| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win32/InstallCore.XA hat mich erwischtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
20.04.2015, 17:09
| #1 |
 |  Win32/InstallCore.XA hat mich erwischt Heute hat ein Kollege von meiner Tochter etwas heruntergeladen am Lapetop von mir, und dabei sind von G Data die Alarmglocken angegangen. MBam laufen lassen, und es waren 23 Funde, er hat dann auf in Quarantäne verschieben gedrückt, und zusätzlich noch die Fehlermeldung von G Data auf nicht mehr anzeigen geklickt, jetzt wird da nur noch Werbung angezeigt. Jetzt öffnet Firefox gar nicht mehr. Eset Online Scanner laufen gelassen, hier die 3 Bedrohungen: Code:
ATTFilter C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung
C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung
C:\Users\User\Downloads\YTDSetup.exe Variante von Win32/Toolbar.Widgi.N evtl. unerwünschte Anwendung
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01 Ran by User (administrator) on RWE-HOTTE on 20-04-2015 17:59:23 Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBZ4KNN2 Loaded Profiles: User (Available profiles: User) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\creator-ws.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqbam08.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Hewlett-Packard) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqgpc01.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG) HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe, HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd) HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> DefaultScope {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] () BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.) BHO-x32: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip32.dll [2014-11-18] () BHO-x32: Soda PDF 6 Helper -> {ACEC6276-3D7B-4AA9-BE79-23520A23026D} -> C:\Program Files (x86)\Soda PDF 6\creator-ie-helper.dll [2014-02-20] (LULU SOFTWARE LIMITED) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.) Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED) DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.192.1 FireFox: ======== FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default FF SelectedSearchEngine: Yahoo! FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] () FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED) FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\user.js [2015-04-20] FF Extension: CHIP Best Deal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\ciuvo-extension@chip.de.xpi [2015-03-18] FF Extension: PAYBACK Internet Assistent fuer Firefox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\toolbar-ff@payback.de.xpi [2015-04-02] FF Extension: Digital More - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\{bc1f498e-2a46-489a-b4e8-54621ed44de5}.xpi [2015-04-20] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-08] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14] FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10] FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed] R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation) S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] S3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED) R2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-20] (Malwarebytes Corporation) R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-20 17:59 - 2015-04-20 17:59 - 00000000 ____D () C:\FRST 2015-04-20 17:49 - 2015-04-20 17:49 - 00000377 _____ () C:\Users\User\Desktop\eset online scanner.txt 2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET 2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe 2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2015-04-20 13:49 - 2015-04-20 13:49 - 00002058 _____ () C:\Windows\DPINST.LOG 2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice 2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files 2015-04-20 13:00 - 2015-04-20 13:00 - 00001179 _____ () C:\Users\User\Desktop\Die Installation von ODF Add-in für Microsoft Office 4.0 fortsetzen.lnk 2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe 2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe 2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt 2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip 2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip 2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser 2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip 2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip 2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1) 2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip 2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip 2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} 2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys 2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf 2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in 2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4 2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4 2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4 2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4 2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4 2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4 2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4 2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4 2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4 2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4 2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4 2015-04-08 17:32 - 2015-04-08 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX 2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv 2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter 2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4 2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4 2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4 2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4 2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4 2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4 2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4 2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ 2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4 2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4 2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4 2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4 2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4 2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4 2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4 2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4 2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4 2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4 2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4 2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4 2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4 2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4 2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4 2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4 2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4 2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4 2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4 2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4 2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4 2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4 2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4 2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4 2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4 2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4 2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4 2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4 2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4 2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4 2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4 2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4 2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4 2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4 2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4 2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4 2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4 2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4 2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4 2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4 2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4 2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4 