-11 12:26 . 2015-01-14 06:05 50176 ----a-w- c:\windows\system32\srclient.dll
2015-02-11 12:26 . 2015-01-14 06:04 296960 ----a-w- c:\windows\system32\rstrui.exe
2015-02-11 12:26 . 2015-01-14 05:41 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2015-02-11 12:26 . 2015-01-09 02:03 3201536 ----a-w- c:\windows\system32\win32k.sys
2015-02-11 10:30 . 2015-02-11 10:30 -------- d-----w- c:\program files (x86)\goodChoice
2015-02-11 10:30 . 2015-02-11 10:30 -------- d-----w- c:\program files (x86)\Color My SNS
2015-02-09 16:12 . 2015-02-10 13:42 -------- d-----w- c:\program files\CCleaner
2015-02-08 14:09 . 2015-02-08 14:11 -------- d-----w- c:\users\André\AppData\Roaming\FreeAudioEditor
2015-02-08 14:05 . 2015-02-10 13:43 -------- d-----w- c:\program files (x86)\Free Codec Pack
2015-02-08 14:05 . 2015-02-10 13:43 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2015-02-04 14:27 . 2015-02-04 14:27 -------- d-sh--w- c:\users\André\AppData\Local\EmieBrowserModeList
2015-02-04 14:22 . 2015-02-04 14:22 -------- d-----w- c:\users\André\AppData\Roaming\sparta123
2015-02-04 13:45 . 2015-02-04 13:45 -------- d-----w- c:\windows\SysWow64\controlfirmwareGUI
2015-02-04 10:05 . 2015-02-20 17:07 -------- d-----w- c:\program files\iTunes
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-03 09:19 . 2014-06-26 17:43 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-25 21:30 . 2013-04-23 10:29 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-25 21:30 . 2013-04-23 10:29 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-20 17:42 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2015-02-12 09:25 . 2013-09-25 14:24 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-01-30 22:36 . 2015-01-30 22:36 23760 ----a-w- c:\windows\system32\drivers\DDDriver64Dcsa.sys
2015-01-30 22:36 . 2015-01-30 22:36 23312 ----a-w- c:\windows\system32\drivers\DellProf.sys
2014-12-31 11:14 . 2010-11-21 03:27 298120 ------w- c:\windows\system32\MpSigStub.exe
2014-12-19 03:06 . 2015-01-14 16:08 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-19 01:46 . 2015-01-14 16:08 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-12-11 17:47 . 2015-01-14 16:08 52736 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-12-06 04:17 . 2015-01-14 16:08 303616 ----a-w- c:\windows\system32\nlasvc.dll
2014-12-06 03:50 . 2015-01-14 16:08 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2014-12-06 03:50 . 2015-01-14 16:08 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-05-27 23:08 220632 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-05-27 23:08 220632 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-05-27 23:08 220632 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-10-17 43816]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816]
"IAStorUI"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe" [2012-11-19 632376]
"DsLauncher"="c:\program files (x86)\AlienRespawn\dslauncher.exe" [2012-01-27 312640]
"PC-Doctor Module"="c:\program files\AlienAutopsy\pcdlauncher.exe" [2014-01-31 457720]
"DellSystemDetect"="c:\users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe" [2015-02-20 283432]
"Revo Uninstaller"="c:\program files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe" [2013-07-03 3161648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Recon3Di Control Panel"="c:\program files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe" [2011-12-21 880640]
.
c:\users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Netzmanager.lnk - c:\program files\Netzmanager\netzmanager.exe /Autostart [2012-7-20 14134784]
Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Officejet 6700\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN41AD50RJ05RQ;CONNECTION=NW;MONITOR=1; [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-2-22 1380128]
Qualcomm Atheros Killer Network Manager.lnk - c:\program files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe -minimized [2012-2-15 549888]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll c:\progra~2\NVIDIA~1\NVSTRE~1\rxinput.dll c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"UpdReg"=c:\windows\UpdReg.EXE
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"HP Software Update"=c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"PDFPrint"=c:\program files (x86)\PDF24\pdf24.exe
"SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DLPortIO;DriverLINX Port I/O Driver; [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 dcdbas;System Management Driver;c:\windows\system32\DRIVERS\dcdbas64.sys;c:\windows\SYSNATIVE\DRIVERS\dcdbas64.sys [x]
R3 HDJCtrl;Hercules DJ Control MP3 Service;c:\windows\system32\Drivers\HDJCtrl.sys;c:\windows\SYSNATIVE\Drivers\HDJCtrl.sys [x]
R3 HDJMidi;Hercules DJ Control MP3 MIDI;c:\windows\system32\DRIVERS\HDJMidi.sys;c:\windows\SYSNATIVE\DRIVERS\HDJMidi.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 rzudd;Razer Keyboard Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 EMSC;COMPAL Embedded System Control;c:\windows\system32\DRIVERS\EMSC.SYS;c:\windows\SYSNATIVE\DRIVERS\EMSC.SYS [x]
S0 iaStorA;iaStorA;c:\windows\system32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\drivers\iaStorF.sys;c:\windows\SYSNATIVE\drivers\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 BfLwf;Bigfoot Networks Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AlienFusionService;Alienware Fusion Service;c:\program files\Alienware\Command Center\AlienFusionService.exe;c:\program files\Alienware\Command Center\AlienFusionService.exe [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 codecwinsockapi.exe;codecwinsockapi.exe;c:\users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe;c:\users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe [x]
S2 controlfirmwareGUI;controlfirmwareGUI;c:\windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe;c:\windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe [x]
S2 CtHdaSvc;Sound Core3D Service;c:\windows\sysWow64\CtHdaSvc.exe;c:\windows\sysWow64\CtHdaSvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys [x]
S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [x]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\AlienRespawn\sftservice.EXE;c:\program files (x86)\AlienRespawn\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [x]
S2 WTGService;WTGService;c:\program files (x86)\Verbindungsassistent\WTGService.exe;c:\program files (x86)\Verbindungsassistent\WTGService.exe [x]
S3 Ak27x64;Killer Wireless-N 1102 device driver;c:\windows\system32\DRIVERS\Ak27x64.sys;c:\windows\SYSNATIVE\DRIVERS\Ak27x64.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 cthda;Sound Core3D(CtHda.sys);c:\windows\system32\drivers\cthda.sys;c:\windows\SYSNATIVE\drivers\cthda.sys [x]
S3 DDDriver;DDDriver;c:\windows\system32\drivers\DDDriver64Dcsa.sys;c:\windows\SYSNATIVE\drivers\DDDriver64Dcsa.sys [x]
S3 DellProf;DellProf;c:\windows\system32\drivers\DellProf.sys;c:\windows\SYSNATIVE\drivers\DellProf.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0
*Deregistered* - PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0
.
Inhalt des "geplante Tasks" Ordners
.
2015-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-23 21:30]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-05-27 23:08 244696 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-05-27 23:08 244696 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-05-27 23:08 244696 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Command Center Controllers"="c:\program files\Alienware\Command Center\AWCCStartupOrchestrator.exe" [2012-06-15 12656]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-18 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-18 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-18 440600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
mSearch Page = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>;*origin.com;*ea.com;*akamaihd.net
uInternet Settings,ProxyServer = http=127.0.0.1:11917
IE: An OneNote s&enden - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
LSP: %SYSTEMROOT%\system32\BfLLR.dll
Trusted Zone: dell.com
TCP: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{8BA85C75-763B-4103-94EB-9470F12FE0F7} - (no file)
ShellIconOverlayIdentifiers-{CD55129A-B1A1-438E-A425-CEBC7DC684EE} - (no file)
ShellIconOverlayIdentifiers-{E768CD3B-BDDC-436D-9C13-E1B39CA257B1} - (no file)
AddRemove-Hot Jingle Player - c:\program files (x86)\Hot Jingle Player\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-03-03 17:34:13
ComboFix-quarantined-files.txt 2015-03-03 16:34
ComboFix2.txt 2015-02-18 22:17
.
Vor Suchlauf: 22 Verzeichnis(se), 204.658.024.448 Bytes frei
Nach Suchlauf: 24 Verzeichnis(se), 204.316.000.256 Bytes frei
.
- - End Of File - - CD1ECD115F210CC53E20337E0822B468
5C616939100B85E558DA92B899A0FC36
Code:
ATTFilter ComboFix 15-03-01.01 - André 03.03.2015 17:21:02.2.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.12170.8140 [GMT 1:00]
ausgeführt von:: c:\users\AndrÚ\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Enabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-02-03 bis 2015-03-03 ))))))))))))))))))))))))))))))
.
.
2015-03-03 16:30 . 2015-03-03 16:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-03 16:09 . 2015-03-03 16:09 -------- d-----w- c:\program files (x86)\VS Revo Group
2015-03-03 14:52 . 2015-01-29 09:07 11910896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{EBD1EB74-868E-4647-A298-A6AFDDD1D4BF}\mpengine.dll
2015-03-03 09:29 . 2015-03-03 09:31 -------- d-----w- C:\FRST
2015-03-02 19:14 . 2015-03-02 19:14 -------- d-----w- c:\users\André\AppData\Local\codecwinsockapi
2015-03-02 19:14 . 2015-02-26 09:48 1032603 ----a-w- c:\program files (x86)\wauctla-setup.exe
2015-03-02 19:14 . 2015-03-02 19:10 2664983 ----a-w- c:\program files (x86)\ExtensionsInstallerAsUpdate.exe
2015-03-02 19:14 . 2015-03-02 19:10 2750425 ----a-w- c:\program files (x86)\distribution-installer.exe
2015-03-02 12:49 . 2015-01-29 09:07 11910896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-02-28 18:00 . 2015-02-28 18:00 -------- d-----w- c:\windows\SysWow64\NV
2015-02-28 18:00 . 2015-02-28 18:00 -------- d-----w- c:\windows\system32\NV
2015-02-25 21:29 . 2015-02-25 21:29 17304752 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2015-02-24 10:21 . 2006-06-28 14:44 262144 ----a-w- c:\windows\SysWow64\dashard2006.dll
2015-02-24 10:21 . 2004-03-16 10:04 110592 ----a-w- c:\windows\SysWow64\dashard.dll
2015-02-24 10:21 . 2015-02-24 10:21 -------- d-----w- c:\program files (x86)\FreeStyler
2015-02-24 09:51 . 2015-02-24 10:18 -------- d-----w- c:\program files (x86)\dw-lighting
2015-02-23 22:02 . 2015-02-23 22:03 -------- d-----w- c:\users\André\AppData\Local\Europa Casino
2015-02-22 20:38 . 2015-02-22 20:38 -------- d-----w- c:\program files (x86)\CasinoOnNet
2015-02-22 11:46 . 2015-03-02 12:43 -------- d-----w- c:\users\André\AppData\Local\SCasino
2015-02-22 11:36 . 2014-09-16 20:53 1188440 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B1295466-44E7-4EE2-8BD2-26F12949B675}\gapaengine.dll
2015-02-20 21:08 . 2015-03-03 09:15 -------- d-----w- c:\programdata\Bigfoot Networks
2015-02-20 21:08 . 2015-02-20 21:08 -------- d-----w- c:\program files\Qualcomm Atheros
2015-02-20 20:44 . 2015-03-03 09:13 -------- d-----w- c:\programdata\NVIDIA
2015-02-20 20:44 . 2015-02-20 20:44 -------- d-----w- c:\users\UpdatusUser
2015-02-20 20:43 . 2012-06-05 07:25 2561896 ----a-w- c:\windows\system32\nvsvcr.dll
2015-02-20 20:43 . 2012-06-05 07:25 888680 ----a-w- c:\windows\system32\nvvsvc.exe
2015-02-20 20:43 . 2012-06-05 07:25 862056 ----a-w- c:\windows\system32\nv3dappshext.dll
2015-02-20 20:43 . 2012-06-05 07:25 63336 ----a-w- c:\windows\system32\nvshext.dll
2015-02-20 20:43 . 2012-06-05 07:25 55656 ----a-w- c:\windows\system32\nv3dappshextr.dll
2015-02-20 20:43 . 2012-06-05 07:25 118120 ----a-w- c:\windows\system32\nvmctray.dll
2015-02-20 20:43 . 2012-06-05 07:25 6156136 ----a-w- c:\windows\system32\nvcpl.dll
2015-02-20 20:43 . 2012-06-05 07:25 3152232 ----a-w- c:\windows\system32\nvsvc64.dll
2015-02-20 20:43 . 2012-06-05 07:24 2644963 ----a-w- c:\windows\system32\nvcoproc.bin
2015-02-20 20:33 . 2013-12-10 14:32 1435504 ----a-w- c:\windows\system32\nvumdshimx.dll
2015-02-20 20:33 . 2013-12-10 14:32 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2015-02-20 20:33 . 2013-12-10 14:32 3067560 ----a-w- c:\windows\system32\nvapi64.dll
2015-02-20 20:33 . 2012-06-05 12:55 1753448 ----a-w- c:\windows\system32\nvdispco64.dll
2015-02-20 20:33 . 2012-06-05 12:55 1468264 ----a-w- c:\windows\system32\nvdispgenco64.dll
2015-02-20 17:01 . 2015-02-20 17:01 -------- d-----w- c:\users\André\AppData\Local\Downloaded Installations
2015-02-20 16:56 . 2000-05-11 00:00 90112 ------w- c:\windows\Updreg.EXE
2015-02-20 16:56 . 2015-02-20 16:56 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2015-02-20 16:56 . 2015-02-20 16:56 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2015-02-20 16:56 . 2015-02-20 16:56 123480 ----a-w- c:\windows\system32\OpenAL32.dll
2015-02-20 16:56 . 2015-02-20 16:56 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2015-02-20 16:56 . 2012-01-13 10:23 1944064 ------w- c:\windows\system32\Sens_oal.dll
2015-02-20 16:56 . 2012-01-13 10:21 2906586 ------w- c:\windows\SysWow64\Sens_oal.dll
2015-02-20 16:56 . 2015-02-20 16:56 -------- d-----w- c:\program files (x86)\Common Files\Creative Labs Shared
2015-02-20 16:55 . 2012-03-27 17:58 1052760 ----a-w- c:\windows\system32\drivers\CtHda.sys
2015-02-20 16:55 . 2012-03-27 17:54 134144 ----a-w- c:\windows\system32\CtHdaS64.exe
2015-02-20 16:55 . 2012-03-27 17:53 574464 ----a-w- c:\windows\system32\CtHdaC64.dll
2015-02-20 16:55 . 2012-03-27 17:52 122880 ----a-w- c:\windows\SysWow64\CtHdaSvc.exe
2015-02-20 16:55 . 2012-03-27 17:52 470016 ----a-w- c:\windows\SysWow64\CtHdaCtl.dll
2015-02-20 16:55 . 2012-03-02 21:41 25088 ----a-w- c:\windows\MEptDef.exe
2015-02-20 16:55 . 2012-02-29 11:34 10240 ----a-r- c:\windows\InstHlp.exe
2015-02-20 16:55 . 2012-02-13 18:16 889856 ----a-w- c:\windows\system32\CtHRFX64.dll
2015-02-20 16:55 . 2011-10-28 10:45 4894 ----a-w- c:\windows\cthdaGER.reg
2015-02-20 16:55 . 2011-10-24 09:02 4850 ----a-w- c:\windows\cthdaeng.reg
2015-02-20 16:55 . 2010-09-15 10:39 235520 ----a-w- c:\windows\system32\CtDco64.dll
2015-02-20 16:55 . 2006-12-05 13:52 48400 ----a-w- c:\windows\AddCat.exe
2015-02-20 16:46 . 2012-02-23 04:46 39976 ----a-w- c:\windows\system32\drivers\btwl2cap.sys
2015-02-20 16:46 . 2012-02-23 04:46 21544 ----a-w- c:\windows\system32\drivers\btwrchid.sys
2015-02-20 16:46 . 2012-02-23 04:46 211496 ----a-w- c:\windows\system32\drivers\btwavdt.sys
2015-02-20 16:46 . 2012-02-23 04:46 184360 ----a-w- c:\windows\system32\drivers\btwaudio.sys
2015-02-20 16:37 . 2015-02-20 16:37 -------- d-----w- c:\windows\SysWow64\Atheros_L1e
2015-02-20 16:32 . 2011-12-06 14:55 53248 ----a-w- c:\windows\SysWow64\CSVer.dll
2015-02-20 11:19 . 2015-02-12 16:39 44856 ----a-w- c:\windows\system32\uxtuneup.dll
2015-02-20 11:19 . 2015-02-12 16:39 36664 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2015-02-20 10:07 . 2015-02-20 10:07 -------- d-----w- c:\users\André\AppData\Roaming\PCDr
2015-02-20 10:06 . 2015-02-20 10:06 -------- d-----w- c:\programdata\PCDr
2015-02-20 09:31 . 2015-02-12 16:39 41784 ----a-w- c:\windows\system32\TURegOpt.exe
2015-02-20 09:31 . 2015-02-12 16:39 30520 ----a-w- c:\windows\system32\authuitu.dll
2015-02-20 09:31 . 2015-02-12 16:39 25912 ----a-w- c:\windows\SysWow64\authuitu.dll
2015-02-20 09:21 . 2015-02-20 09:21 -------- d-----w- c:\program files (x86)\iTunes
2015-02-20 09:21 . 2015-02-20 09:22 -------- d-----w- c:\programdata\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-20 09:21 . 2015-02-20 09:21 -------- d-----w- c:\program files\iPod
2015-02-20 09:01 . 2015-02-20 09:01 -------- d-----w- C:\Dell
2015-02-20 08:55 . 2015-02-20 08:56 -------- d-----w- c:\programdata\Dell
2015-02-19 13:26 . 2015-02-19 20:48 -------- d-----w- c:\windows\system32\drivers\etc
2015-02-18 15:37 . 2015-02-19 11:52 -------- d-----w- c:\windows\system32\log
2015-02-18 09:07 . 2015-02-18 09:07 -------- d-----w- c:\program files (x86)\Microsoft CAPICOM 2.1.0.2
2015-02-17 09:07 . 2015-02-17 09:07 -------- d-----w- c:\users\André\AppData\Local\Scansoft
2015-02-16 10:43 . 2015-02-16 10:43 -------- d-----w- c:\programdata\CanonIJPLM
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\programdata\InstallShield
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\users\André\AppData\Roaming\ScanSoft
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\programdata\ScanSoft
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\program files (x86)\Common Files\ScanSoft Shared
2015-02-16 10:37 . 2015-02-16 10:37 -------- d-----w- c:\program files (x86)\ScanSoft
2015-02-16 10:28 . 2015-02-16 10:28 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2015-02-16 10:28 . 2006-12-25 20:00 236544 ----a-w- c:\windows\system32\CNMLM8R.DLL
