| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win32/InstallCore.XA hat mich erwischtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
20.04.2015, 17:09
| #1 |
 |  Win32/InstallCore.XA hat mich erwischt Heute hat ein Kollege von meiner Tochter etwas heruntergeladen am Lapetop von mir, und dabei sind von G Data die Alarmglocken angegangen. MBam laufen lassen, und es waren 23 Funde, er hat dann auf in Quarantäne verschieben gedrückt, und zusätzlich noch die Fehlermeldung von G Data auf nicht mehr anzeigen geklickt, jetzt wird da nur noch Werbung angezeigt. Jetzt öffnet Firefox gar nicht mehr. Eset Online Scanner laufen gelassen, hier die 3 Bedrohungen: Code:
ATTFilter C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung
C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung
C:\Users\User\Downloads\YTDSetup.exe Variante von Win32/Toolbar.Widgi.N evtl. unerwünschte Anwendung
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01 Ran by User (administrator) on RWE-HOTTE on 20-04-2015 17:59:23 Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBZ4KNN2 Loaded Profiles: User (Available profiles: User) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\creator-ws.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqbam08.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Hewlett-Packard) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqgpc01.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG) HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe, HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd) HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> DefaultScope {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] () BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.) BHO-x32: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip32.dll [2014-11-18] () BHO-x32: Soda PDF 6 Helper -> {ACEC6276-3D7B-4AA9-BE79-23520A23026D} -> C:\Program Files (x86)\Soda PDF 6\creator-ie-helper.dll [2014-02-20] (LULU SOFTWARE LIMITED) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.) Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED) DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.192.1 FireFox: ======== FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default FF SelectedSearchEngine: Yahoo! FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] () FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED) FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\user.js [2015-04-20] FF Extension: CHIP Best Deal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\ciuvo-extension@chip.de.xpi [2015-03-18] FF Extension: PAYBACK Internet Assistent fuer Firefox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\toolbar-ff@payback.de.xpi [2015-04-02] FF Extension: Digital More - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\{bc1f498e-2a46-489a-b4e8-54621ed44de5}.xpi [2015-04-20] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-08] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14] FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10] FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed] R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation) S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] S3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED) R2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-20] (Malwarebytes Corporation) R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-20 17:59 - 2015-04-20 17:59 - 00000000 ____D () C:\FRST 2015-04-20 17:49 - 2015-04-20 17:49 - 00000377 _____ () C:\Users\User\Desktop\eset online scanner.txt 2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET 2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe 2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2015-04-20 13:49 - 2015-04-20 13:49 - 00002058 _____ () C:\Windows\DPINST.LOG 2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice 2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files 2015-04-20 13:00 - 2015-04-20 13:00 - 00001179 _____ () C:\Users\User\Desktop\Die Installation von ODF Add-in für Microsoft Office 4.0 fortsetzen.lnk 2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe 2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe 2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt 2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip 2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip 2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser 2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip 2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip 2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1) 2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip 2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip 2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} 2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys 2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf 2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in 2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4 2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4 2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4 2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4 2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4 2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4 2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4 2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4 2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4 2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4 2015-04-08 17:32 - 2015-04-08 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX 2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv 2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter 2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4 2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4 2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4 2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4 2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4 2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4 2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4 2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ 2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4 2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4 2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4 2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4 2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4 2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4 2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4 2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4 2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4 2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4 2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4 2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4 2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4 2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4 2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4 2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4 2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4 2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4 2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4 2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4 2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4 2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4 2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4 2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4 2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4 2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4 2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4 2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4 2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4 2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4 2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4 