2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls 2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche 2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe 2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger 2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken 2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls 2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls 2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi 2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg 2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach 2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC 2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4 2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4 2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4 2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4 2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4 2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4 2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4 2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4 2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4 2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4 2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4 2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4 2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4 2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4 2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4 2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt 2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT 2015-03-21 22:23 - 2015-03-21 22:34 - 468156595 _____ () C:\Users\User\Downloads\Die_Seelen_im_Feuer_2015-03-02_2015_122688.mp4 2015-03-21 22:20 - 2015-03-21 22:33 - 513609719 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-06_2015_122688.mp4 2015-03-21 22:20 - 2015-03-21 22:33 - 416634458 _____ () C:\Users\User\Downloads\Vier_kriegen_ein_Kind_2015-03-06_2015_122688.mp4 2015-03-21 22:19 - 2015-03-21 22:31 - 510220360 _____ () C:\Users\User\Downloads\Das_letzte_Schweigen_2015-02-21_0220_122688.mp4 2015-03-21 22:18 - 2015-03-21 22:30 - 352586102 _____ () C:\Users\User\Downloads\Der_Kotzbrocken_2015-02-20_2015_122688.mp4 2015-03-21 22:18 - 2015-03-21 22:23 - 250116989 _____ () C:\Users\User\Downloads\Der_Staatsanwalt_Toedlicher_Ehrgeiz_2015-02-20_2015_122688.mp4 2015-03-21 22:18 - 2015-03-21 22:22 - 165304595 _____ () C:\Users\User\Downloads\Die_Komiker_Bairisch_Comedy_100_Folge_Die_Komike_2015-02-20_2215_122688.mp4 2015-03-21 22:13 - 2015-03-21 22:16 - 321761282 _____ () C:\Users\User\Downloads\Tatort_Das_Haus_am_Ende_der_Strasse_2015-02-22_2015_122688.mp4 2015-03-21 22:09 - 2015-03-21 22:15 - 403602185 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-22_0935_122688.mp4 2015-03-21 22:08 - 2015-03-21 22:14 - 378015492 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-20_2145_122688.mp4 2015-03-21 22:08 - 2015-03-21 22:14 - 348373873 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-27_2145_122688.mp4 2015-03-21 22:08 - 2015-03-21 22:14 - 345261336 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-13_2145_122688.mp4 ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-20 17:56 - 2015-01-08 12:03 - 01343715 _____ () C:\Windows\WindowsUpdate.log 2015-04-20 17:15 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2015-04-20 13:38 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-20 13:38 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-20 13:36 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat 2015-04-20 13:36 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat 2015-04-20 13:36 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps 2015-04-20 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe 2015-04-20 12:46 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype 2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah 2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc 2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT 2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT 2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans 2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent 2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT 2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2015-04-15 10:01 - 2015-01-08 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina 2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu 2015-04-07 17:18 - 2015-02-20 19:37 - 00049152 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls 2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV 2015-03-22 19:05 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt ==================== Files in the root of some directories ======= 2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log 2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log 2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log Some content of TEMP: ==================== C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-17 17:42 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2015 01
Ran by User at 2015-04-20 18:00:58
Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBZ4KNN2
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version: - Joerg Rosenthal, Germany)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
17-04-2015 17:49:07 Geplanter Prüfpunkt
19-04-2015 19:00:07 Windows-Sicherung
20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert
20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"
Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420
Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2015-03-10 10:43 - 2014-06-04 11:21 - 00571904 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2015-03-10 10:43 - 2014-05-19 18:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-11-18 18:33 - 2014-11-18 18:33 - 00187512 _____ () C:\Program Files (x86)\chip\Internet Explorer\chip32.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.192.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)
Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)
User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001915
ID des fehlerhaften Prozesses: 0x1a70
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004ad94
ID des fehlerhaften Prozesses: 0x1100
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 05:21:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:10:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/20/2015 01:28:40 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053GDFwSvc-Service{1DED95CA-C567-464A-B405-087EDDF0B095}
Error: (04/20/2015 01:28:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/20/2015 01:28:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.
Error: (04/16/2015 07:02:28 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SARAH",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{FD5A0591-1326-47CC-8AAE-1A4A2B551168}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (04/15/2015 01:59:12 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (04/15/2015 11:39:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Soda PDF 6 Creator" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/15/2015 11:39:03 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Soda PDF 6 Creator erreicht.
Error: (04/15/2015 10:59:05 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (04/15/2015 10:59:04 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (04/15/2015 10:59:04 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Microsoft Office Sessions:
=========================
Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad94110001d079cd3de22cf4C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllacb9b61a-e5c0-11e4-9bb6-ac9e17d23840
Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 05:21:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/15/2015 11:10:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz
Percentage of memory in use: 35%
Total physical RAM: 8079.99 MB
Available physical RAM: 5245.63 MB
Total Pagefile: 16158.17 MB
Available Pagefile: 12649.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:698.54 GB) (Free:521.19 GB) NTFS
Drive d: (PCWELT_1_2014) (CDROM) (Total:1.72 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Danke für die Hilfe schon mal |
| Themen zu Win32/InstallCore.XA hat mich erwischt |
| adware, browser, computer, desktop, fehlermeldung, firefox, flash player, frage, helper, installation, internet, karte, launch, mozilla, musik, registry, scan, security, services.exe, software, system, werbung, win32/toolbar.widgi.n, windows, windows xp, wiso, wlan |
Baum-Darstellung