2015-02-16 10:27 . 2006-06-29 05:30 17408 ----a-w- c:\windows\system32\cnco140.dll
2015-02-16 10:27 . 2006-11-10 02:03 1337344 ----a-w- c:\windows\system32\CNCC140.DLL
2015-02-16 10:27 . 2006-11-10 02:02 49664 ----a-w- c:\windows\system32\CNCI140.DLL
2015-02-16 10:27 . 2006-05-26 07:23 90624 ----a-w- c:\windows\system32\CNCL140.DLL
2015-02-16 10:27 . 2015-02-16 10:27 -------- d--h--w- c:\program files\CanonBJ
2015-02-15 19:26 . 2015-02-15 19:26 -------- d-----w- c:\program files\Dell
2015-02-13 08:39 . 2015-01-23 03:43 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2015-02-13 08:39 . 2015-01-23 04:41 6041600 ----a-w- c:\windows\system32\jscript9.dll
2015-02-13 08:39 . 2015-01-23 03:17 4300800 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-02-13 08:39 . 2015-01-23 04:42 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-02-12 20:34 . 2015-02-12 20:34 -------- d-----w- c:\programdata\Grisoft
2015-02-11 12:32 . 2015-01-13 03:10 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-02-11 12:31 . 2014-10-04 02:10 3722752 ----a-w- c:\windows\system32\mstscax.dll
2015-02-11 12:31 . 2014-10-04 01:42 3221504 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-02-11 12:31 . 2014-10-04 01:42 131584 ----a-w- c:\windows\SysWow64\aaclient.dll
2015-02-11 12:29 . 2014-12-08 03:09 406528 ----a-w- c:\windows\system32\scesrv.dll
2015-02-11 12:29 . 2014-12-08 02:46 308224 ----a-w- c:\windows\SysWow64\scesrv.dll
2015-02-11 12:26 . 2015-01-14 06:09 5554112 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-02-11 12:26 . 2015-01-14 05:44 3972544 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2015-02-11 12:26 . 2015-01-14 05:44 3917760 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2015-02-11 12:26 . 2015-01-14 06:05 503808 ----a-w- c:\windows\system32\srcore.dll
2015-02-11 12:26 . 2015-01-14 06:05 50176 ----a-w- c:\windows\system32\srclient.dll
2015-02-11 12:26 . 2015-01-14 06:04 296960 ----a-w- c:\windows\system32\rstrui.exe
2015-02-11 12:26 . 2015-01-14 05:41 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2015-02-11 12:26 . 2015-01-09 02:03 3201536 ----a-w- c:\windows\system32\win32k.sys
2015-02-11 10:30 . 2015-02-11 10:30 -------- d-----w- c:\program files (x86)\goodChoice
2015-02-11 10:30 . 2015-02-11 10:30 -------- d-----w- c:\program files (x86)\Color My SNS
2015-02-09 16:12 . 2015-02-10 13:42 -------- d-----w- c:\program files\CCleaner
2015-02-08 14:09 . 2015-02-08 14:11 -------- d-----w- c:\users\André\AppData\Roaming\FreeAudioEditor
2015-02-08 14:05 . 2015-02-10 13:43 -------- d-----w- c:\program files (x86)\Free Codec Pack
2015-02-08 14:05 . 2015-02-10 13:43 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2015-02-04 14:27 . 2015-02-04 14:27 -------- d-sh--w- c:\users\André\AppData\Local\EmieBrowserModeList
2015-02-04 14:22 . 2015-02-04 14:22 -------- d-----w- c:\users\André\AppData\Roaming\sparta123
2015-02-04 13:45 . 2015-02-04 13:45 -------- d-----w- c:\windows\SysWow64\controlfirmwareGUI
2015-02-04 10:05 . 2015-02-20 17:07 -------- d-----w- c:\program files\iTunes
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-03 09:19 . 2014-06-26 17:43 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-25 21:30 . 2013-04-23 10:29 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-25 21:30 . 2013-04-23 10:29 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-20 17:42 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2015-02-12 09:25 . 2013-09-25 14:24 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-01-30 22:36 . 2015-01-30 22:36 23760 ----a-w- c:\windows\system32\drivers\DDDriver64Dcsa.sys
2015-01-30 22:36 . 2015-01-30 22:36 23312 ----a-w- c:\windows\system32\drivers\DellProf.sys
2014-12-31 11:14 . 2010-11-21 03:27 298120 ------w- c:\windows\system32\MpSigStub.exe
2014-12-19 03:06 . 2015-01-14 16:08 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-19 01:46 . 2015-01-14 16:08 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-12-11 17:47 . 2015-01-14 16:08 52736 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-12-06 04:17 . 2015-01-14 16:08 303616 ----a-w- c:\windows\system32\nlasvc.dll
2014-12-06 03:50 . 2015-01-14 16:08 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2014-12-06 03:50 . 2015-01-14 16:08 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-05-27 23:08 220632 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-05-27 23:08 220632 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-05-27 23:08 220632 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-10-17 43816]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816]
"IAStorUI"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe" [2012-11-19 632376]
"DsLauncher"="c:\program files (x86)\AlienRespawn\dslauncher.exe" [2012-01-27 312640]
"PC-Doctor Module"="c:\program files\AlienAutopsy\pcdlauncher.exe" [2014-01-31 457720]
"DellSystemDetect"="c:\users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe" [2015-02-20 283432]
"Revo Uninstaller"="c:\program files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe" [2013-07-03 3161648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Recon3Di Control Panel"="c:\program files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe" [2011-12-21 880640]
.
c:\users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Netzmanager.lnk - c:\program files\Netzmanager\netzmanager.exe /Autostart [2012-7-20 14134784]
Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Officejet 6700\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN41AD50RJ05RQ;CONNECTION=NW;MONITOR=1; [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-2-22 1380128]
Qualcomm Atheros Killer Network Manager.lnk - c:\program files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe -minimized [2012-2-15 549888]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll c:\progra~2\NVIDIA~1\NVSTRE~1\rxinput.dll c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"UpdReg"=c:\windows\UpdReg.EXE
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"HP Software Update"=c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"PDFPrint"=c:\program files (x86)\PDF24\pdf24.exe
"SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DLPortIO;DriverLINX Port I/O Driver; [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 dcdbas;System Management Driver;c:\windows\system32\DRIVERS\dcdbas64.sys;c:\windows\SYSNATIVE\DRIVERS\dcdbas64.sys [x]
R3 HDJCtrl;Hercules DJ Control MP3 Service;c:\windows\system32\Drivers\HDJCtrl.sys;c:\windows\SYSNATIVE\Drivers\HDJCtrl.sys [x]
R3 HDJMidi;Hercules DJ Control MP3 MIDI;c:\windows\system32\DRIVERS\HDJMidi.sys;c:\windows\SYSNATIVE\DRIVERS\HDJMidi.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 rzudd;Razer Keyboard Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 EMSC;COMPAL Embedded System Control;c:\windows\system32\DRIVERS\EMSC.SYS;c:\windows\SYSNATIVE\DRIVERS\EMSC.SYS [x]
S0 iaStorA;iaStorA;c:\windows\system32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\drivers\iaStorF.sys;c:\windows\SYSNATIVE\drivers\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 BfLwf;Bigfoot Networks Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AlienFusionService;Alienware Fusion Service;c:\program files\Alienware\Command Center\AlienFusionService.exe;c:\program files\Alienware\Command Center\AlienFusionService.exe [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 codecwinsockapi.exe;codecwinsockapi.exe;c:\users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe;c:\users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe [x]
S2 controlfirmwareGUI;controlfirmwareGUI;c:\windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe;c:\windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe [x]
S2 CtHdaSvc;Sound Core3D Service;c:\windows\sysWow64\CtHdaSvc.exe;c:\windows\sysWow64\CtHdaSvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys [x]
S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [x]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\AlienRespawn\sftservice.EXE;c:\program files (x86)\AlienRespawn\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [x]
S2 WTGService;WTGService;c:\program files (x86)\Verbindungsassistent\WTGService.exe;c:\program files (x86)\Verbindungsassistent\WTGService.exe [x]
S3 Ak27x64;Killer Wireless-N 1102 device driver;c:\windows\system32\DRIVERS\Ak27x64.sys;c:\windows\SYSNATIVE\DRIVERS\Ak27x64.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 cthda;Sound Core3D(CtHda.sys);c:\windows\system32\drivers\cthda.sys;c:\windows\SYSNATIVE\drivers\cthda.sys [x]
S3 DDDriver;DDDriver;c:\windows\system32\drivers\DDDriver64Dcsa.sys;c:\windows\SYSNATIVE\drivers\DDDriver64Dcsa.sys [x]
S3 DellProf;DellProf;c:\windows\system32\drivers\DellProf.sys;c:\windows\SYSNATIVE\drivers\DellProf.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0
*Deregistered* - PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0
.
Inhalt des "geplante Tasks" Ordners
.
2015-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-23 21:30]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-05-27 23:08 244696 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-05-27 23:08 244696 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-05-27 23:08 244696 ----a-w- c:\users\André\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Command Center Controllers"="c:\program files\Alienware\Command Center\AWCCStartupOrchestrator.exe" [2012-06-15 12656]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-18 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-18 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-18 440600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
mSearch Page = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>;*origin.com;*ea.com;*akamaihd.net
uInternet Settings,ProxyServer = http=127.0.0.1:11917
IE: An OneNote s&enden - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
LSP: %SYSTEMROOT%\system32\BfLLR.dll
Trusted Zone: dell.com
TCP: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{8BA85C75-763B-4103-94EB-9470F12FE0F7} - (no file)
ShellIconOverlayIdentifiers-{CD55129A-B1A1-438E-A425-CEBC7DC684EE} - (no file)
ShellIconOverlayIdentifiers-{E768CD3B-BDDC-436D-9C13-E1B39CA257B1} - (no file)
AddRemove-Hot Jingle Player - c:\program files (x86)\Hot Jingle Player\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-03-03 17:34:13
ComboFix-quarantined-files.txt 2015-03-03 16:34
ComboFix2.txt 2015-02-18 22:17
.
Vor Suchlauf: 22 Verzeichnis(se), 204.658.024.448 Bytes frei
Nach Suchlauf: 24 Verzeichnis(se), 204.316.000.256 Bytes frei
.
- - End Of File - - CD1ECD115F210CC53E20337E0822B468
5C616939100B85E558DA92B899A0FC36
|
|
04.03.2015, 08:40
| #7 |
| /// the machine /// TB-Ausbilder | edealspop und n10.adshostnet.com/ads? stört Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.03.2015, 10:22
| #8 |
| | edealspop und n10.adshostnet.com/ads? stört mbam: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.03.2015 Suchlauf-Zeit: 09:50:21 Logdatei: mbam.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.03.04.03 Rootkit Datenbank: v2015.02.25.01 Lizenz: Premium Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Aktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: André Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 451668 Verstrichene Zeit: 14 Min, 36 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.111 - Bericht erstellt 04/03/2015 um 10:08:37
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-03-02.3 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : André - ALIENWAREGAMING
# Gestarted von : C:\Users\André\Desktop\AdwCleaner_4.111.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Program Files (x86)\distribution-installer.exe
Datei Gelöscht : C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517\user.js
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Pirrit
Schlüssel Gelöscht : HKLM\SOFTWARE\Upt
Schlüssel Gelöscht : HKLM\SOFTWARE\WinUpd
Schlüssel Gelöscht : HKLM\SOFTWARE\RST
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Pirrit
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Upt
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WinUpd
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\RST
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>;*origin.com;*ea.com;*akamaihd.net
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:10578
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17631
-\\ Mozilla Firefox v27.0.1 (de)
-\\ Google Chrome v
-\\ Opera v27.0.1689.76
*************************
AdwCleaner[R5].txt - [1750 Bytes] - [04/03/2015 10:06:36]
AdwCleaner[S5].txt - [1656 Bytes] - [04/03/2015 10:08:37]
########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1715 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.3 (03.01.2015:1)
OS: Windows 7 Home Premium x64
Ran by Andr‚ on 04.03.2015 at 10:16:38,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Folder] "C:\Users\Andr‚\AppData\Roaming\pcdr"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.03.2015 at 10:19:55,56
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by André (administrator) on ALIENWAREGAMING on 04-03-2015 10:20:42
Running from C:\Users\André\Downloads
Loaded Profiles: André & UpdatusUser (Available profiles: André & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe
(Dell) C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Users\André\AppData\Local\codecwinsockapi\commanditvdataSched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
() C:\Program Files (x86)\Opera\27.0.1689.76\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
() C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware)
HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [IAStorUI] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe [632376 2012-11-19] (Intel Corporation)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DsLauncher] => C:\Program Files (x86)\AlienRespawn\dslauncher.exe [312640 2012-01-27] (SoftThinks - Dell)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [PC-Doctor Module] => C:\Program Files\AlienAutopsy\pcdlauncher.exe [457720 2014-01-31] (PC-Doctor, Inc.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [Revo Uninstaller] => C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe [3161648 2013-07-03] (VS Revo Group)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DellSystemDetect] => C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe [283432 2015-02-20] (Dell)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll => c:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => No File
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => No File
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [S-1-5-21-829858747-3269657560-2013248277-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-829858747-3269657560-2013248277-1001] => http=127.0.0.1:12145
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 16 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @protectdisc.com/NPMPDRM -> C:\Users\André\AppData\Local\mpDRM\Binaries\NPMPDRM.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\André\AppData\Local\Google\Chrome\User Data\default
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 codecwinsockapi.exe; C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe [229888 2015-03-02] () [File not signed]
R2 controlfirmwareGUI; C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe [83456 2015-01-19] () [File not signed]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-02-20] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-02-20] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed]
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-27] (Creative Technology Ltd) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-01] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-20] (Electronic Arts)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2015-02-12] (AVG Technologies)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-12] (AVG Technologies)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-12] (AVG Technologies)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [330696 2010-11-18] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)
R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-27] (Creative Technology Ltd)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-27] (DT Soft Ltd)
S3 HDJCtrl; C:\Windows\System32\Drivers\HDJCtrl.sys [38704 2013-05-21] (© Guillemot R&D, 2012. All rights reserved.)
S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [274736 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [121600 2013-05-11] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-11-20] (Intel Corporation)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-12-10] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-11-24] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]
U5 ewusbnet; C:\Windows\SysWOW64\Drivers\ewusbnet.sys [256000 2013-05-11] (Huawei Technologies Co., Ltd.)
U5 ew_hwusbdev; C:\Windows\SysWOW64\Drivers\ew_hwusbdev.sys [117248 2013-05-11] (Huawei Technologies Co., Ltd.)