2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4 2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4 2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4 2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4 2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4 2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4 2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4 2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4 2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4 2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4 2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4 2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls 2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche 2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe 2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger 2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken 2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls 2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls 2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi 2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg 2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach 2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC 2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4 2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4 2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4 2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4 2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4 2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4 2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4 2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4 2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4 2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4 2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4 2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4 2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4 2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4 2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4 2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt 2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT 2015-03-21 22:23 - 2015-03-21 22:34 - 468156595 _____ () C:\Users\User\Downloads\Die_Seelen_im_Feuer_2015-03-02_2015_122688.mp4 2015-03-21 22:20 - 2015-03-21 22:33 - 513609719 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-06_2015_122688.mp4 2015-03-21 22:20 - 2015-03-21 22:33 - 416634458 _____ () C:\Users\User\Downloads\Vier_kriegen_ein_Kind_2015-03-06_2015_122688.mp4 2015-03-21 22:19 - 2015-03-21 22:31 - 510220360 _____ () C:\Users\User\Downloads\Das_letzte_Schweigen_2015-02-21_0220_122688.mp4 2015-03-21 22:18 - 2015-03-21 22:30 - 352586102 _____ () C:\Users\User\Downloads\Der_Kotzbrocken_2015-02-20_2015_122688.mp4 2015-03-21 22:18 - 2015-03-21 22:23 - 250116989 _____ () C:\Users\User\Downloads\Der_Staatsanwalt_Toedlicher_Ehrgeiz_2015-02-20_2015_122688.mp4 2015-03-21 22:18 - 2015-03-21 22:22 - 165304595 _____ () C:\Users\User\Downloads\Die_Komiker_Bairisch_Comedy_100_Folge_Die_Komike_2015-02-20_2215_122688.mp4 2015-03-21 22:13 - 2015-03-21 22:16 - 321761282 _____ () C:\Users\User\Downloads\Tatort_Das_Haus_am_Ende_der_Strasse_2015-02-22_2015_122688.mp4 2015-03-21 22:09 - 2015-03-21 22:15 - 403602185 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-22_0935_122688.mp4 2015-03-21 22:08 - 2015-03-21 22:14 - 378015492 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-20_2145_122688.mp4 2015-03-21 22:08 - 2015-03-21 22:14 - 348373873 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-27_2145_122688.mp4 2015-03-21 22:08 - 2015-03-21 22:14 - 345261336 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-13_2145_122688.mp4 ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-20 17:56 - 2015-01-08 12:03 - 01343715 _____ () C:\Windows\WindowsUpdate.log 2015-04-20 17:15 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2015-04-20 13:38 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-20 13:38 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-20 13:36 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat 2015-04-20 13:36 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat 2015-04-20 13:36 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps 2015-04-20 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe 2015-04-20 12:46 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype 2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah 2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc 2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT 2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT 2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans 2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent 2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT 2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2015-04-15 10:01 - 2015-01-08 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina 2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu 2015-04-07 17:18 - 2015-02-20 19:37 - 00049152 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls 2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV 2015-03-22 19:05 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt ==================== Files in the root of some directories ======= 2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log 2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log 2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log Some content of TEMP: ==================== C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-17 17:42 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2015 01
Ran by User at 2015-04-20 18:00:58
Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBZ4KNN2
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version: - Joerg Rosenthal, Germany)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
17-04-2015 17:49:07 Geplanter Prüfpunkt
19-04-2015 19:00:07 Windows-Sicherung
20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert
20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"
Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420
Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2015-03-10 10:43 - 2014-06-04 11:21 - 00571904 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2015-03-10 10:43 - 2014-05-19 18:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-11-18 18:33 - 2014-11-18 18:33 - 00187512 _____ () C:\Program Files (x86)\chip\Internet Explorer\chip32.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.192.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)
Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)
User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001915
ID des fehlerhaften Prozesses: 0x1a70
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x1100
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 05:21:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:10:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/20/2015 01:28:40 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053GDFwSvc-Service{1DED95CA-C567-464A-B405-087EDDF0B095}
Error: (04/20/2015 01:28:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/20/2015 01:28:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.
Error: (04/16/2015 07:02:28 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SARAH",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{FD5A0591-1326-47CC-8AAE-1A4A2B551168}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (04/15/2015 01:59:12 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (04/15/2015 11:39:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Soda PDF 6 Creator" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/15/2015 11:39:03 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Soda PDF 6 Creator erreicht.