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-04 10:19 - 2015-03-04 10:19 - 00000751 _____ () C:\Users\André\Desktop\JRT.txt
2015-03-04 10:06 - 2015-03-04 10:08 - 00000000 ____D () C:\AdwCleaner
2015-03-04 10:06 - 2015-03-04 10:06 - 00001193 _____ () C:\Users\André\Desktop\mbam.txt
2015-03-04 10:01 - 2015-03-04 10:01 - 02126848 _____ () C:\Users\André\Desktop\AdwCleaner_4.111.exe
2015-03-04 10:01 - 2015-03-04 10:01 - 01388333 _____ (Thisisu) C:\Users\André\Desktop\JRT.exe
2015-03-03 21:08 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 21:08 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 21:08 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 21:08 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 17:34 - 2015-03-03 17:34 - 00037327 _____ () C:\ComboFix.txt
2015-03-03 17:14 - 2015-03-03 17:14 - 05612482 ____R (Swearware) C:\Users\André\Desktop\ComboFix.exe
2015-03-03 17:09 - 2015-03-03 17:09 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\André\Downloads\revosetup95.exe
2015-03-03 17:09 - 2015-03-03 17:09 - 00001266 _____ () C:\Users\André\Desktop\Revo Uninstaller.lnk
2015-03-03 17:09 - 2015-03-03 17:09 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-03 10:30 - 2015-03-04 10:20 - 00024794 _____ () C:\Users\André\Downloads\FRST.txt
2015-03-03 10:30 - 2015-03-03 10:31 - 00047313 _____ () C:\Users\André\Downloads\Addition.txt
2015-03-03 10:29 - 2015-03-04 10:20 - 00000000 ____D () C:\FRST
2015-03-03 10:29 - 2015-03-03 10:29 - 02092544 _____ (Farbar) C:\Users\André\Downloads\FRST64.exe
2015-03-02 20:14 - 2015-03-02 20:14 - 00000000 ____D () C:\Users\André\AppData\Local\codecwinsockapi
2015-03-02 20:14 - 2015-03-02 20:10 - 02664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe
2015-03-02 20:14 - 2015-02-26 10:48 - 01032603 _____ (wauctla ) C:\Program Files (x86)\wauctla-setup.exe
2015-03-02 16:53 - 2015-03-03 12:56 - 00000000 ____D () C:\Users\André\Desktop\40.Geburtstag 28.2.2015
2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\SysWOW64\NV
2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\system32\NV
2015-02-28 18:52 - 2015-02-28 18:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-27 11:26 - 2015-02-28 23:43 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner (2)
2015-02-26 09:27 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 09:27 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 22:55 - 2015-02-25 22:55 - 51133698 _____ () C:\Users\André\Downloads\bdp7500b2_12_fus_deu.zip
2015-02-25 22:29 - 2015-02-25 22:29 - 17304752 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-02-24 11:44 - 2015-02-24 11:44 - 18115808 _____ () C:\Users\André\Downloads\DMXControl_2.12.2_Setup.exe
2015-02-24 11:44 - 2015-02-24 11:44 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DMXControl
2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeStyler
2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\Program Files (x86)\FreeStyler
2015-02-24 11:21 - 2006-06-28 15:44 - 00262144 _____ () C:\Windows\SysWOW64\dashard2006.dll
2015-02-24 11:21 - 2004-03-16 11:04 - 00110592 _____ () C:\Windows\SysWOW64\dashard.dll
2015-02-24 11:03 - 2015-02-24 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Afterglow Slim
2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dw-lighting
2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\Program Files (x86)\dw-lighting
2015-02-23 23:03 - 2015-02-23 23:03 - 01432904 _____ (RealTimeGaming Software) C:\Users\André\Downloads\setup.exe
2015-02-23 23:03 - 2015-02-23 23:03 - 00001812 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Europa Casino.lnk
2015-02-23 23:02 - 2015-02-23 23:03 - 00000000 ____D () C:\Users\André\AppData\Local\Europa Casino
2015-02-22 21:38 - 2015-02-22 21:38 - 00002038 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\888casino.lnk
2015-02-22 21:38 - 2015-02-22 21:38 - 00002014 _____ () C:\Users\UpdatusUser\Desktop\888casino.lnk
2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\888casino
2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\888casino
2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Program Files (x86)\CasinoOnNet
2015-02-22 12:46 - 2015-03-02 13:43 - 00001770 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\SCasino.lnk
2015-02-22 12:46 - 2015-03-02 13:43 - 00000000 ____D () C:\Users\André\AppData\Local\SCasino
2015-02-21 13:49 - 2015-02-21 13:49 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-02-20 22:08 - 2015-03-04 10:11 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\Program Files\Qualcomm Atheros
2015-02-20 21:44 - 2015-03-04 10:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-20 21:44 - 2015-02-20 21:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2015-02-20 21:44 - 2015-02-20 21:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\SoftThinks
2015-02-20 21:44 - 2013-05-28 00:08 - 00002122 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-02-20 21:44 - 2013-04-28 10:02 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2015-02-20 21:44 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-20 21:44 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-20 21:43 - 2012-06-05 08:25 - 06156136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 03152232 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 02561896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00888680 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-20 21:43 - 2012-06-05 08:25 - 00862056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00118120 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00063336 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00055656 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-02-20 21:43 - 2012-06-05 08:24 - 02644963 _____ () C:\Windows\system32\nvcoproc.bin
2015-02-20 21:33 - 2013-12-10 15:32 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-02-20 21:33 - 2013-12-10 15:32 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-02-20 21:33 - 2013-12-10 15:32 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-02-20 21:33 - 2013-12-10 15:32 - 00023287 _____ () C:\Windows\system32\nvinfo.pb
2015-02-20 21:33 - 2012-06-05 13:55 - 01753448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2015-02-20 21:33 - 2012-06-05 13:55 - 01468264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll
2015-02-20 18:01 - 2015-02-20 18:01 - 00000000 ____D () C:\Users\André\AppData\Local\Downloaded Installations
2015-02-20 18:00 - 2015-02-24 11:18 - 00019522 _____ () C:\Windows\DPINST.LOG
2015-02-20 18:00 - 2015-02-20 18:00 - 00001292 _____ () C:\Windows\Synaptics.log
2015-02-20 17:56 - 2015-02-20 17:56 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00000184 _____ () C:\Windows\Setup.log
2015-02-20 17:56 - 2015-02-20 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2015-02-20 17:56 - 2012-01-13 11:23 - 01944064 ____N (Creative) C:\Windows\system32\Sens_oal.dll
2015-02-20 17:56 - 2012-01-13 11:21 - 02906586 ____N (Creative) C:\Windows\SysWOW64\Sens_oal.dll
2015-02-20 17:56 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\Windows\Updreg.EXE
2015-02-20 17:55 - 2012-03-27 18:58 - 01052760 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CtHda.sys
2015-02-20 17:55 - 2012-03-27 18:54 - 00134144 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaS64.exe
2015-02-20 17:55 - 2012-03-27 18:53 - 00574464 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaC64.dll
2015-02-20 17:55 - 2012-03-27 18:52 - 00470016 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaCtl.dll
2015-02-20 17:55 - 2012-03-27 18:52 - 00122880 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
2015-02-20 17:55 - 2012-03-02 22:41 - 00025088 _____ (Creative Technology Ltd.) C:\Windows\MEptDef.exe
2015-02-20 17:55 - 2012-02-29 12:34 - 00010240 ____R (Creative Technology Ltd.) C:\Windows\InstHlp.exe
2015-02-20 17:55 - 2012-02-13 19:16 - 00889856 _____ (Creative Technology Ltd.) C:\Windows\system32\CtHRFX64.dll
2015-02-20 17:55 - 2012-02-13 19:15 - 00011180 _____ () C:\Windows\CtHRFX64.hda
2015-02-20 17:55 - 2011-10-28 11:45 - 00004894 _____ () C:\Windows\cthdaGER.reg
2015-02-20 17:55 - 2011-10-24 10:02 - 00004850 _____ () C:\Windows\cthdaeng.reg
2015-02-20 17:55 - 2010-09-15 11:39 - 00235520 _____ (Creative Technology Limited) C:\Windows\system32\CtDco64.dll
2015-02-20 17:55 - 2006-12-05 14:52 - 00048400 _____ (Creative Technology Ltd.) C:\Windows\AddCat.exe
2015-02-20 17:46 - 2012-02-23 05:46 - 00211496 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys
2015-02-20 17:46 - 2012-02-23 05:46 - 00184360 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys
2015-02-20 17:46 - 2012-02-23 05:46 - 00039976 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys
2015-02-20 17:46 - 2012-02-23 05:46 - 00021544 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys
2015-02-20 17:37 - 2015-02-20 17:37 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2015-02-20 17:32 - 2011-12-06 15:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-02-20 12:19 - 2015-02-12 17:39 - 00044856 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll
2015-02-20 12:19 - 2015-02-12 17:39 - 00036664 _____ (AVG Technologies) C:\Windows\SysWOW64\uxtuneup.dll
2015-02-20 11:06 - 2015-03-04 10:12 - 00003504 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-02-20 10:31 - 2015-02-20 10:31 - 00002227 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2015-02-20 10:31 - 2015-02-20 10:31 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-02-20 10:31 - 2015-02-20 10:31 - 00002203 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
2015-02-20 10:31 - 2015-02-20 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-02-20 10:31 - 2015-02-12 17:39 - 00041784 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe
2015-02-20 10:31 - 2015-02-12 17:39 - 00030520 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll
2015-02-20 10:31 - 2015-02-12 17:39 - 00025912 _____ (AVG Technologies) C:\Windows\SysWOW64\authuitu.dll
2015-02-20 10:22 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-20 10:21 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files\iPod
2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-20 10:01 - 2015-02-20 10:01 - 00000000 ____D () C:\Dell
2015-02-20 09:55 - 2015-02-20 09:56 - 00000000 ____D () C:\ProgramData\Dell
2015-02-18 23:08 - 2015-03-04 10:10 - 00008819 _____ () C:\Windows\setupact.log
2015-02-18 23:08 - 2015-03-04 09:36 - 00021212 _____ () C:\Windows\PFRO.log
2015-02-18 22:52 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-02-18 22:52 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-02-18 22:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-02-18 22:51 - 2015-03-03 17:34 - 00000000 ____D () C:\Qoobox
2015-02-18 22:03 - 2015-02-24 22:03 - 00003866 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1424293363
2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\Users\Public\Desktop\Opera 27.lnk
2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 27.lnk
2015-02-18 16:37 - 2015-02-19 12:52 - 00000000 ____D () C:\Windows\system32\log
2015-02-18 10:07 - 2015-02-18 10:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2015-02-17 10:20 - 2015-02-18 16:55 - 00003858 _____ () C:\Windows\System32\Tasks\SSBkgdUpdate
2015-02-17 10:07 - 2015-02-17 10:07 - 00000000 ____D () C:\Users\André\AppData\Local\Scansoft
2015-02-16 11:43 - 2015-02-16 11:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2015-02-16 11:42 - 2015-02-16 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Benutzerregistrierung
2015-02-16 11:37 - 2015-02-16 11:37 - 00000424 _____ () C:\Windows\MAXLINK.INI
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Users\André\AppData\Roaming\ScanSoft
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\ScanSoft
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\InstallShield
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2015-02-16 11:33 - 2015-02-16 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Manual
2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Notes for Windows Vista
2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series
2015-02-16 11:28 - 2006-12-25 21:00 - 00236544 _____ (CANON INC.) C:\Windows\system32\CNMLM8R.DLL
2015-02-16 11:27 - 2015-02-16 11:27 - 00000000 ___HD () C:\Program Files\CanonBJ
2015-02-16 11:27 - 2006-11-10 03:03 - 01337344 _____ (CANON INC.) C:\Windows\system32\CNCC140.DLL
2015-02-16 11:27 - 2006-11-10 03:02 - 00049664 _____ (CANON INC.) C:\Windows\system32\CNCI140.DLL
2015-02-16 11:27 - 2006-06-29 06:30 - 00017408 _____ (Canon Inc.) C:\Windows\system32\cnco140.dll
2015-02-16 11:27 - 2006-05-26 08:23 - 00090624 _____ (Canon Inc.) C:\Windows\system32\CNCL140.DLL
2015-02-15 21:13 - 2015-02-15 21:13 - 00007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg
2015-02-15 20:26 - 2015-02-15 20:26 - 00000000 ____D () C:\Program Files\Dell
2015-02-15 14:06 - 2015-02-15 14:06 - 00003198 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask-Delay
2015-02-13 09:39 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-13 09:39 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 09:39 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-13 09:39 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-12 21:34 - 2015-02-12 21:34 - 00000000 ____D () C:\ProgramData\Grisoft
2015-02-12 21:29 - 2015-02-12 21:29 - 00000000 ____D () C:\Users\André\Downloads\backups
2015-02-11 13:33 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 13:33 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 13:33 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 13:33 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 13:33 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 13:33 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 13:33 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 13:33 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 13:33 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 13:33 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 13:33 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 13:33 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 13:33 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 13:33 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 13:33 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 13:33 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 13:33 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 13:33 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 13:33 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 13:33 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 13:33 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 13:33 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 13:33 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 13:33 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 13:33 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 13:33 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 13:33 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 13:33 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 13:33 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 13:33 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 13:33 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 13:33 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 13:33 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 13:33 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 13:33 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 13:33 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 13:33 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 13:33 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 13:33 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 13:33 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 13:33 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 13:33 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 13:33 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 13:33 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 13:33 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 13:33 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 13:33 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 13:33 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 13:33 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 13:33 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 13:33 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 13:33 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 13:33 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 13:33 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 13:33 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 13:32 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 13:32 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 13:32 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 13:32 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 13:32 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 13:32 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 13:32 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 13:32 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 13:32 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 13:32 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 13:32 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 13:32 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 13:32 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 13:32 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 13:32 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 13:32 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 13:32 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 13:32 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 13:32 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 13:32 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 13:32 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 13:32 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 13:32 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 13:32 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 13:31 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 13:31 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 13:31 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 13:29 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 13:29 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 13:26 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 13:26 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 13:26 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 13:26 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 13:26 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 13:26 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 13:26 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 13:26 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 12:07 - 2015-02-11 12:07 - 01128916 _____ (www.hellopdf.com ) C:\Users\André\Downloads\nw_33261_pdfwordsetupexe.exe
2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\goodChoice
2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\Color My SNS
2015-02-10 18:06 - 2015-02-10 18:06 - 00709564 _____ () C:\Users\André\Downloads\delfix_10.8.exe
2015-02-10 18:04 - 2015-02-10 18:05 - 01212872 _____ (Zugara Investments Limited ) C:\Users\André\Downloads\adwcleanerexe.exe
2015-02-09 21:41 - 2015-02-09 21:41 - 00000000 _____ () C:\autoexec.bat
2015-02-09 17:13 - 2015-02-10 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-09 17:13 - 2015-02-09 17:13 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-09 17:12 - 2015-02-10 14:42 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-09 17:02 - 2015-02-09 17:04 - 02418464 _____ (Piriform Ltd) C:\Users\André\Downloads\ccsetup502.exe.opdownload
2015-02-09 15:23 - 2015-02-10 14:42 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware
2015-02-09 14:18 - 2015-02-18 23:07 - 00000000 ____D () C:\Windows\erdnt
2015-02-09 11:25 - 2015-02-09 11:25 - 00005012 _____ () C:\Windows\wauctla.InstallState
2015-02-09 11:25 - 2015-02-09 11:25 - 00000529 _____ () C:\Windows\wauctla.InstallLog
2015-02-08 15:09 - 2015-02-08 15:11 - 00000000 ____D () C:\Users\André\AppData\Roaming\FreeAudioEditor
2015-02-08 15:07 - 2015-02-08 15:08 - 03529672 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeAudioEditor.exe
2015-02-08 15:05 - 2015-02-10 14:43 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-08 15:00 - 2015-02-08 15:01 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeYouTubeToMP354Converter.exe
2015-02-08 11:44 - 2015-02-10 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nival
2015-02-08 11:39 - 2015-02-08 11:39 - 15938760 _____ (Nival ) C:\Users\André\Downloads\PWSetup.exe
2015-02-04 15:27 - 2015-02-04 15:27 - 00000000 __SHD () C:\Users\André\AppData\Local\EmieBrowserModeList
2015-02-04 15:22 - 2015-02-04 15:22 - 00000000 ____D () C:\Users\André\AppData\Roaming\sparta123
2015-02-04 14:45 - 2015-02-04 14:45 - 00000000 ____D () C:\Windows\SysWOW64\controlfirmwareGUI
2015-02-04 11:05 - 2015-02-20 18:07 - 00000000 ____D () C:\Program Files\iTunes
2015-02-04 10:59 - 2015-02-04 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-02-02 12:42 - 2015-02-02 12:42 - 00000559 _____ () C:\Users\André\Downloads\qr_code.zip
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-04 10:19 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-04 10:19 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-04 10:18 - 2013-04-28 15:47 - 00000000 ____D () C:\Users\André\Desktop\Eigenschaften
2015-03-04 10:12 - 2014-06-26 18:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-04 10:10 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2015-03-04 10:10 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2015-03-04 10:10 - 2013-04-23 11:55 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn
2015-03-04 10:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-04 10:08 - 2013-04-23 04:25 - 01330119 _____ () C:\Windows\WindowsUpdate.log
2015-03-04 09:43 - 2013-04-23 11:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-04 09:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-03-03 19:25 - 2014-11-30 15:30 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner
2015-03-03 17:30 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-03 10:18 - 2013-04-27 20:01 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-02 11:45 - 2010-11-21 07:50 - 00700794 _____ () C:\Windows\system32\perfh007.dat
2015-03-02 11:45 - 2010-11-21 07:50 - 00150400 _____ () C:\Windows\system32\perfc007.dat
2015-03-02 11:45 - 2009-07-14 06:13 - 01624426 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-01 01:12 - 2013-06-17 21:38 - 00000000 ____D () C:\Users\André\Desktop\dj
2015-02-28 10:57 - 2013-08-13 21:16 - 00000000 ____D () C:\Users\André\Desktop\HVH
2015-02-28 10:47 - 2013-04-23 11:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-28 10:44 - 2014-09-18 21:43 - 00000000 ____D () C:\Users\André\Desktop\HTML
2015-02-28 10:43 - 2014-11-29 11:02 - 00000000 ____D () C:\Users\André\Desktop\fun
2015-02-28 10:43 - 2013-04-28 14:01 - 00000000 ____D () C:\Users\André\Desktop\Ipod
2015-02-25 22:30 - 2013-04-23 11:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-25 22:30 - 2013-04-23 11:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-25 22:30 - 2013-04-23 11:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-24 22:12 - 2014-03-15 11:57 - 00000000 ____D () C:\Users\André\AppData\Roaming\UseNeXT
2015-02-24 22:09 - 2014-03-17 22:22 - 00000000 ____D () C:\Users\André\Documents\UseNeXT
2015-02-24 11:44 - 2013-06-15 09:43 - 00000000 ____D () C:\Program Files (x86)\DMXControl
2015-02-24 11:08 - 2013-06-15 10:13 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DMXControl.lnk
2015-02-24 09:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2015-02-22 21:46 - 2014-12-27 17:40 - 00000000 ____D () C:\Users\André\AppData\Roaming\CasinoOnNet
2015-02-20 22:08 - 2013-04-23 11:42 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-20 21:44 - 2013-04-23 11:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-20 21:43 - 2013-04-23 11:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-20 21:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-02-20 18:44 - 2009-07-14 05:45 - 00021504 _____ () C:\Windows\system32\umstartup.etl
2015-02-20 18:31 - 2013-04-23 04:23 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-02-20 18:08 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display
2015-02-20 18:06 - 2013-04-23 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware
2015-02-20 17:59 - 2013-04-23 11:53 - 00000000 ____D () C:\ProgramData\Creative
2015-02-20 17:58 - 2013-04-23 11:44 - 00000000 ____D () C:\Program Files (x86)\ST Microelectronics
2015-02-20 17:56 - 2013-04-23 11:52 - 00000550 ___RH () C:\Windows\ctfile.rfc
2015-02-20 17:56 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Creative
2015-02-20 17:52 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-20 17:39 - 2013-04-23 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-20 12:25 - 2013-04-27 21:25 - 00000000 ____D () C:\Users\André\AppData\Roaming\Skype
2015-02-20 12:25 - 2013-04-23 11:57 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-20 10:21 - 2013-04-27 21:03 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-02-20 10:18 - 2014-03-26 15:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Deployment
2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\2.0
2015-02-19 14:28 - 2014-07-06 22:21 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-19 14:26 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-18 23:07 - 2009-07-14 03:34 - 92274688 _____ () C:\Windows\system32\config\software.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 25165824 _____ () C:\Windows\system32\config\system.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 00061440 _____ () C:\Windows\system32\config\sam.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 00024576 _____ () C:\Windows\system32\config\security.bak
2015-02-18 17:00 - 2013-04-28 13:42 - 00000000 ____D () C:\Users\André\AppData\Roaming\vlc
2015-02-18 16:44 - 2014-01-05 20:24 - 00000000 ____D () C:\Windows\WindowsMobile
2015-02-18 16:44 - 2013-06-20 17:21 - 00000000 ____D () C:\Users\André\Documents\VirtualDJ
2015-02-18 14:55 - 2014-12-02 19:18 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-18 14:55 - 2014-06-26 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-18 14:55 - 2014-06-26 18:35 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-18 10:07 - 2013-04-27 22:01 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-02-18 10:06 - 2013-04-27 21:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-17 10:04 - 2013-05-13 20:51 - 00000000 ____D () C:\Windows\1CE60928832549A88B06633E48DD2B67.TMP
2015-02-16 12:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-16 11:43 - 2014-08-13 11:07 - 00000000 ____D () C:\Users\André\AppData\Roaming\Canon
2015-02-16 11:43 - 2014-08-13 11:00 - 00000000 ____D () C:\Program Files (x86)\Canon
2015-02-12 19:42 - 2013-04-27 21:06 - 00001063 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-12 19:42 - 2013-04-27 21:06 - 00001051 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-12 19:42 - 2013-04-27 20:01 - 00000977 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-12 19:42 - 2013-04-27 20:01 - 00000965 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-02-12 19:42 - 2013-04-26 10:10 - 00000997 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-12 18:38 - 2014-06-15 21:37 - 00597344 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 18:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PLA
2015-02-12 18:36 - 2014-12-16 17:58 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 18:36 - 2014-05-08 11:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 17:00 - 2013-12-06 20:10 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-12 10:54 - 2013-06-15 16:57 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-12 10:45 - 2009-07-14 03:34 - 00000609 _____ () C:\Windows\win.ini
2015-02-12 10:44 - 2013-06-03 19:06 - 00002155 _____ () C:\Windows\epplauncher.mif
2015-02-12 10:44 - 2013-06-03 19:05 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-12 10:35 - 2013-09-25 15:24 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 10:25 - 2013-09-25 15:24 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 13:43 - 2013-06-03 19:12 - 00004064 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2015-02-11 13:43 - 2013-06-03 19:12 - 00003242 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2015-02-11 13:42 - 2013-04-23 12:00 - 00000000 ____D () C:\Program Files\AlienAutopsy
2015-02-11 13:42 - 2013-04-23 11:48 - 00000000 ____D () C:\Program Files\Alienware
2015-02-10 17:18 - 2015-01-20 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Theme Hospital
2015-02-10 17:18 - 2014-01-17 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sport-DJ
2015-02-10 14:49 - 2013-04-26 10:07 - 00000000 ____D () C:\Users\André
2015-02-10 14:43 - 2014-12-27 17:39 - 00000000 ____D () C:\Users\André\AppData\Local\PokerStars.EU
2015-02-10 14:43 - 2014-12-27 17:35 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2015-02-10 14:43 - 2014-03-10 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dynamics
2015-02-10 14:43 - 2014-03-10 22:34 - 00000000 ____D () C:\Program Files (x86)\Dynamics
2015-02-10 14:43 - 2014-02-17 21:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-10 14:43 - 2014-01-17 13:53 - 00000000 ____D () C:\Program Files\Sport_DJ
2015-02-10 14:43 - 2014-01-16 20:51 - 00000000 ____D () C:\Program Files (x86)\Preh
2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2015-02-10 14:43 - 2013-09-05 17:09 - 00000000 ____D () C:\ProgramData\PMB Files
2015-02-10 14:43 - 2013-06-21 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\DVDVideoSoft
2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-02-10 14:43 - 2013-06-20 13:54 - 00000000 ____D () C:\ProgramData\Netzmanager
2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent
2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\Program Files (x86)\Verbindungsassistent
2015-02-10 14:43 - 2013-04-27 22:01 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-02-10 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-10 14:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-02-10 14:42 - 2013-04-27 22:56 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-02-10 14:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-10 14:41 - 2013-08-26 19:00 - 00000000 ____D () C:\Users\André\AppData\Roaming\TeamViewer
2015-02-10 14:41 - 2013-04-27 21:50 - 00000000 ____D () C:\Users\André\AppData\Roaming\DAEMON Tools Lite
2015-02-10 14:39 - 2013-09-05 17:09 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2015-02-10 14:39 - 2013-04-28 11:05 - 00000000 ____D () C:\Games
2015-02-10 14:39 - 2013-04-27 21:58 - 00000000 ___RD () C:\MSOCache
2015-02-09 17:20 - 2013-08-15 10:55 - 00000000 ____D () C:\Users\André\AppData\Roaming\FileZilla
2015-02-09 14:55 - 2013-08-12 20:22 - 00000000 ____D () C:\Users\Andr�
2015-02-09 13:13 - 2013-05-28 00:11 - 00000000 ____D () C:\Windows\de
2015-02-04 14:27 - 2014-03-10 22:36 - 00000000 ____D () C:\Users\André\Desktop\Laser
==================== Files in the root of some directories =======
2015-03-02 20:14 - 2015-03-02 20:10 - 2664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe
2015-03-02 20:14 - 2015-02-26 10:48 - 1032603 _____ (wauctla ) C:\Program Files (x86)\wauctla-setup.exe
2013-12-02 23:26 - 2013-12-02 23:26 - 0010020 _____ () C:\Users\André\AppData\Local\CleanupUninstall.txt
2014-07-04 15:47 - 2014-07-04 15:47 - 0003584 _____ () C:\Users\André\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-03 10:51 - 2014-12-03 10:51 - 0002102 _____ () C:\Users\André\AppData\Local\recently-used.xbel
2015-02-15 21:13 - 2015-02-15 21:13 - 0007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg
2014-09-14 19:28 - 2014-09-14 19:28 - 0000057 _____ () C:\ProgramData\Ament.ini
Some content of TEMP:
====================
C:\Users\André\AppData\Local\Temp\Quarantine.exe
C:\Users\André\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-13 01:01
==================== End Of Log ============================
--- --- --- |
|
04.03.2015, 11:29
| #9 |
| /// the machine /// TB-Ausbilder | edealspop und n10.adshostnet.com/ads? störtESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.03.2015, 22:28
| #10 |
| | edealspop und n10.adshostnet.com/ads? stört ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=8ca566f9d0b6964b9a5550a88b362e8b
# engine=22749
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-04 09:15:07
# local_time=2015-03-04 10:15:07 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 1769450 66817023 0 0
# scanned=586734
# found=17
# cleaned=0
# scan_time=24714
sh=3F3E1717FD61FFC3A3C3A362D784F8FF14788CFF ft=1 fh=484555285b3f43f5 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\distribution-installer.exe.vir"
sh=0F9BE722B1A341281A45B1994E1607FA519249E3 ft=1 fh=833b232d6e33a344 vn="Variante von MSIL/Adware.Pirrit.A Anwendung" ac=I fn="C:\Program Files (x86)\wauctla-setup.exe"
sh=1F6C4494B4E3743B134E159958307B292E83642E ft=1 fh=dce2f9dadf2b2bd2 vn="Win32/Adware.Pirrit.U Anwendung" ac=I fn="C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe"
sh=3F829B9B23F350EF392E86325AD78E9F9D2C249E ft=1 fh=c71c001119870c7f vn="Win32/Adware.Pirrit.T Anwendung" ac=I fn="C:\Users\André\AppData\Local\codecwinsockapi\commanditvdataSched.exe"
sh=9D0298E3E614C366BD984A719EF47BF9436B857C ft=1 fh=7453b3f74780f8ab vn="Win32/Adware.Pirrit.U Anwendung" ac=I fn="C:\Users\André\AppData\Local\codecwinsockapi\eDealsInstaller.exe"
sh=C57C2CCC020A137599020C373D6D76F744D92CD8 ft=1 fh=e1f3aeadc711b588 vn="Variante von Win32/NetToolDetect.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\André\AppData\Local\codecwinsockapi\SrDt.exe"
sh=CF54558AC105F39DAA2357376E9FC8C04A452FB2 ft=1 fh=a245b9a60105caa2 vn="Win32/Adware.Pirrit.S Anwendung" ac=I fn="C:\Windows\System32\controlfirmwareGUI\controlfirmwareGUI.exe"
sh=CF54558AC105F39DAA2357376E9FC8C04A452FB2 ft=1 fh=a245b9a60105caa2 vn="Win32/Adware.Pirrit.S Anwendung" ac=I fn="C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe"
sh=E750C443A83F9B135B499E7917C5A93120384BB3 ft=1 fh=4eedbac881d1fc72 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Daementools lite.exe"
sh=98579DE494307B678C3995AECFE11A9C95A0531C ft=1 fh=cc70464efe45e7cb vn="Variante von Win32/Injector.ABGM Trojaner" ac=I fn="G:\$RECYCLE.BIN\S-1-5-21-1170416015-2106719571-3667014208-1001\$RQC9UFD\DRS.2006.Internet.Broadcaster.v2.6.0.Incl.Keymaker-ACME.exe"
sh=DA899A291BCA7EF221C9B1DCC5C4D9505629CC10 ft=1 fh=c71c00115f5f136c vn="Variante von MSIL/Spy.Agent.GT Trojaner" ac=I fn="G:\Laptop\Firstload\Macroplant iExplorer v3 1 1 0 MacOSX Incl Keymaker - CORE\Macroplant.iExplorer.v3.1.1.0.MacOSX.Incl.Keymaker-CORE.exe"
sh=47AE40E7795B550180433734EFA113CA827634E6 ft=0 fh=0000000000000000 vn="Variante von MSIL/Spy.Agent.GT Trojaner" ac=I fn="G:\Laptop\Firstload\Macroplant iExplorer v3 1 1 0 MacOSX Incl Keymaker - CORE\Macroplant.iExplorer.v3.2.0.2.MacOSX.Incl.Keymaker-CORE.rar"
sh=284D01B254CCAE90EF066C33814B668CD623DC42 ft=0 fh=0000000000000000 vn="Variante von MSIL/Spy.Agent.GT Trojaner" ac=I fn="G:\Laptop\Firstload\Macroplant iExplorer v3 1 1 0 MacOSX Incl Keymaker - CORE\Macroplant.iExplorer.v3.2.MacOSX.Incl.Keymaker-CORE.rar"
sh=19C9D1FED0ABDDEA6AA338078F683C25023F5C96 ft=1 fh=c71c0011924d1423 vn="Variante von MSIL/Kryptik.EP Trojaner" ac=I fn="G:\Laptop\Firstload\Tune Up Utilities 2012 V 7 0 8004\Tune Up Utilities 2012 V 7.0.8004.exe"
sh=7090F5F77071178DA693B233DBE29520CBAADF3E ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.VAR Trojaner" ac=I fn="G:\Laptop\UseNeXT\alt.binaries.boneless\Cyndi Lauper - Girls Just Want to Have Fun.rar"
sh=BEC81F8B50C4774800D30B142154BBFEB4B7EF3B ft=1 fh=706962886c2c869b vn="Variante von Win32/Kryptik.AWYM Trojaner" ac=I fn="G:\Neuer Ordner\Kane Coder - Manian - Hands Up Forever - 4CD - 2013 - QMI\Manian_-_Hands_Up_Forever-4CD-2013-QMI.exe"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Win32/Adware.Pirrit.T Anwendung" ac=I fn="${Memory}"
Code:
ATTFilter Results of screen317's Security Check version 0.99.96
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
AVG PC TuneUp 2015
AVG PC TuneUp 2015 (de-DE)
AVG PC TuneUp 2015
Java 8 Update 5
Java version 32-bit out of Date!