Error: (04/15/2015 10:59:05 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (04/15/2015 10:59:04 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (04/15/2015 10:59:04 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Microsoft Office Sessions:
=========================
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad94110001d079cd3de22cf4C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllacb9b61a-e5c0-11e4-9bb6-ac9e17d23840
Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 05:21:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:10:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz
Percentage of memory in use: 35%
Total physical RAM: 8079.99 MB
Available physical RAM: 5245.63 MB
Total Pagefile: 16158.17 MB
Available Pagefile: 12649.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:698.54 GB) (Free:521.19 GB) NTFS
Drive d: (PCWELT_1_2014) (CDROM) (Total:1.72 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Danke für die Hilfe schon mal |
|
20.04.2015, 17:53
| #2 |
| /// the machine /// TB-Ausbilder    | Win32/InstallCore.XA hat mich erwischt hi,
__________________Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
20.04.2015, 18:51
| #3 |
| | Win32/InstallCore.XA hat mich erwischtCode:
ATTFilter # AdwCleaner v4.201 - Bericht erstellt 20/04/2015 um 19:45:45
# Aktualisiert 08/04/2015 von Xplode
# Datenbank : 2015-04-19.4 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : User - RWE-HOTTE
# Gestarted von : C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14WBAMJ0\AdwCleaner_4.201.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\Public\Desktop\YTD Video Downloader.lnk
Datei Gelöscht : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\user.js
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Ciuvo
Schlüssel Gelöscht : HKCU\Software\Local AppWizard-Generated Applications
Schlüssel Gelöscht : HKLM\SOFTWARE\DigitalMore
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17728
-\\ Mozilla Firefox v37.0.1 (x86 de)
*************************
AdwCleaner[R0].txt - [1322 Bytes] - [20/04/2015 19:43:52]
AdwCleaner[S0].txt - [1113 Bytes] - [20/04/2015 19:45:45]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1172 Bytes] ##########
Junkware (PUP): Script.Adware.DealPly.G (Engine B) Junkware (PUP) beim Laden von Web-Inhalten gefunden. Adresse: hxxp://i.sterisjs.info/steris/javascript.js?channel=4030029&apptitle=Digital%20More Status: Der Zugriff wurde verweigert. Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.5.9 (04.19.2015:1)
OS: Windows 7 Professional x64
Ran by User on 20.04.2015 at 19:56:31,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{ACEC6276-3D7B-4AA9-BE79-23520A23026D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ACEC6276-3D7B-4AA9-BE79-23520A23026D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{ACEC6276-3D7B-4AA9-BE79-23520A23026D}
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\ic500lzi.default\minidumps [2 files]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.04.2015 at 19:59:58,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by User (administrator) on RWE-HOTTE on 20-04-2015 20:05:22
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default
FF SelectedSearchEngine: Yahoo!
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED)
FF Extension: CHIP Best Deal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\ciuvo-extension@chip.de.xpi [2015-03-18]
FF Extension: PAYBACK Internet Assistent fuer Firefox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\toolbar-ff@payback.de.xpi [2015-04-02]
FF Extension: Digital More - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\{bc1f498e-2a46-489a-b4e8-54621ed44de5}.xpi [2015-04-20]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-08]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14]
FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension
FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10]
FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED)
S2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG)
R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG)
R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG)
R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-20 20:05 - 2015-04-20 20:05 - 00014061 _____ () C:\Users\User\Desktop\FRST.txt
2015-04-20 20:04 - 2015-04-20 20:04 - 02099712 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2015-04-20 19:59 - 2015-04-20 19:59 - 00001771 _____ () C:\Users\User\Desktop\JRT.txt
2015-04-20 19:56 - 2015-04-20 19:56 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-RWE-HOTTE-Windows-7-Professional-(64-bit).dat
2015-04-20 19:56 - 2015-04-20 19:56 - 00000000 ____D () C:\RegBackup
2015-04-20 19:53 - 2015-04-20 19:53 - 02684539 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2015-04-20 19:46 - 2015-04-20 19:46 - 00000354 _____ () C:\Windows\PFRO.log
2015-04-20 19:46 - 2015-04-20 19:46 - 00000056 _____ () C:\Windows\setupact.log
2015-04-20 19:46 - 2015-04-20 19:46 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-20 19:43 - 2015-04-20 19:45 - 00000000 ____D () C:\AdwCleaner
2015-04-20 17:59 - 2015-04-20 20:05 - 00000000 ____D () C:\FRST
2015-04-20 17:49 - 2015-04-20 17:49 - 00000377 _____ () C:\Users\User\Desktop\eset online scanner.txt
2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe
2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
2015-04-20 13:49 - 2015-04-20 13:49 - 00002058 _____ () C:\Windows\DPINST.LOG
2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice
2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files
2015-04-20 13:00 - 2015-04-20 13:00 - 00001179 _____ () C:\Users\User\Desktop\Die Installation von ODF Add-in für Microsoft Office 4.0 fortsetzen.lnk
2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe
2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe
2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt
2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip
2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip
2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip
2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip
2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1)
2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip
2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip
2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9}
2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys
2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf
2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4
2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4
2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4
2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4
2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4
2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4
2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4
2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4
2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4
2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4
2015-04-08 17:32 - 2015-04-08 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv
2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter
2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4
2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4
2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4
2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4
2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4
2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4
2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4
2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ
2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4