Java 64-bit 8 Update 31
Adobe Flash Player 16.0.0.305
Adobe Reader XI
Mozilla Firefox 27.0.1 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
ESET NOD32 Antivirus egui.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by André (administrator) on ALIENWAREGAMING on 04-03-2015 22:25:46
Running from C:\Users\André\Downloads
Loaded Profiles: André & UpdatusUser (Available profiles: André & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Users\André\AppData\Local\codecwinsockapi\commanditvdataSched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
() C:\Program Files (x86)\Opera\27.0.1689.76\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
() C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe
() C:\Users\André\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware)
HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [IAStorUI] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe [632376 2012-11-19] (Intel Corporation)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DsLauncher] => C:\Program Files (x86)\AlienRespawn\dslauncher.exe [312640 2012-01-27] (SoftThinks - Dell)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [PC-Doctor Module] => C:\Program Files\AlienAutopsy\pcdlauncher.exe [457720 2014-01-31] (PC-Doctor, Inc.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [Revo Uninstaller] => C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe [3161648 2013-07-03] (VS Revo Group)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DellSystemDetect] => C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe [283432 2015-02-20] (Dell)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll => c:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => No File
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => No File
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [S-1-5-21-829858747-3269657560-2013248277-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-829858747-3269657560-2013248277-1001] => http=127.0.0.1:12145
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 16 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @protectdisc.com/NPMPDRM -> C:\Users\André\AppData\Local\mpDRM\Binaries\NPMPDRM.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\André\AppData\Local\Google\Chrome\User Data\default
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 codecwinsockapi.exe; C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe [229888 2015-03-02] () [File not signed]
R2 controlfirmwareGUI; C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe [83456 2015-01-19] () [File not signed]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-02-20] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-02-20] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed]
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-27] (Creative Technology Ltd) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-01] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-20] (Electronic Arts)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2015-02-12] (AVG Technologies)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-12] (AVG Technologies)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-12] (AVG Technologies)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [330696 2010-11-18] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)
R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-27] (Creative Technology Ltd)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-27] (DT Soft Ltd)
S3 HDJCtrl; C:\Windows\System32\Drivers\HDJCtrl.sys [38704 2013-05-21] (© Guillemot R&D, 2012. All rights reserved.)
S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [274736 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [121600 2013-05-11] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-11-20] (Intel Corporation)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-12-10] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-11-24] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]
U5 ewusbnet; C:\Windows\SysWOW64\Drivers\ewusbnet.sys [256000 2013-05-11] (Huawei Technologies Co., Ltd.)
U5 ew_hwusbdev; C:\Windows\SysWOW64\Drivers\ew_hwusbdev.sys [117248 2013-05-11] (Huawei Technologies Co., Ltd.)
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-04 22:18 - 2015-03-04 22:18 - 00852594 _____ () C:\Users\André\Downloads\SecurityCheck.exe
2015-03-04 15:21 - 2015-03-04 15:21 - 02347384 _____ (ESET) C:\Users\André\Downloads\esetsmartinstaller_deu.exe
2015-03-04 15:21 - 2015-03-04 15:21 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-03-04 15:11 - 2015-03-04 15:11 - 00000000 ____D () C:\Users\André\AppData\Roaming\PCDr
2015-03-04 15:10 - 2015-03-04 15:10 - 00000000 ____D () C:\ProgramData\PCDr
2015-03-04 10:19 - 2015-03-04 10:19 - 00000751 _____ () C:\Users\André\Desktop\JRT.txt
2015-03-04 10:06 - 2015-03-04 10:08 - 00000000 ____D () C:\AdwCleaner
2015-03-04 10:06 - 2015-03-04 10:06 - 00001193 _____ () C:\Users\André\Desktop\mbam.txt
2015-03-04 10:01 - 2015-03-04 10:01 - 02126848 _____ () C:\Users\André\Desktop\AdwCleaner_4.111.exe
2015-03-04 10:01 - 2015-03-04 10:01 - 01388333 _____ (Thisisu) C:\Users\André\Desktop\JRT.exe
2015-03-03 21:08 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 21:08 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 21:08 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 21:08 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 17:34 - 2015-03-03 17:34 - 00037327 _____ () C:\ComboFix.txt
2015-03-03 17:14 - 2015-03-03 17:14 - 05612482 ____R (Swearware) C:\Users\André\Desktop\ComboFix.exe
2015-03-03 17:09 - 2015-03-03 17:09 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\André\Downloads\revosetup95.exe
2015-03-03 17:09 - 2015-03-03 17:09 - 00001266 _____ () C:\Users\André\Desktop\Revo Uninstaller.lnk
2015-03-03 17:09 - 2015-03-03 17:09 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-03 10:30 - 2015-03-04 22:25 - 00024522 _____ () C:\Users\André\Downloads\FRST.txt
2015-03-03 10:30 - 2015-03-03 10:31 - 00047313 _____ () C:\Users\André\Downloads\Addition.txt
2015-03-03 10:29 - 2015-03-04 22:25 - 00000000 ____D () C:\FRST
2015-03-03 10:29 - 2015-03-03 10:29 - 02092544 _____ (Farbar) C:\Users\André\Downloads\FRST64.exe
2015-03-02 20:14 - 2015-03-02 20:14 - 00000000 ____D () C:\Users\André\AppData\Local\codecwinsockapi
2015-03-02 20:14 - 2015-03-02 20:10 - 02664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe
2015-03-02 20:14 - 2015-02-26 10:48 - 01032603 _____ (wauctla ) C:\Program Files (x86)\wauctla-setup.exe
2015-03-02 16:53 - 2015-03-03 12:56 - 00000000 ____D () C:\Users\André\Desktop\40.Geburtstag 28.2.2015
2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\SysWOW64\NV
2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\system32\NV
2015-02-28 18:52 - 2015-02-28 18:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-27 11:26 - 2015-02-28 23:43 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner (2)
2015-02-26 09:27 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 09:27 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 22:55 - 2015-02-25 22:55 - 51133698 _____ () C:\Users\André\Downloads\bdp7500b2_12_fus_deu.zip
2015-02-25 22:29 - 2015-02-25 22:29 - 17304752 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-02-24 11:44 - 2015-02-24 11:44 - 18115808 _____ () C:\Users\André\Downloads\DMXControl_2.12.2_Setup.exe
2015-02-24 11:44 - 2015-02-24 11:44 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DMXControl
2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeStyler
2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\Program Files (x86)\FreeStyler
2015-02-24 11:21 - 2006-06-28 15:44 - 00262144 _____ () C:\Windows\SysWOW64\dashard2006.dll
2015-02-24 11:21 - 2004-03-16 11:04 - 00110592 _____ () C:\Windows\SysWOW64\dashard.dll
2015-02-24 11:03 - 2015-02-24 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Afterglow Slim
2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dw-lighting
2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\Program Files (x86)\dw-lighting
2015-02-23 23:03 - 2015-02-23 23:03 - 01432904 _____ (RealTimeGaming Software) C:\Users\André\Downloads\setup.exe
2015-02-23 23:03 - 2015-02-23 23:03 - 00001812 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Europa Casino.lnk
2015-02-23 23:02 - 2015-02-23 23:03 - 00000000 ____D () C:\Users\André\AppData\Local\Europa Casino
2015-02-22 21:38 - 2015-02-22 21:38 - 00002038 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\888casino.lnk
2015-02-22 21:38 - 2015-02-22 21:38 - 00002014 _____ () C:\Users\UpdatusUser\Desktop\888casino.lnk
2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\888casino
2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\888casino
2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Program Files (x86)\CasinoOnNet
2015-02-22 12:46 - 2015-03-02 13:43 - 00001770 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\SCasino.lnk
2015-02-22 12:46 - 2015-03-02 13:43 - 00000000 ____D () C:\Users\André\AppData\Local\SCasino
2015-02-21 13:49 - 2015-02-21 13:49 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-02-20 22:08 - 2015-03-04 10:11 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\Program Files\Qualcomm Atheros
2015-02-20 21:44 - 2015-03-04 10:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-20 21:44 - 2015-02-20 21:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2015-02-20 21:44 - 2015-02-20 21:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\SoftThinks
2015-02-20 21:44 - 2013-05-28 00:08 - 00002122 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-02-20 21:44 - 2013-04-28 10:02 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2015-02-20 21:44 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-20 21:44 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-20 21:43 - 2012-06-05 08:25 - 06156136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 03152232 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 02561896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00888680 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-20 21:43 - 2012-06-05 08:25 - 00862056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00118120 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00063336 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-20 21:43 - 2012-06-05 08:25 - 00055656 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-02-20 21:43 - 2012-06-05 08:24 - 02644963 _____ () C:\Windows\system32\nvcoproc.bin
2015-02-20 21:33 - 2013-12-10 15:32 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-02-20 21:33 - 2013-12-10 15:32 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-02-20 21:33 - 2013-12-10 15:32 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-02-20 21:33 - 2013-12-10 15:32 - 00023287 _____ () C:\Windows\system32\nvinfo.pb
2015-02-20 21:33 - 2012-06-05 13:55 - 01753448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2015-02-20 21:33 - 2012-06-05 13:55 - 01468264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll
2015-02-20 18:01 - 2015-02-20 18:01 - 00000000 ____D () C:\Users\André\AppData\Local\Downloaded Installations
2015-02-20 18:00 - 2015-02-24 11:18 - 00019522 _____ () C:\Windows\DPINST.LOG
2015-02-20 18:00 - 2015-02-20 18:00 - 00001292 _____ () C:\Windows\Synaptics.log
2015-02-20 17:56 - 2015-02-20 17:56 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2015-02-20 17:56 - 2015-02-20 17:56 - 00000184 _____ () C:\Windows\Setup.log
2015-02-20 17:56 - 2015-02-20 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2015-02-20 17:56 - 2012-01-13 11:23 - 01944064 ____N (Creative) C:\Windows\system32\Sens_oal.dll
2015-02-20 17:56 - 2012-01-13 11:21 - 02906586 ____N (Creative) C:\Windows\SysWOW64\Sens_oal.dll
2015-02-20 17:56 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\Windows\Updreg.EXE
2015-02-20 17:55 - 2012-03-27 18:58 - 01052760 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CtHda.sys
2015-02-20 17:55 - 2012-03-27 18:54 - 00134144 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaS64.exe
2015-02-20 17:55 - 2012-03-27 18:53 - 00574464 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaC64.dll
2015-02-20 17:55 - 2012-03-27 18:52 - 00470016 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaCtl.dll
2015-02-20 17:55 - 2012-03-27 18:52 - 00122880 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
2015-02-20 17:55 - 2012-03-02 22:41 - 00025088 _____ (Creative Technology Ltd.) C:\Windows\MEptDef.exe
2015-02-20 17:55 - 2012-02-29 12:34 - 00010240 ____R (Creative Technology Ltd.) C:\Windows\InstHlp.exe
2015-02-20 17:55 - 2012-02-13 19:16 - 00889856 _____ (Creative Technology Ltd.) C:\Windows\system32\CtHRFX64.dll
2015-02-20 17:55 - 2012-02-13 19:15 - 00011180 _____ () C:\Windows\CtHRFX64.hda
2015-02-20 17:55 - 2011-10-28 11:45 - 00004894 _____ () C:\Windows\cthdaGER.reg
2015-02-20 17:55 - 2011-10-24 10:02 - 00004850 _____ () C:\Windows\cthdaeng.reg
2015-02-20 17:55 - 2010-09-15 11:39 - 00235520 _____ (Creative Technology Limited) C:\Windows\system32\CtDco64.dll
2015-02-20 17:55 - 2006-12-05 14:52 - 00048400 _____ (Creative Technology Ltd.) C:\Windows\AddCat.exe
2015-02-20 17:46 - 2012-02-23 05:46 - 00211496 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys
2015-02-20 17:46 - 2012-02-23 05:46 - 00184360 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys
2015-02-20 17:46 - 2012-02-23 05:46 - 00039976 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys
2015-02-20 17:46 - 2012-02-23 05:46 - 00021544 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys
2015-02-20 17:37 - 2015-02-20 17:37 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2015-02-20 17:32 - 2011-12-06 15:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-02-20 12:19 - 2015-02-12 17:39 - 00044856 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll
2015-02-20 12:19 - 2015-02-12 17:39 - 00036664 _____ (AVG Technologies) C:\Windows\SysWOW64\uxtuneup.dll
2015-02-20 11:06 - 2015-03-04 15:10 - 00003504 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-02-20 10:31 - 2015-02-20 10:31 - 00002227 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2015-02-20 10:31 - 2015-02-20 10:31 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-02-20 10:31 - 2015-02-20 10:31 - 00002203 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
2015-02-20 10:31 - 2015-02-20 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-02-20 10:31 - 2015-02-12 17:39 - 00041784 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe
2015-02-20 10:31 - 2015-02-12 17:39 - 00030520 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll
2015-02-20 10:31 - 2015-02-12 17:39 - 00025912 _____ (AVG Technologies) C:\Windows\SysWOW64\authuitu.dll
2015-02-20 10:22 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-20 10:21 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files\iPod
2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-20 10:01 - 2015-02-20 10:01 - 00000000 ____D () C:\Dell
2015-02-20 09:55 - 2015-02-20 09:56 - 00000000 ____D () C:\ProgramData\Dell
2015-02-18 23:08 - 2015-03-04 10:10 - 00008819 _____ () C:\Windows\setupact.log
2015-02-18 23:08 - 2015-03-04 09:36 - 00021212 _____ () C:\Windows\PFRO.log
2015-02-18 22:52 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-02-18 22:52 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-02-18 22:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-02-18 22:52 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-02-18 22:51 - 2015-03-03 17:34 - 00000000 ____D () C:\Qoobox
2015-02-18 22:03 - 2015-02-24 22:03 - 00003866 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1424293363
2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\Users\Public\Desktop\Opera 27.lnk
2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 27.lnk
2015-02-18 16:37 - 2015-02-19 12:52 - 00000000 ____D () C:\Windows\system32\log
2015-02-18 10:07 - 2015-02-18 10:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2015-02-17 10:20 - 2015-02-18 16:55 - 00003858 _____ () C:\Windows\System32\Tasks\SSBkgdUpdate
2015-02-17 10:07 - 2015-02-17 10:07 - 00000000 ____D () C:\Users\André\AppData\Local\Scansoft
2015-02-16 11:43 - 2015-02-16 11:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2015-02-16 11:42 - 2015-02-16 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Benutzerregistrierung
2015-02-16 11:37 - 2015-02-16 11:37 - 00000424 _____ () C:\Windows\MAXLINK.INI
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Users\André\AppData\Roaming\ScanSoft
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\ScanSoft
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\InstallShield
2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2015-02-16 11:33 - 2015-02-16 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Manual
2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Notes for Windows Vista
2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series
2015-02-16 11:28 - 2006-12-25 21:00 - 00236544 _____ (CANON INC.) C:\Windows\system32\CNMLM8R.DLL
2015-02-16 11:27 - 2015-02-16 11:27 - 00000000 ___HD () C:\Program Files\CanonBJ
2015-02-16 11:27 - 2006-11-10 03:03 - 01337344 _____ (CANON INC.) C:\Windows\system32\CNCC140.DLL
2015-02-16 11:27 - 2006-11-10 03:02 - 00049664 _____ (CANON INC.) C:\Windows\system32\CNCI140.DLL
2015-02-16 11:27 - 2006-06-29 06:30 - 00017408 _____ (Canon Inc.) C:\Windows\system32\cnco140.dll
2015-02-16 11:27 - 2006-05-26 08:23 - 00090624 _____ (Canon Inc.) C:\Windows\system32\CNCL140.DLL
2015-02-15 21:13 - 2015-02-15 21:13 - 00007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg
2015-02-15 20:26 - 2015-02-15 20:26 - 00000000 ____D () C:\Program Files\Dell
2015-02-15 14:06 - 2015-02-15 14:06 - 00003198 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask-Delay
2015-02-13 09:39 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-13 09:39 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 09:39 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-13 09:39 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-12 21:34 - 2015-02-12 21:34 - 00000000 ____D () C:\ProgramData\Grisoft
2015-02-12 21:29 - 2015-02-12 21:29 - 00000000 ____D () C:\Users\André\Downloads\backups
2015-02-11 13:33 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 13:33 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 13:33 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 13:33 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 13:33 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 13:33 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 13:33 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 13:33 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 13:33 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 13:33 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 13:33 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 13:33 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 13:33 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 13:33 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 13:33 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 13:33 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 13:33 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 13:33 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 13:33 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 13:33 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 13:33 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 13:33 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 13:33 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 13:33 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 13:33 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 13:33 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 13:33 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 13:33 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 13:33 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 13:33 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 13:33 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 13:33 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 13:33 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 13:33 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 13:33 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 13:33 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 13:33 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 13:33 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 13:33 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 13:33 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 13:33 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 13:33 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 13:33 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 13:33 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 13:33 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 13:33 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 13:33 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 13:33 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 13:33 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 13:33 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 13:33 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 13:33 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 13:33 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 13:33 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 13:33 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 13:33 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 13:33 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 13:33 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 13:32 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 13:32 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 13:32 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 13:32 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 13:32 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 13:32 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 13:32 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 13:32 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 13:32 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 13:32 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 13:32 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 13:32 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 13:32 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 13:32 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 13:32 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 13:32 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 13:32 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 13:32 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 13:32 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 13:32 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 13:32 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 13:32 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 13:32 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 13:32 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 13:31 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 13:31 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 13:31 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 13:29 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 13:29 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 13:26 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 13:26 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 13:26 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 13:26 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 13:26 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 13:26 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 13:26 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 13:26 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 12:07 - 2015-02-11 12:07 - 01128916 _____ (www.hellopdf.com ) C:\Users\André\Downloads\nw_33261_pdfwordsetupexe.exe
2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\goodChoice
2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\Color My SNS
2015-02-10 18:06 - 2015-02-10 18:06 - 00709564 _____ () C:\Users\André\Downloads\delfix_10.8.exe
2015-02-10 18:04 - 2015-02-10 18:05 - 01212872 _____ (Zugara Investments Limited ) C:\Users\André\Downloads\adwcleanerexe.exe
2015-02-09 21:41 - 2015-02-09 21:41 - 00000000 _____ () C:\autoexec.bat
2015-02-09 17:13 - 2015-02-10 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-09 17:13 - 2015-02-09 17:13 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-09 17:12 - 2015-02-10 14:42 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-09 17:02 - 2015-02-09 17:04 - 02418464 _____ (Piriform Ltd) C:\Users\André\Downloads\ccsetup502.exe.opdownload
2015-02-09 15:23 - 2015-02-10 14:42 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware
2015-02-09 14:18 - 2015-02-18 23:07 - 00000000 ____D () C:\Windows\erdnt
2015-02-09 11:25 - 2015-02-09 11:25 - 00005012 _____ () C:\Windows\wauctla.InstallState
2015-02-09 11:25 - 2015-02-09 11:25 - 00000529 _____ () C:\Windows\wauctla.InstallLog
2015-02-08 15:09 - 2015-02-08 15:11 - 00000000 ____D () C:\Users\André\AppData\Roaming\FreeAudioEditor
2015-02-08 15:07 - 2015-02-08 15:08 - 03529672 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeAudioEditor.exe
2015-02-08 15:05 - 2015-02-10 14:43 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-08 15:00 - 2015-02-08 15:01 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeYouTubeToMP354Converter.exe
2015-02-08 11:44 - 2015-02-10 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nival
2015-02-08 11:39 - 2015-02-08 11:39 - 15938760 _____ (Nival ) C:\Users\André\Downloads\PWSetup.exe
2015-02-04 15:27 - 2015-02-04 15:27 - 00000000 __SHD () C:\Users\André\AppData\Local\EmieBrowserModeList
2015-02-04 15:22 - 2015-02-04 15:22 - 00000000 ____D () C:\Users\André\AppData\Roaming\sparta123
2015-02-04 14:45 - 2015-02-04 14:45 - 00000000 ____D () C:\Windows\SysWOW64\controlfirmwareGUI
2015-02-04 11:05 - 2015-02-20 18:07 - 00000000 ____D () C:\Program Files\iTunes
2015-02-04 10:59 - 2015-02-04 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-02-02 12:42 - 2015-02-02 12:42 - 00000559 _____ () C:\Users\André\Downloads\qr_code.zip
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-04 22:18 - 2013-04-23 04:25 - 01345904 _____ () C:\Windows\WindowsUpdate.log
2015-03-04 21:43 - 2013-04-23 11:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-04 15:22 - 2010-11-21 07:50 - 00700794 _____ () C:\Windows\system32\perfh007.dat
2015-03-04 15:22 - 2010-11-21 07:50 - 00150400 _____ () C:\Windows\system32\perfc007.dat
2015-03-04 15:22 - 2009-07-14 06:13 - 01624426 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-04 15:21 - 2013-04-23 11:55 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn
2015-03-04 10:19 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-04 10:19 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-04 10:18 - 2013-04-28 15:47 - 00000000 ____D () C:\Users\André\Desktop\Eigenschaften
2015-03-04 10:12 - 2014-06-26 18:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-04 10:10 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2015-03-04 10:10 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2015-03-04 10:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-04 09:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-03-03 19:25 - 2014-11-30 15:30 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner
2015-03-03 17:30 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-03 10:18 - 2013-04-27 20:01 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-01 01:12 - 2013-06-17 21:38 - 00000000 ____D () C:\Users\André\Desktop\dj
2015-02-28 10:57 - 2013-08-13 21:16 - 00000000 ____D () C:\Users\André\Desktop\HVH
2015-02-28 10:47 - 2013-04-23 11:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-28 10:44 - 2014-09-18 21:43 - 00000000 ____D () C:\Users\André\Desktop\HTML
2015-02-28 10:43 - 2014-11-29 11:02 - 00000000 ____D () C:\Users\André\Desktop\fun
2015-02-28 10:43 - 2013-04-28 14:01 - 00000000 ____D () C:\Users\André\Desktop\Ipod
2015-02-25 22:30 - 2013-04-23 11:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-25 22:30 - 2013-04-23 11:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-25 22:30 - 2013-04-23 11:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-24 22:12 - 2014-03-15 11:57 - 00000000 ____D () C:\Users\André\AppData\Roaming\UseNeXT
2015-02-24 22:09 - 2014-03-17 22:22 - 00000000 ____D () C:\Users\André\Documents\UseNeXT
2015-02-24 11:44 - 2013-06-15 09:43 - 00000000 ____D () C:\Program Files (x86)\DMXControl
2015-02-24 11:08 - 2013-06-15 10:13 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DMXControl.lnk
2015-02-24 09:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2015-02-22 21:46 - 2014-12-27 17:40 - 00000000 ____D () C:\Users\André\AppData\Roaming\CasinoOnNet
2015-02-20 22:08 - 2013-04-23 11:42 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-20 21:44 - 2013-04-23 11:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-20 21:43 - 2013-04-23 11:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-20 21:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-02-20 18:44 - 2009-07-14 05:45 - 00021504 _____ () C:\Windows\system32\umstartup.etl
2015-02-20 18:31 - 2013-04-23 04:23 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-02-20 18:08 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display
2015-02-20 18:06 - 2013-04-23 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware
2015-02-20 17:59 - 2013-04-23 11:53 - 00000000 ____D () C:\ProgramData\Creative
2015-02-20 17:58 - 2013-04-23 11:44 - 00000000 ____D () C:\Program Files (x86)\ST Microelectronics
2015-02-20 17:56 - 2013-04-23 11:52 - 00000550 ___RH () C:\Windows\ctfile.rfc
2015-02-20 17:56 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Creative
2015-02-20 17:52 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-20 17:39 - 2013-04-23 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-20 12:25 - 2013-04-27 21:25 - 00000000 ____D () C:\Users\André\AppData\Roaming\Skype
2015-02-20 12:25 - 2013-04-23 11:57 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-20 10:21 - 2013-04-27 21:03 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-02-20 10:18 - 2014-03-26 15:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Deployment
2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\2.0
2015-02-19 14:28 - 2014-07-06 22:21 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-19 14:26 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-18 23:07 - 2009-07-14 03:34 - 92274688 _____ () C:\Windows\system32\config\software.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 25165824 _____ () C:\Windows\system32\config\system.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 00061440 _____ () C:\Windows\system32\config\sam.bak
2015-02-18 23:07 - 2009-07-14 03:34 - 00024576 _____ () C:\Windows\system32\config\security.bak
2015-02-18 17:00 - 2013-04-28 13:42 - 00000000 ____D () C:\Users\André\AppData\Roaming\vlc
2015-02-18 16:44 - 2014-01-05 20:24 - 00000000 ____D () C:\Windows\WindowsMobile
2015-02-18 16:44 - 2013-06-20 17:21 - 00000000 ____D () C:\Users\André\Documents\VirtualDJ
2015-02-18 14:55 - 2014-12-02 19:18 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-18 14:55 - 2014-06-26 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-18 14:55 - 2014-06-26 18:35 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-18 10:07 - 2013-04-27 22:01 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-02-18 10:06 - 2013-04-27 21:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-17 10:04 - 2013-05-13 20:51 - 00000000 ____D () C:\Windows\1CE60928832549A88B06633E48DD2B67.TMP
2015-02-16 12:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-16 11:43 - 2014-08-13 11:07 - 00000000 ____D () C:\Users\André\AppData\Roaming\Canon
2015-02-16 11:43 - 2014-08-13 11:00 - 00000000 ____D () C:\Program Files (x86)\Canon
2015-02-12 19:42 - 2013-04-27 21:06 - 00001063 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-12 19:42 - 2013-04-27 21:06 - 00001051 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-12 19:42 - 2013-04-27 20:01 - 00000977 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-12 19:42 - 2013-04-27 20:01 - 00000965 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-02-12 19:42 - 2013-04-26 10:10 - 00000997 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-12 18:38 - 2014-06-15 21:37 - 00597344 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 18:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PLA
2015-02-12 18:36 - 2014-12-16 17:58 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 18:36 - 2014-05-08 11:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 17:00 - 2013-12-06 20:10 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-12 10:54 - 2013-06-15 16:57 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-12 10:45 - 2009-07-14 03:34 - 00000609 _____ () C:\Windows\win.ini
2015-02-12 10:44 - 2013-06-03 19:06 - 00002155 _____ () C:\Windows\epplauncher.mif
2015-02-12 10:44 - 2013-06-03 19:05 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-12 10:35 - 2013-09-25 15:24 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 10:25 - 2013-09-25 15:24 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 13:43 - 2013-06-03 19:12 - 00004064 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2015-02-11 13:43 - 2013-06-03 19:12 - 00003242 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2015-02-11 13:42 - 2013-04-23 12:00 - 00000000 ____D () C:\Program Files\AlienAutopsy
2015-02-11 13:42 - 2013-04-23 11:48 - 00000000 ____D () C:\Program Files\Alienware
2015-02-10 17:18 - 2015-01-20 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Theme Hospital
2015-02-10 17:18 - 2014-01-17 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sport-DJ
2015-02-10 14:49 - 2013-04-26 10:07 - 00000000 ____D () C:\Users\André
2015-02-10 14:43 - 2014-12-27 17:39 - 00000000 ____D () C:\Users\André\AppData\Local\PokerStars.EU
2015-02-10 14:43 - 2014-12-27 17:35 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2015-02-10 14:43 - 2014-03-10 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dynamics
2015-02-10 14:43 - 2014-03-10 22:34 - 00000000 ____D () C:\Program Files (x86)\Dynamics
2015-02-10 14:43 - 2014-02-17 21:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-10 14:43 - 2014-01-17 13:53 - 00000000 ____D () C:\Program Files\Sport_DJ
2015-02-10 14:43 - 2014-01-16 20:51 - 00000000 ____D () C:\Program Files (x86)\Preh
2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2015-02-10 14:43 - 2013-09-05 17:09 - 00000000 ____D () C:\ProgramData\PMB Files
2015-02-10 14:43 - 2013-06-21 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\DVDVideoSoft
2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-02-10 14:43 - 2013-06-20 13:54 - 00000000 ____D () C:\ProgramData\Netzmanager
2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent
2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\Program Files (x86)\Verbindungsassistent
2015-02-10 14:43 - 2013-04-27 22:01 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-02-10 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-10 14:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-02-10 14:42 - 2013-04-27 22:56 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-02-10 14:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-10 14:41 - 2013-08-26 19:00 - 00000000 ____D () C:\Users\André\AppData\Roaming\TeamViewer
2015-02-10 14:41 - 2013-04-27 21:50 - 00000000 ____D () C:\Users\André\AppData\Roaming\DAEMON Tools Lite
2015-02-10 14:39 - 2013-09-05 17:09 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2015-02-10 14:39 - 2013-04-28 11:05 - 00000000 ____D () C:\Games
2015-02-10 14:39 - 2013-04-27 21:58 - 00000000 ___RD () C:\MSOCache
2015-02-09 17:20 - 2013-08-15 10:55 - 00000000 ____D () C:\Users\André\AppData\Roaming\FileZilla
2015-02-09 14:55 - 2013-08-12 20:22 - 00000000 ____D () C:\Users\Andr�
2015-02-09 13:13 - 2013-05-28 00:11 - 00000000 ____D () C:\Windows\de
2015-02-04 14:27 - 2014-03-10 22:36 - 00000000 ____D () C:\Users\André\Desktop\Laser
==================== Files in the root of some directories =======
2015-03-02 20:14 - 2015-03-02 20:10 - 2664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe
2015-03-02 20:14 - 2015-02-26 10:48 - 1032603 _____ (wauctla ) C:\Program Files (x86)\wauctla-setup.exe
2013-12-02 23:26 - 2013-12-02 23:26 - 0010020 _____ () C:\Users\André\AppData\Local\CleanupUninstall.txt
2014-07-04 15:47 - 2014-07-04 15:47 - 0003584 _____ () C:\Users\André\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-03 10:51 - 2014-12-03 10:51 - 0002102 _____ () C:\Users\André\AppData\Local\recently-used.xbel
2015-02-15 21:13 - 2015-02-15 21:13 - 0007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg
2014-09-14 19:28 - 2014-09-14 19:28 - 0000057 _____ () C:\ProgramData\Ament.ini
Some content of TEMP:
====================
C:\Users\André\AppData\Local\Temp\Quarantine.exe
C:\Users\André\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-13 01:01
==================== End Of Log ============================
--- --- --- --- --- --- und ja, die probleme sind noch da. |
|
05.03.2015, 09:10
| #11 |
| /// the machine /// TB-Ausbilder | edealspop und n10.adshostnet.com/ads? stört Bei den Cracks und Firstload-Scheiss auch kein Wunder ne  Java udpaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CloseProcesses:
C:\Program Files (x86)\wauctla-setup.exe
C:\Users\André\AppData\Local\codecwinsockapi
C:\Windows\System32\controlfirmwareGUI
C:\Windows\SysWOW64\controlfirmwareGUI
G:\Daementools lite.exe
G:\$RECYCLE.BIN\S-1-5-21-1170416015-2106719571-3667014208-1001\$RQC9UFD\DRS.2006.Internet.Broadcaster.v2.6.0.Incl.Keymaker-ACME.exe
G:\Laptop\Firstload\Macroplant iExplorer v3 1 1 0 MacOSX Incl Keymaker - CORE\Macroplant.iExplorer.v3.1.1.0.MacOSX.Incl.Keymaker-CORE.exe
G:\Laptop\Firstload\Macroplant iExplorer v3 1 1 0 MacOSX Incl Keymaker - CORE\Macroplant.iExplorer.v3.2.0.2.MacOSX.Incl.Keymaker-CORE.rar
G:\Laptop\Firstload\Macroplant iExplorer v3 1 1 0 MacOSX Incl Keymaker - CORE\Macroplant.iExplorer.v3.2.MacOSX.Incl.Keymaker-CORE.rar
G:\Laptop\Firstload\Tune Up Utilities 2012 V 7 0 8004\Tune Up Utilities 2012 V 7.0.8004.exe
G:\Laptop\UseNeXT\alt.binaries.boneless\Cyndi Lauper - Girls Just Want to Have Fun.rar
G:\Neuer Ordner\Kane Coder - Manian - Hands Up Forever - 4CD - 2013 - QMI\Manian_-_Hands_Up_Forever-4CD-2013-QMI.exe
HKU\S-1-5-21-829858747-3269657560-2013248277-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [S-1-5-21-829858747-3269657560-2013248277-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-829858747-3269657560-2013248277-1001] => http=127.0.0.1:12145
R2 codecwinsockapi.exe; C:\Users\André\AppData\Local\codecwinsockapi\codecwinsockapi.exe [229888 2015-03-02] () [File not signed]
R2 controlfirmwareGUI; C:\Windows\SysWOW64\controlfirmwareGUI\controlfirmwareGUI.exe [83456 2015-01-19] () [File not signed]
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.03.2015, 09:47
| #12 |