2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4
2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4
2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4
2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4
2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4
2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4
2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4
2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4
2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4
2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4
2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4
2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4
2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4
2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4
2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4
2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4
2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4
2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4
2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4
2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4
2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4
2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4
2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4
2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4
2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4
2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4
2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4
2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4
2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4
2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4
2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4
2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4
2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4
2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4
2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4
2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4
2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4
2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4
2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4
2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4
2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4
2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls
2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche
2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe
2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger
2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken
2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls
2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls
2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi
2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg
2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach
2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC
2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4
2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4
2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4
2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4
2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4
2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4
2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4
2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4
2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4
2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4
2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4
2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4
2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4
2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4
2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4
2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt
2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT
2015-03-21 22:23 - 2015-03-21 22:34 - 468156595 _____ () C:\Users\User\Downloads\Die_Seelen_im_Feuer_2015-03-02_2015_122688.mp4
2015-03-21 22:20 - 2015-03-21 22:33 - 513609719 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-06_2015_122688.mp4
2015-03-21 22:20 - 2015-03-21 22:33 - 416634458 _____ () C:\Users\User\Downloads\Vier_kriegen_ein_Kind_2015-03-06_2015_122688.mp4
2015-03-21 22:19 - 2015-03-21 22:31 - 510220360 _____ () C:\Users\User\Downloads\Das_letzte_Schweigen_2015-02-21_0220_122688.mp4
2015-03-21 22:18 - 2015-03-21 22:30 - 352586102 _____ () C:\Users\User\Downloads\Der_Kotzbrocken_2015-02-20_2015_122688.mp4
2015-03-21 22:18 - 2015-03-21 22:23 - 250116989 _____ () C:\Users\User\Downloads\Der_Staatsanwalt_Toedlicher_Ehrgeiz_2015-02-20_2015_122688.mp4
2015-03-21 22:18 - 2015-03-21 22:22 - 165304595 _____ () C:\Users\User\Downloads\Die_Komiker_Bairisch_Comedy_100_Folge_Die_Komike_2015-02-20_2215_122688.mp4
2015-03-21 22:13 - 2015-03-21 22:16 - 321761282 _____ () C:\Users\User\Downloads\Tatort_Das_Haus_am_Ende_der_Strasse_2015-02-22_2015_122688.mp4
2015-03-21 22:09 - 2015-03-21 22:15 - 403602185 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-22_0935_122688.mp4
2015-03-21 22:08 - 2015-03-21 22:14 - 378015492 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-20_2145_122688.mp4
2015-03-21 22:08 - 2015-03-21 22:14 - 348373873 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-27_2145_122688.mp4
2015-03-21 22:08 - 2015-03-21 22:14 - 345261336 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-13_2145_122688.mp4
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-20 19:54 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat
2015-04-20 19:54 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat
2015-04-20 19:54 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-20 19:52 - 2015-01-08 12:03 - 01350565 _____ () C:\Windows\WindowsUpdate.log
2015-04-20 19:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-20 19:42 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe
2015-04-20 12:46 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah
2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT
2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT
2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans
2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent
2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys
2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-04-15 10:01 - 2015-01-08 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina
2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu
2015-04-07 17:18 - 2015-02-20 19:37 - 00049152 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls
2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV
2015-03-22 19:05 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt
==================== Files in the root of some directories =======
2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log
2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log
2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-17 17:42
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
Ran by User at 2015-04-20 20:06:20
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: G DATA INTERNET SECURITY (Disabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Disabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Disabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version: - Joerg Rosenthal, Germany)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
17-04-2015 17:49:07 Geplanter Prüfpunkt
19-04-2015 19:00:07 Windows-Sicherung
20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert
20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"
Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420
Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2015-04-15 10:16 - 2015-04-15 10:16 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.192.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)
Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)
User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001915
ID des fehlerhaften Prozesses: 0x1a70
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x1100
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ZAtheros Bt and Wlan Coex Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Soda PDF 6 Creator" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AtherosSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) HD Graphics Control Panel Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad94110001d079cd3de22cf4C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllacb9b61a-e5c0-11e4-9bb6-ac9e17d23840
Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz
Percentage of memory in use: 27%
Total physical RAM: 8079.99 MB
Available physical RAM: 5879.79 MB
Total Pagefile: 16158.17 MB
Available Pagefile: 13422.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:698.54 GB) (Free:519.71 GB) NTFS
Drive d: (PCWELT_1_2014) (CDROM) (Total:1.72 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Verursacher dürfte diese Datei sein, C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe /RR danach fing es an. Geändert von tillobel (20.04.2015 um 19:15 Uhr) |
|
21.04.2015, 12:34
| #4 |
| /// the machine /// TB-Ausbilder | Win32/InstallCore.XA hat mich erwischt Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.04.2015, 16:28
| #5 |
| | Win32/InstallCore.XA hat mich erwischtCode:
ATTFilter C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung
C:\Users\User\Downloads\YTDSetup.exe Variante von Win32/Toolbar.Widgi.N evtl. unerwünschte Anwendung
Code:
ATTFilter Results of screen317's Security Check version 1.00
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
G DATA INTERNET SECURITY
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 17.0.0.169
Adobe Reader XI
Mozilla Firefox (37.0.1)
````````Process Check: objlist.exe by Laurent````````
G Data InternetSecurity Firewall GDFirewallTray.exe
G Data InternetSecurity Firewall GDFwSvcx64.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by User (administrator) on RWE-HOTTE on 21-04-2015 17:41:48
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\creator-ws.exe
(LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\ws.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1y5ntcs5.default-1429620678342
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED)
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14]
FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension
FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10]
FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED)
R2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG)
R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG)
R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG)
R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-21 17:25 - 2015-04-21 17:25 - 00000229 _____ () C:\Users\User\Documents\Eset.txt
2015-04-21 14:51 - 2015-04-21 14:51 - 00000000 ____D () C:\Users\User\Desktop\Alte Firefox-Daten
2015-04-21 14:39 - 2015-04-21 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-21 14:39 - 2015-04-21 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-21 14:39 - 2015-04-21 14:39 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-21 14:39 - 2015-04-21 14:39 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-21 14:25 - 2015-04-21 14:25 - 00001264 _____ () C:\Users\User\Desktop\Revo Uninstaller.lnk
2015-04-20 20:06 - 2015-04-20 20:06 - 00028180 _____ () C:\Users\User\Desktop\Addition.txt
2015-04-20 20:05 - 2015-04-21 17:42 - 00013676 _____ () C:\Users\User\Desktop\FRST.txt
2015-04-20 20:04 - 2015-04-20 20:04 - 02099712 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2015-04-20 19:59 - 2015-04-20 19:59 - 00001771 _____ () C:\Users\User\Desktop\JRT.txt
2015-04-20 19:56 - 2015-04-20 19:56 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-RWE-HOTTE-Windows-7-Professional-(64-bit).dat
2015-04-20 19:56 - 2015-04-20 19:56 - 00000000 ____D () C:\RegBackup
2015-04-20 19:53 - 2015-04-20 19:53 - 02684539 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2015-04-20 19:43 - 2015-04-20 19:45 - 00000000 ____D () C:\AdwCleaner
2015-04-20 17:59 - 2015-04-21 17:41 - 00000000 ____D () C:\FRST
2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe
2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice
2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files
2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe
2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe
2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt
2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip
2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip
2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip
2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip
2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1)
2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip
2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip
2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9}
2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys
2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf
2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4
2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4
2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4
2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4
2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4
2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4
2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4
2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4
2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4
2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4
2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4
2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv
2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter
2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4
2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4
2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4
2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4
2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4
2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4
2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4
2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ
2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4
2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4
2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4
2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4
2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4
2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4
2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4
2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4
2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4
2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4
2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4
2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4
2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4
2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4
2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4
2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4
2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4
2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4
2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4
2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4
2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4