| | edealspop und n10.adshostnet.com/ads? stört FRST:; FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015 Ran by André (administrator) on ALIENWAREGAMING on 05-03-2015 09:45:46 Running from C:\Users\André\Desktop Loaded Profiles: André (Available profiles: André & UpdatusUser) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Dell) C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe () C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe () C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Program Files (x86)\Verbindungsassistent\WTGService.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe () C:\Program Files (x86)\Opera\27.0.1689.76\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.76\opera.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware) HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [IAStorUI] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe [632376 2012-11-19] (Intel Corporation) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DsLauncher] => C:\Program Files (x86)\AlienRespawn\dslauncher.exe [312640 2012-01-27] (SoftThinks - Dell) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [PC-Doctor Module] => C:\Program Files\AlienAutopsy\pcdlauncher.exe [457720 2014-01-31] (PC-Doctor, Inc.) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [Revo Uninstaller] => C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe [3161648 2013-07-03] (VS Revo Group) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Run: [DellSystemDetect] => C:\Users\André\AppData\Local\Apps\2.0\23NV5ADE.MHW\HY49TWH7.HAO\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe [283432 2015-02-20] (Dell) HKU\S-1-5-21-829858747-3269657560-2013248277-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll => c:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe () Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG) Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => No File ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => No File ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-829858747-3269657560-2013248277-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01 SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-829858747-3269657560-2013248277-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Winsock: Catalog9-x64 16 C:\Windows\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\wv60tni2.default-1424269440517 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll No File FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: @protectdisc.com/NPMPDRM -> C:\Users\André\AppData\Local\mpDRM\Binaries\NPMPDRM.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin HKU\S-1-5-21-829858747-3269657560-2013248277-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR Profile: C:\Users\André\AppData\Local\Google\Chrome\User Data\default ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-02-20] (Creative Labs) [File not signed] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-02-20] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-27] (Creative Technology Ltd) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-01] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation) R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed] R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-20] (Electronic Arts) S2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed] R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2015-02-12] (AVG Technologies) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-12] (AVG Technologies) R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-12] (AVG Technologies) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [330696 2010-11-18] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.) R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-27] (Creative Technology Ltd) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] () R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation) S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-27] (DT Soft Ltd) S3 HDJCtrl; C:\Windows\System32\Drivers\HDJCtrl.sys [38704 2013-05-21] (© Guillemot R&D, 2012. All rights reserved.) S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [274736 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.) S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [121600 2013-05-11] (Huawei Technologies Co., Ltd.) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-11-20] (Intel Corporation) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-05] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-12-10] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.) S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-11-24] (TuneUp Software) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X] U5 ewusbnet; C:\Windows\SysWOW64\Drivers\ewusbnet.sys [256000 2013-05-11] (Huawei Technologies Co., Ltd.) U5 ew_hwusbdev; C:\Windows\SysWOW64\Drivers\ew_hwusbdev.sys [117248 2013-05-11] (Huawei Technologies Co., Ltd.) S4 NVHDA; system32\drivers\nvhda64v.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-05 09:45 - 2015-03-05 09:46 - 00023614 _____ () C:\Users\André\Desktop\FRST.txt 2015-03-05 09:35 - 2015-03-05 09:35 - 42925480 _____ (Oracle Corporation) C:\Users\André\Downloads\jre-8u40-windows-x64.exe 2015-03-04 22:18 - 2015-03-04 22:18 - 00852594 _____ () C:\Users\André\Downloads\SecurityCheck.exe 2015-03-04 15:21 - 2015-03-04 15:21 - 02347384 _____ (ESET) C:\Users\André\Downloads\esetsmartinstaller_deu.exe 2015-03-04 15:21 - 2015-03-04 15:21 - 00000000 ____D () C:\Program Files (x86)\ESET 2015-03-04 15:11 - 2015-03-04 15:11 - 00000000 ____D () C:\Users\André\AppData\Roaming\PCDr 2015-03-04 15:10 - 2015-03-04 15:10 - 00000000 ____D () C:\ProgramData\PCDr 2015-03-04 10:19 - 2015-03-04 10:19 - 00000751 _____ () C:\Users\André\Desktop\JRT.txt 2015-03-04 10:06 - 2015-03-04 10:08 - 00000000 ____D () C:\AdwCleaner 2015-03-04 10:06 - 2015-03-04 10:06 - 00001193 _____ () C:\Users\André\Desktop\mbam.txt 2015-03-04 10:01 - 2015-03-04 10:01 - 02126848 _____ () C:\Users\André\Desktop\AdwCleaner_4.111.exe 2015-03-04 10:01 - 2015-03-04 10:01 - 01388333 _____ (Thisisu) C:\Users\André\Desktop\JRT.exe 2015-03-03 21:08 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-03-03 21:08 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-03-03 21:08 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-03-03 21:08 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll 2015-03-03 17:34 - 2015-03-03 17:34 - 00037327 _____ () C:\ComboFix.txt 2015-03-03 17:14 - 2015-03-03 17:14 - 05612482 ____R (Swearware) C:\Users\André\Desktop\ComboFix.exe 2015-03-03 17:09 - 2015-03-03 17:09 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\André\Downloads\revosetup95.exe 2015-03-03 17:09 - 2015-03-03 17:09 - 00001266 _____ () C:\Users\André\Desktop\Revo Uninstaller.lnk 2015-03-03 17:09 - 2015-03-03 17:09 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-03-03 10:30 - 2015-03-04 22:26 - 00073478 _____ () C:\Users\André\Downloads\FRST.txt 2015-03-03 10:30 - 2015-03-03 10:31 - 00047313 _____ () C:\Users\André\Downloads\Addition.txt 2015-03-03 10:29 - 2015-03-05 09:45 - 00000000 ____D () C:\FRST 2015-03-03 10:29 - 2015-03-03 10:29 - 02092544 _____ (Farbar) C:\Users\André\Desktop\FRST64.exe 2015-03-02 20:14 - 2015-03-02 20:10 - 02664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe 2015-03-02 16:53 - 2015-03-03 12:56 - 00000000 ____D () C:\Users\André\Desktop\40.Geburtstag 28.2.2015 2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\SysWOW64\NV 2015-02-28 19:00 - 2015-02-28 19:00 - 00000000 ____D () C:\Windows\system32\NV 2015-02-28 18:52 - 2015-02-28 18:52 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-27 11:26 - 2015-02-28 23:43 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner (2) 2015-02-26 09:27 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-26 09:27 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls 2015-02-25 22:55 - 2015-02-25 22:55 - 51133698 _____ () C:\Users\André\Downloads\bdp7500b2_12_fus_deu.zip 2015-02-25 22:29 - 2015-02-25 22:29 - 17304752 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-02-24 11:44 - 2015-02-24 11:44 - 18115808 _____ () C:\Users\André\Downloads\DMXControl_2.12.2_Setup.exe 2015-02-24 11:44 - 2015-02-24 11:44 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DMXControl 2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeStyler 2015-02-24 11:21 - 2015-02-24 11:21 - 00000000 ____D () C:\Program Files (x86)\FreeStyler 2015-02-24 11:21 - 2006-06-28 15:44 - 00262144 _____ () C:\Windows\SysWOW64\dashard2006.dll 2015-02-24 11:21 - 2004-03-16 11:04 - 00110592 _____ () C:\Windows\SysWOW64\dashard.dll 2015-02-24 11:03 - 2015-02-24 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Afterglow Slim 2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dw-lighting 2015-02-24 10:51 - 2015-02-24 11:18 - 00000000 ____D () C:\Program Files (x86)\dw-lighting 2015-02-23 23:03 - 2015-02-23 23:03 - 01432904 _____ (RealTimeGaming Software) C:\Users\André\Downloads\setup.exe 2015-02-23 23:03 - 2015-02-23 23:03 - 00001812 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Europa Casino.lnk 2015-02-23 23:02 - 2015-02-23 23:03 - 00000000 ____D () C:\Users\André\AppData\Local\Europa Casino 2015-02-22 21:38 - 2015-02-22 21:38 - 00002038 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\888casino.lnk 2015-02-22 21:38 - 2015-02-22 21:38 - 00002014 _____ () C:\Users\UpdatusUser\Desktop\888casino.lnk 2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\888casino 2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\888casino 2015-02-22 21:38 - 2015-02-22 21:38 - 00000000 ____D () C:\Program Files (x86)\CasinoOnNet 2015-02-22 12:46 - 2015-03-02 13:43 - 00001770 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\SCasino.lnk 2015-02-22 12:46 - 2015-03-02 13:43 - 00000000 ____D () C:\Users\André\AppData\Local\SCasino 2015-02-21 13:49 - 2015-02-21 13:49 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2015-02-20 22:08 - 2015-03-05 09:44 - 00000000 ____D () C:\ProgramData\Bigfoot Networks 2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2015-02-20 22:08 - 2015-02-20 22:08 - 00000000 ____D () C:\Program Files\Qualcomm Atheros 2015-02-20 21:44 - 2015-03-05 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-20 21:44 - 2015-02-20 21:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2015-02-20 21:44 - 2015-02-20 21:44 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2015-02-20 21:44 - 2015-02-20 21:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\SoftThinks 2015-02-20 21:44 - 2013-05-28 00:08 - 00002122 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2015-02-20 21:44 - 2013-04-28 10:02 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help 2015-02-20 21:44 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-20 21:44 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-02-20 21:43 - 2012-06-05 08:25 - 06156136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 03152232 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 02561896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00888680 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-02-20 21:43 - 2012-06-05 08:25 - 00862056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00118120 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00063336 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-02-20 21:43 - 2012-06-05 08:25 - 00055656 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2015-02-20 21:43 - 2012-06-05 08:24 - 02644963 _____ () C:\Windows\system32\nvcoproc.bin 2015-02-20 21:33 - 2013-12-10 15:32 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-02-20 21:33 - 2013-12-10 15:32 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-02-20 21:33 - 2013-12-10 15:32 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-02-20 21:33 - 2013-12-10 15:32 - 00023287 _____ () C:\Windows\system32\nvinfo.pb 2015-02-20 21:33 - 2012-06-05 13:55 - 01753448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll 2015-02-20 21:33 - 2012-06-05 13:55 - 01468264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll 2015-02-20 18:01 - 2015-02-20 18:01 - 00000000 ____D () C:\Users\André\AppData\Local\Downloaded Installations 2015-02-20 18:00 - 2015-02-24 11:18 - 00019522 _____ () C:\Windows\DPINST.LOG 2015-02-20 18:00 - 2015-02-20 18:00 - 00001292 _____ () C:\Windows\Synaptics.log 2015-02-20 17:56 - 2015-02-20 17:56 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2015-02-20 17:56 - 2015-02-20 17:56 - 00000184 _____ () C:\Windows\Setup.log 2015-02-20 17:56 - 2015-02-20 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative 2015-02-20 17:56 - 2012-01-13 11:23 - 01944064 ____N (Creative) C:\Windows\system32\Sens_oal.dll 2015-02-20 17:56 - 2012-01-13 11:21 - 02906586 ____N (Creative) C:\Windows\SysWOW64\Sens_oal.dll 2015-02-20 17:56 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\Windows\Updreg.EXE 2015-02-20 17:55 - 2012-03-27 18:58 - 01052760 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CtHda.sys 2015-02-20 17:55 - 2012-03-27 18:54 - 00134144 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaS64.exe 2015-02-20 17:55 - 2012-03-27 18:53 - 00574464 _____ (Creative Technology Ltd) C:\Windows\system32\CtHdaC64.dll 2015-02-20 17:55 - 2012-03-27 18:52 - 00470016 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaCtl.dll 2015-02-20 17:55 - 2012-03-27 18:52 - 00122880 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe 2015-02-20 17:55 - 2012-03-02 22:41 - 00025088 _____ (Creative Technology Ltd.) C:\Windows\MEptDef.exe 2015-02-20 17:55 - 2012-02-29 12:34 - 00010240 ____R (Creative Technology Ltd.) C:\Windows\InstHlp.exe 2015-02-20 17:55 - 2012-02-13 19:16 - 00889856 _____ (Creative Technology Ltd.) C:\Windows\system32\CtHRFX64.dll 2015-02-20 17:55 - 2012-02-13 19:15 - 00011180 _____ () C:\Windows\CtHRFX64.hda 2015-02-20 17:55 - 2011-10-28 11:45 - 00004894 _____ () C:\Windows\cthdaGER.reg 2015-02-20 17:55 - 2011-10-24 10:02 - 00004850 _____ () C:\Windows\cthdaeng.reg 2015-02-20 17:55 - 2010-09-15 11:39 - 00235520 _____ (Creative Technology Limited) C:\Windows\system32\CtDco64.dll 2015-02-20 17:55 - 2006-12-05 14:52 - 00048400 _____ (Creative Technology Ltd.) C:\Windows\AddCat.exe 2015-02-20 17:46 - 2012-02-23 05:46 - 00211496 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys 2015-02-20 17:46 - 2012-02-23 05:46 - 00184360 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys 2015-02-20 17:46 - 2012-02-23 05:46 - 00039976 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys 2015-02-20 17:46 - 2012-02-23 05:46 - 00021544 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys 2015-02-20 17:37 - 2015-02-20 17:37 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2015-02-20 17:32 - 2011-12-06 15:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2015-02-20 12:19 - 2015-02-12 17:39 - 00044856 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll 2015-02-20 12:19 - 2015-02-12 17:39 - 00036664 _____ (AVG Technologies) C:\Windows\SysWOW64\uxtuneup.dll 2015-02-20 11:06 - 2015-03-05 09:44 - 00003504 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2015-02-20 10:31 - 2015-02-20 10:31 - 00002227 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2015-02-20 10:31 - 2015-02-20 10:31 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-02-20 10:31 - 2015-02-20 10:31 - 00002203 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk 2015-02-20 10:31 - 2015-02-20 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-02-20 10:31 - 2015-02-12 17:39 - 00041784 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe 2015-02-20 10:31 - 2015-02-12 17:39 - 00030520 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll 2015-02-20 10:31 - 2015-02-12 17:39 - 00025912 _____ (AVG Technologies) C:\Windows\SysWOW64\authuitu.dll 2015-02-20 10:22 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-02-20 10:21 - 2015-02-20 10:22 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files\iPod 2015-02-20 10:21 - 2015-02-20 10:21 - 00000000 ____D () C:\Program Files (x86)\iTunes 2015-02-20 10:01 - 2015-02-20 10:01 - 00000000 ____D () C:\Dell 2015-02-20 09:55 - 2015-02-20 09:56 - 00000000 ____D () C:\ProgramData\Dell 2015-02-18 23:08 - 2015-03-05 09:43 - 00009155 _____ () C:\Windows\setupact.log 2015-02-18 23:08 - 2015-03-05 09:42 - 00021762 _____ () C:\Windows\PFRO.log 2015-02-18 22:52 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-02-18 22:52 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-02-18 22:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-02-18 22:52 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-02-18 22:51 - 2015-03-03 17:34 - 00000000 ____D () C:\Qoobox 2015-02-18 22:03 - 2015-02-24 22:03 - 00003866 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1424293363 2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\Users\Public\Desktop\Opera 27.lnk 2015-02-18 22:02 - 2015-02-18 22:02 - 00001137 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 27.lnk 2015-02-18 16:37 - 2015-02-19 12:52 - 00000000 ____D () C:\Windows\system32\log 2015-02-18 10:07 - 2015-02-18 10:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 2015-02-17 10:20 - 2015-02-18 16:55 - 00003858 _____ () C:\Windows\System32\Tasks\SSBkgdUpdate 2015-02-17 10:07 - 2015-02-17 10:07 - 00000000 ____D () C:\Users\André\AppData\Local\Scansoft 2015-02-16 11:43 - 2015-02-16 11:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2015-02-16 11:42 - 2015-02-16 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Benutzerregistrierung 2015-02-16 11:37 - 2015-02-16 11:37 - 00000424 _____ () C:\Windows\MAXLINK.INI 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Users\André\AppData\Roaming\ScanSoft 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\ScanSoft 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\ProgramData\InstallShield 2015-02-16 11:37 - 2015-02-16 11:37 - 00000000 ____D () C:\Program Files (x86)\ScanSoft 2015-02-16 11:33 - 2015-02-16 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series Manual 2015-02-16 11:33 - 2015-02-16 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Notes for Windows Vista 2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-16 11:28 - 2015-02-16 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP140 series 2015-02-16 11:28 - 2006-12-25 21:00 - 00236544 _____ (CANON INC.) C:\Windows\system32\CNMLM8R.DLL 2015-02-16 11:27 - 2015-02-16 11:27 - 00000000 ___HD () C:\Program Files\CanonBJ 2015-02-16 11:27 - 2006-11-10 03:03 - 01337344 _____ (CANON INC.) C:\Windows\system32\CNCC140.DLL 2015-02-16 11:27 - 2006-11-10 03:02 - 00049664 _____ (CANON INC.) C:\Windows\system32\CNCI140.DLL 2015-02-16 11:27 - 2006-06-29 06:30 - 00017408 _____ (Canon Inc.) C:\Windows\system32\cnco140.dll 2015-02-16 11:27 - 2006-05-26 08:23 - 00090624 _____ (Canon Inc.) C:\Windows\system32\CNCL140.DLL 2015-02-15 21:13 - 2015-02-15 21:13 - 00007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg 2015-02-15 20:26 - 2015-02-15 20:26 - 00000000 ____D () C:\Program Files\Dell 2015-02-15 14:06 - 2015-02-15 14:06 - 00003198 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask-Delay 2015-02-13 09:39 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-13 09:39 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-13 09:39 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-13 09:39 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-12 21:34 - 2015-02-12 21:34 - 00000000 ____D () C:\ProgramData\Grisoft 2015-02-12 21:29 - 2015-02-12 21:29 - 00000000 ____D () C:\Users\André\Downloads\backups 2015-02-11 13:33 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-11 13:33 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-02-11 13:33 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-11 13:33 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-02-11 13:33 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-11 13:33 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-11 13:33 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-11 13:33 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-11 13:33 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-11 13:33 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-11 13:33 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-11 13:33 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-11 13:33 