2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4
2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4
2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4
2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4
2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4
2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4
2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4
2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4
2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4
2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4
2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4
2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4
2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4
2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4
2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4
2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4
2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4
2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4
2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4
2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4
2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4
2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls
2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche
2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe
2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger
2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken
2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls
2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls
2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi
2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg
2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach
2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC
2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4
2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4
2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4
2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4
2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4
2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4
2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4
2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4
2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4
2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4
2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4
2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4
2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4
2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4
2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4
2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt
2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-21 17:17 - 2015-01-08 12:03 - 01386107 _____ () C:\Windows\WindowsUpdate.log
2015-04-21 17:15 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-21 14:25 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-04-21 14:20 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-04-20 20:20 - 2015-02-20 19:37 - 00049664 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls
2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-20 19:54 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat
2015-04-20 19:54 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat
2015-04-20 19:54 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-20 19:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe
2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah
2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT
2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT
2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans
2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent
2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys
2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina
2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu
2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV
2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt
==================== Files in the root of some directories =======
2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log
2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log
2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-17 17:42
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
Ran by User at 2015-04-21 17:43:27
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version: - Joerg Rosenthal, Germany)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
17-04-2015 17:49:07 Geplanter Prüfpunkt
19-04-2015 19:00:07 Windows-Sicherung
20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert
20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
21-04-2015 14:26:13 Revo Uninstaller's restore point - Mozilla Firefox 37.0.1 (x86 de)
21-04-2015 14:32:29 Windows Update
21-04-2015 14:32:43 Revo Uninstaller's restore point - Mozilla Firefox 37.0.1 (x86 de)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"
Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420
Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.192.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)
Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)
User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/21/2015 02:48:36 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/21/2015 02:48:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001915
ID des fehlerhaften Prozesses: 0x1a70
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
System errors:
=============
Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ZAtheros Bt and Wlan Coex Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Soda PDF 6 Creator" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AtherosSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) HD Graphics Control Panel Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (04/21/2015 02:48:36 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CM2X35UP\esetsmartinstaller_deu.exe
Error: (04/21/2015 02:48:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CM2X35UP\esetsmartinstaller_deu.exe
Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz
Percentage of memory in use: 34%
Total physical RAM: 8079.99 MB
Available physical RAM: 5326.48 MB
Total Pagefile: 16158.17 MB
Available Pagefile: 12683.63 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:698.54 GB) (Free:518.28 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Geändert von tillobel (21.04.2015 um 16:46 Uhr) |
|
22.04.2015, 08:40
| #6 |
| /// the machine /// TB-Ausbilder | Win32/InstallCore.XA hat mich erwischt Das sind doch nur Installer im Downloadordner. Downloadordner leeren und gut is
__________________ --> Win32/InstallCore.XA hat mich erwischt |
|
22.04.2015, 09:01
| #7 |
| | Win32/InstallCore.XA hat mich erwischt Ja dann ist gut, wenn du es sagst, wird es wohl stimmen. Danke schön |
|
22.04.2015, 17:57
| #8 |
| /// the machine /// TB-Ausbilder | Win32/InstallCore.XA hat mich erwischt Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.04.2015, 21:43
| #9 |
| | Win32/InstallCore.XA hat mich erwischt Vielen Dank für deine Hilfe. Ich hoffe, jetzt habe ich wieder Ruhe ;-) und du auch. |
|
23.04.2015, 14:18
| #10 |
| /// the machine /// TB-Ausbilder | Win32/InstallCore.XA hat mich erwischt Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win32/InstallCore.XA hat mich erwischt |
| adware, browser, computer, desktop, fehlermeldung, firefox, flash player, frage, helper, installation, internet, karte, launch, mozilla, musik, registry, scan, security, services.exe, software, system, werbung, win32/toolbar.widgi.n, windows, windows xp, wiso, wlan |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