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-11 13:33 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-11 13:33 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-11 13:33 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-11 13:33 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-11 13:33 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-11 13:33 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-11 13:33 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-11 13:33 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-11 13:33 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-02-11 13:33 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-11 13:33 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-11 13:33 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-11 13:33 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-11 13:33 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-11 13:33 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-11 13:33 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-11 13:33 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-11 13:33 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-11 13:33 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-11 13:33 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-11 13:33 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-11 13:33 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-11 13:33 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-11 13:33 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-11 13:33 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-11 13:33 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-11 13:33 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-11 13:33 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-11 13:33 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-11 13:33 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-11 13:33 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-11 13:33 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-11 13:33 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-11 13:33 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-11 13:33 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-11 13:33 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-11 13:33 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-02-11 13:33 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-11 13:33 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-11 13:33 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-11 13:33 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-11 13:33 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-11 13:33 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-02-11 13:33 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-02-11 13:33 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-02-11 13:32 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-11 13:32 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-02-11 13:32 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-11 13:32 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-02-11 13:32 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-02-11 13:32 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-02-11 13:32 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-02-11 13:32 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-02-11 13:32 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-11 13:32 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-02-11 13:32 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-11 13:32 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-02-11 13:32 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-02-11 13:32 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-02-11 13:32 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-11 13:32 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-02-11 13:32 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-11 13:32 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-11 13:32 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-11 13:32 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-11 13:32 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-11 13:32 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-11 13:32 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-11 13:32 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-11 13:31 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-11 13:31 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-11 13:31 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2015-02-11 13:29 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-11 13:29 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-11 13:26 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-11 13:26 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-02-11 13:26 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-02-11 13:26 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-02-11 13:26 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-02-11 13:26 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-02-11 13:26 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-02-11 13:26 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-11 12:07 - 2015-02-11 12:07 - 01128916 _____ (www.hellopdf.com ) C:\Users\André\Downloads\nw_33261_pdfwordsetupexe.exe 2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\goodChoice 2015-02-11 11:30 - 2015-02-11 11:30 - 00000000 ____D () C:\Program Files (x86)\Color My SNS 2015-02-10 18:06 - 2015-02-10 18:06 - 00709564 _____ () C:\Users\André\Downloads\delfix_10.8.exe 2015-02-10 18:04 - 2015-02-10 18:05 - 01212872 _____ (Zugara Investments Limited ) C:\Users\André\Downloads\adwcleanerexe.exe 2015-02-09 21:41 - 2015-02-09 21:41 - 00000000 _____ () C:\autoexec.bat 2015-02-09 17:13 - 2015-02-10 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-09 17:13 - 2015-02-09 17:13 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-09 17:12 - 2015-02-10 14:42 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-09 17:02 - 2015-02-09 17:04 - 02418464 _____ (Piriform Ltd) C:\Users\André\Downloads\ccsetup502.exe.opdownload 2015-02-09 15:23 - 2015-02-10 14:42 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware 2015-02-09 14:18 - 2015-02-18 23:07 - 00000000 ____D () C:\Windows\erdnt 2015-02-09 11:25 - 2015-02-09 11:25 - 00005012 _____ () C:\Windows\wauctla.InstallState 2015-02-09 11:25 - 2015-02-09 11:25 - 00000529 _____ () C:\Windows\wauctla.InstallLog 2015-02-08 15:09 - 2015-02-08 15:11 - 00000000 ____D () C:\Users\André\AppData\Roaming\FreeAudioEditor 2015-02-08 15:07 - 2015-02-08 15:08 - 03529672 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeAudioEditor.exe 2015-02-08 15:05 - 2015-02-10 14:43 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack 2015-02-08 15:00 - 2015-02-08 15:01 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\André\Downloads\FreeYouTubeToMP354Converter.exe 2015-02-08 11:44 - 2015-02-10 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nival 2015-02-08 11:39 - 2015-02-08 11:39 - 15938760 _____ (Nival ) C:\Users\André\Downloads\PWSetup.exe 2015-02-04 15:27 - 2015-02-04 15:27 - 00000000 __SHD () C:\Users\André\AppData\Local\EmieBrowserModeList 2015-02-04 15:22 - 2015-02-04 15:22 - 00000000 ____D () C:\Users\André\AppData\Roaming\sparta123 2015-02-04 11:05 - 2015-02-20 18:07 - 00000000 ____D () C:\Program Files\iTunes 2015-02-04 10:59 - 2015-02-04 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-05 09:44 - 2014-06-26 18:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-03-05 09:43 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks 2015-03-05 09:43 - 2013-04-23 12:00 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks 2015-03-05 09:43 - 2013-04-23 11:55 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn 2015-03-05 09:43 - 2013-04-23 11:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-03-05 09:42 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-03-05 09:41 - 2013-04-23 04:25 - 01359351 _____ () C:\Windows\WindowsUpdate.log 2015-03-05 09:37 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-03-05 09:37 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-03-05 09:36 - 2014-08-10 22:00 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2015-03-05 09:36 - 2014-08-10 22:00 - 00207272 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2015-03-05 09:36 - 2014-08-10 22:00 - 00206760 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2015-03-05 09:36 - 2014-08-10 22:00 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2015-03-05 09:36 - 2014-07-04 06:32 - 00000000 ____D () C:\ProgramData\Oracle 2015-03-05 09:36 - 2014-02-13 20:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2015-03-05 09:35 - 2013-05-12 22:36 - 00000000 ____D () C:\Program Files\Java 2015-03-04 15:22 - 2010-11-21 07:50 - 00700794 _____ () C:\Windows\system32\perfh007.dat 2015-03-04 15:22 - 2010-11-21 07:50 - 00150400 _____ () C:\Windows\system32\perfc007.dat 2015-03-04 15:22 - 2009-07-14 06:13 - 01624426 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-03-04 10:18 - 2013-04-28 15:47 - 00000000 ____D () C:\Users\André\Desktop\Eigenschaften 2015-03-04 09:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing 2015-03-03 19:25 - 2014-11-30 15:30 - 00000000 ____D () C:\Users\André\Desktop\Neuer Ordner 2015-03-03 17:30 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2015-03-03 10:18 - 2013-04-27 20:01 - 00000000 ____D () C:\Program Files (x86)\Opera 2015-03-01 01:12 - 2013-06-17 21:38 - 00000000 ____D () C:\Users\André\Desktop\dj 2015-02-28 10:57 - 2013-08-13 21:16 - 00000000 ____D () C:\Users\André\Desktop\HVH 2015-02-28 10:47 - 2013-04-23 11:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-02-28 10:44 - 2014-09-18 21:43 - 00000000 ____D () C:\Users\André\Desktop\HTML 2015-02-28 10:43 - 2014-11-29 11:02 - 00000000 ____D () C:\Users\André\Desktop\fun 2015-02-28 10:43 - 2013-04-28 14:01 - 00000000 ____D () C:\Users\André\Desktop\Ipod 2015-02-25 22:30 - 2013-04-23 11:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-25 22:30 - 2013-04-23 11:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-02-25 22:30 - 2013-04-23 11:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-02-24 22:12 - 2014-03-15 11:57 - 00000000 ____D () C:\Users\André\AppData\Roaming\UseNeXT 2015-02-24 22:09 - 2014-03-17 22:22 - 00000000 ____D () C:\Users\André\Documents\UseNeXT 2015-02-24 11:44 - 2013-06-15 09:43 - 00000000 ____D () C:\Program Files (x86)\DMXControl 2015-02-24 11:08 - 2013-06-15 10:13 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DMXControl.lnk 2015-02-24 09:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2015-02-22 21:46 - 2014-12-27 17:40 - 00000000 ____D () C:\Users\André\AppData\Roaming\CasinoOnNet 2015-02-20 22:08 - 2013-04-23 11:42 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-02-20 21:44 - 2013-04-23 11:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-02-20 21:43 - 2013-04-23 11:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-02-20 21:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2015-02-20 18:44 - 2009-07-14 05:45 - 00021504 _____ () C:\Windows\system32\umstartup.etl 2015-02-20 18:31 - 2013-04-23 04:23 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-02-20 18:08 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display 2015-02-20 18:06 - 2013-04-23 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware 2015-02-20 17:59 - 2013-04-23 11:53 - 00000000 ____D () C:\ProgramData\Creative 2015-02-20 17:58 - 2013-04-23 11:44 - 00000000 ____D () C:\Program Files (x86)\ST Microelectronics 2015-02-20 17:56 - 2013-04-23 11:52 - 00000550 ___RH () C:\Windows\ctfile.rfc 2015-02-20 17:56 - 2013-04-23 11:52 - 00000000 ____D () C:\Program Files (x86)\Creative 2015-02-20 17:52 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-20 17:39 - 2013-04-23 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-02-20 12:25 - 2013-04-27 21:25 - 00000000 ____D () C:\Users\André\AppData\Roaming\Skype 2015-02-20 12:25 - 2013-04-23 11:57 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-20 10:21 - 2013-04-27 21:03 - 00000000 ____D () C:\Program Files\Common Files\Apple 2015-02-20 10:18 - 2014-03-26 15:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell 2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Deployment 2015-02-20 10:18 - 2014-03-26 15:31 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\2.0 2015-02-19 14:28 - 2014-07-06 22:21 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2015-02-19 14:26 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2015-02-18 23:07 - 2009-07-14 03:34 - 92274688 _____ () C:\Windows\system32\config\software.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 25165824 _____ () C:\Windows\system32\config\system.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 00061440 _____ () C:\Windows\system32\config\sam.bak 2015-02-18 23:07 - 2009-07-14 03:34 - 00024576 _____ () C:\Windows\system32\config\security.bak 2015-02-18 17:00 - 2013-04-28 13:42 - 00000000 ____D () C:\Users\André\AppData\Roaming\vlc 2015-02-18 16:44 - 2014-01-05 20:24 - 00000000 ____D () C:\Windows\WindowsMobile 2015-02-18 16:44 - 2013-06-20 17:21 - 00000000 ____D () C:\Users\André\Documents\VirtualDJ 2015-02-18 14:55 - 2014-12-02 19:18 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-18 14:55 - 2014-06-26 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-18 14:55 - 2014-06-26 18:35 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-02-18 10:07 - 2013-04-27 22:01 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-02-18 10:06 - 2013-04-27 21:58 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-02-17 10:04 - 2013-05-13 20:51 - 00000000 ____D () C:\Windows\1CE60928832549A88B06633E48DD2B67.TMP 2015-02-16 12:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-02-16 11:43 - 2014-08-13 11:07 - 00000000 ____D () C:\Users\André\AppData\Roaming\Canon 2015-02-16 11:43 - 2014-08-13 11:00 - 00000000 ____D () C:\Program Files (x86)\Canon 2015-02-12 19:42 - 2013-04-27 21:06 - 00001063 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-12 19:42 - 2013-04-27 21:06 - 00001051 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-02-12 19:42 - 2013-04-27 20:01 - 00000977 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-02-12 19:42 - 2013-04-27 20:01 - 00000965 _____ () C:\Users\Public\Desktop\Opera.lnk 2015-02-12 19:42 - 2013-04-26 10:10 - 00000997 _____ () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-12 18:38 - 2014-06-15 21:37 - 00597344 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-12 18:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PLA 2015-02-12 18:36 - 2014-12-16 17:58 - 00000000 ____D () C:\Windows\system32\appraiser 2015-02-12 18:36 - 2014-05-08 11:26 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-02-12 17:00 - 2013-12-06 20:10 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2015-02-12 10:54 - 2013-06-15 16:57 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-12 10:45 - 2009-07-14 03:34 - 00000609 _____ () C:\Windows\win.ini 2015-02-12 10:44 - 2013-06-03 19:06 - 00002155 _____ () C:\Windows\epplauncher.mif 2015-02-12 10:44 - 2013-06-03 19:05 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2015-02-12 10:44 - 2013-06-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2015-02-12 10:35 - 2013-09-25 15:24 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-12 10:25 - 2013-09-25 15:24 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-11 13:43 - 2013-06-03 19:12 - 00004064 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask 2015-02-11 13:43 - 2013-06-03 19:12 - 00003242 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest 2015-02-11 13:42 - 2013-04-23 12:00 - 00000000 ____D () C:\Program Files\AlienAutopsy 2015-02-11 13:42 - 2013-04-23 11:48 - 00000000 ____D () C:\Program Files\Alienware 2015-02-10 17:18 - 2015-01-20 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Theme Hospital 2015-02-10 17:18 - 2014-01-17 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sport-DJ 2015-02-10 14:49 - 2013-04-26 10:07 - 00000000 ____D () C:\Users\André 2015-02-10 14:43 - 2014-12-27 17:39 - 00000000 ____D () C:\Users\André\AppData\Local\PokerStars.EU 2015-02-10 14:43 - 2014-12-27 17:35 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU 2015-02-10 14:43 - 2014-03-10 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dynamics 2015-02-10 14:43 - 2014-03-10 22:34 - 00000000 ____D () C:\Program Files (x86)\Dynamics 2015-02-10 14:43 - 2014-02-17 21:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-10 14:43 - 2014-01-17 13:53 - 00000000 ____D () C:\Program Files\Sport_DJ 2015-02-10 14:43 - 2014-01-16 20:51 - 00000000 ____D () C:\Program Files (x86)\Preh 2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2015-02-10 14:43 - 2013-09-15 20:33 - 00000000 ____D () C:\Users\André\AppData\Local\Apps\Windows 7 USB DVD Download Tool 2015-02-10 14:43 - 2013-09-05 17:09 - 00000000 ____D () C:\ProgramData\PMB Files 2015-02-10 14:43 - 2013-06-21 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Users\André\AppData\Roaming\DVDVideoSoft 2015-02-10 14:43 - 2013-06-21 21:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2015-02-10 14:43 - 2013-06-20 13:54 - 00000000 ____D () C:\ProgramData\Netzmanager 2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent 2015-02-10 14:43 - 2013-05-11 19:50 - 00000000 ____D () C:\Program Files (x86)\Verbindungsassistent 2015-02-10 14:43 - 2013-04-27 22:01 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2015-02-10 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-02-10 14:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2015-02-10 14:42 - 2013-04-27 22:56 - 00000000 ____D () C:\Windows\System32\Tasks\Games 2015-02-10 14:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-02-10 14:41 - 2013-08-26 19:00 - 00000000 ____D () C:\Users\André\AppData\Roaming\TeamViewer 2015-02-10 14:41 - 2013-04-27 21:50 - 00000000 ____D () C:\Users\André\AppData\Roaming\DAEMON Tools Lite 2015-02-10 14:39 - 2013-09-05 17:09 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2015-02-10 14:39 - 2013-04-28 11:05 - 00000000 ____D () C:\Games 2015-02-10 14:39 - 2013-04-27 21:58 - 00000000 ___RD () C:\MSOCache 2015-02-09 17:20 - 2013-08-15 10:55 - 00000000 ____D () C:\Users\André\AppData\Roaming\FileZilla 2015-02-09 14:55 - 2013-08-12 20:22 - 00000000 ____D () C:\Users\Andr� 2015-02-09 13:13 - 2013-05-28 00:11 - 00000000 ____D () C:\Windows\de 2015-02-04 14:27 - 2014-03-10 22:36 - 00000000 ____D () C:\Users\André\Desktop\Laser ==================== Files in the root of some directories ======= 2015-03-02 20:14 - 2015-03-02 20:10 - 2664983 _____ (w ) C:\Program Files (x86)\ExtensionsInstallerAsUpdate.exe 2013-12-02 23:26 - 2013-12-02 23:26 - 0010020 _____ () C:\Users\André\AppData\Local\CleanupUninstall.txt 2014-07-04 15:47 - 2014-07-04 15:47 - 0003584 _____ () C:\Users\André\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-12-03 10:51 - 2014-12-03 10:51 - 0002102 _____ () C:\Users\André\AppData\Local\recently-used.xbel 2015-02-15 21:13 - 2015-02-15 21:13 - 0007618 _____ () C:\Users\André\AppData\Local\Resmon.ResmonCfg 2014-09-14 19:28 - 2014-09-14 19:28 - 0000057 _____ () C:\ProgramData\Ament.ini ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-13 01:01 ==================== End Of Log ============================ |
|
05.03.2015, 16:58
| #13 |
| /// the machine /// TB-Ausbilder | edealspop und n10.adshostnet.com/ads? stört Das Fixlog?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu edealspop und n10.adshostnet.com/ads? stört |
| edealspop, geholfen, guten, hoffe, n10.adshostnet.com, stört, titel, webvirus |
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
Linear-Darstellung
