| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult..Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.10.2015, 17:33
| #1 |
| |  Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. Guten Abend, ich bin leider eine komplette Niete in Sachen PC etc... Ich habe eben auf einen "fake-link" gedrückt und schon hat sich mein Antivirenprogramm gemeldet... Daraufhin habe ich einen Suchlauf begonnen.. 1. Bedrohung: PUP.Optional.Yontoo Typ: Key Ort: HKLM/Software/WOW6432[..] 2. Bedrohung: PUP.Optional.Yontoo Typ: Key Ort: HKLM/Software/WOW6432[..] 3. Bedrohung: PUP.Optional.MalwareProtection Typ: Datei Ort: C:/Usere/[...] Nun die Frage, was ist das und wie muss ich vorgehen? |
|
19.10.2015, 18:16
| #2 |
| /// the machine /// TB-Ausbilder    |  Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
19.10.2015, 20:12
| #3 |
| | Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult..Code:
ATTFilter Geladene Profile: Kjell-Torge (Verfügbare Profile: Kjell-Torge) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (AMD) C:\Windows\System32\atieclxx.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Akamai Technologies, Inc.) C:\Users\Kjell-Torge\AppData\Local\Akamai\netsession_win.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (Akamai Technologies, Inc.) C:\Users\Kjell-Torge\AppData\Local\Akamai\netsession_win.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe (Spotify Ltd) C:\Users\Kjell-Torge\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Microsoft Corporation) C:\Windows\System32\wscript.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe (Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2345848 2009-11-05] (Microsoft Corporation) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-21] (Avira Operations GmbH & Co. KG) HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1 HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1 HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Kjell-Torge\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-09-28] (AMD) HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [Spotify Web Helper] => C:\Users\Kjell-Torge\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-08] (Spotify Ltd) HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\RunOnce: [Uninstall C:\Users\Kjell-Torge\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Kjell-Torge\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64" ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2012-11-23] ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML64.lnk [2012-11-23] ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2015-10-04] ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) ProxyEnable: [.DEFAULT] => Proxy ist aktiviert. ProxyServer: [.DEFAULT] => http=127.0.0.1:52532;https=127.0.0.1:52532 Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{147FBDE8-2A9F-4E56-A343-BC7FEB23FBB4}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nmd.msn.com HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de SearchScopes: HKLM -> DefaultScope {E8911278-537D-472A-86CE-33CD85481760} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {E8911278-537D-472A-86CE-33CD85481760} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {E8911278-537D-472A-86CE-33CD85481760} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2130307973-279622539-2383385947-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2130307973-279622539-2383385947-1001 -> {D6F847F3-D6E9-49C7-98E8-4F0AC92EE731} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=7a3e9489-306d-436f-9046-b2fa844f3252&apn_sauid=F2465765-B6DD-4C08-96F5-9562B0614097 BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation) BHO-x32: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei Toolbar: HKU\S-1-5-21-2130307973-279622539-2383385947-1001 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-12-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-29] [ist nicht signiert] Chrome: ======= CHR Profile: C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Adblock Plus) - C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-23] CHR Extension: (Avira Browserschutz) - C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-05-23] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [240360 2015-09-21] (Avira Operations GmbH & Co. KG) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] () R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [66872 2013-06-06] () R2 Realtek11nCU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [Datei ist nicht signiert] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation) S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.) S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-10-19] (Malwarebytes) S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) S3 NPPTNT2; C:\windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) [Datei ist nicht signiert] S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider) S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] () S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] () S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation ) R4 avkmgr; system32\DRIVERS\avkmgr.sys [X] S3 dump_wmimmc; \??\C:\AeriaGames\Wolfteam-DE\GameGuard\dump_wmimmc.sys [X] S3 lmimirr; system32\DRIVERS\lmimirr.sys [X] S3 wolf; \??\C:\AeriaGames\Wolfteam-DE\avital\wolf64.sys [X] S3 wolfkr; \??\C:\AeriaGames\WolfTeam-DE\avital\wolfk64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-19 21:08 - 2015-10-19 21:08 - 00018084 _____ C:\Users\Kjell-Torge\Downloads\FRST.txt 2015-10-19 21:07 - 2015-10-19 21:08 - 00000000 ____D C:\FRST 2015-10-19 21:07 - 2015-10-19 21:07 - 02196992 _____ (Farbar) C:\Users\Kjell-Torge\Downloads\FRST64.exe 2015-10-19 18:19 - 2015-10-19 18:19 - 00001217 _____ C:\Users\Public\Desktop\Avira Launcher.lnk 2015-10-19 18:19 - 2015-10-19 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-10-19 18:18 - 2015-10-19 18:18 - 04562576 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kjell-Torge\Downloads\avira_de_av_5625179148515__ws.exe 2015-10-19 18:17 - 2015-10-19 18:17 - 00000000 _____ C:\ProgramData\rebootpending.txt 2015-10-19 17:52 - 2015-10-19 17:52 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2015-10-19 17:51 - 2015-10-19 17:53 - 00000000 ____D C:\Program Files (x86)\Overwolf 2015-10-19 17:49 - 2015-10-19 17:49 - 00001169 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2015-10-19 17:49 - 2015-10-19 17:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2015-10-19 17:48 - 2015-10-19 17:49 - 29058456 _____ (TeamSpeak Systems GmbH) C:\Users\Kjell-Torge\Downloads\TeamSpeak3-Client-win32-3.0.18.1.exe 2015-10-19 17:45 - 2015-10-19 17:46 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-19 17:45 - 2015-10-19 17:45 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-10-19 17:45 - 2015-10-19 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-19 17:45 - 2015-10-19 17:45 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-10-19 17:45 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys 2015-10-19 17:45 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2015-10-19 17:45 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys 2015-10-15 13:59 - 2015-09-18 21:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe 2015-10-15 13:59 - 2015-09-18 21:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll 2015-10-15 13:59 - 2015-09-18 21:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll 2015-10-15 13:59 - 2015-09-18 21:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll 2015-10-15 13:59 - 2015-09-18 21:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll 2015-10-15 13:59 - 2015-09-18 21:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll 2015-10-15 13:59 - 2015-09-18 21:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2015-10-14 16:12 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2015-10-14 16:12 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll 2015-10-14 16:12 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2015-10-14 16:12 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2015-10-14 16:12 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2015-10-14 16:12 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2015-10-14 16:12 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2015-10-14 16:12 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2015-10-14 16:12 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2015-10-14 16:12 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2015-10-14 16:12 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2015-10-14 16:12 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2015-10-14 16:12 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2015-10-14 16:12 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2015-10-14 16:12 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2015-10-14 16:12 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2015-10-14 16:12 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2015-10-14 16:12 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2015-10-14 16:12 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2015-10-14 16:12 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2015-10-14 16:12 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll 2015-10-14 16:12 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2015-10-14 16:12 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2015-10-14 16:12 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec 2015-10-14 16:12 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll 2015-10-14 16:12 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll 2015-10-14 16:12 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2015-10-14 16:12 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2015-10-14 16:12 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2015-10-14 16:12 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2015-10-14 16:12 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2015-10-14 16:12 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2015-10-14 16:12 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2015-10-14 16:12 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2015-10-14 16:12 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe 2015-10-14 16:12 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2015-10-14 16:12 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2015-10-14 16:12 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2015-10-14 16:12 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2015-10-14 16:12 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-10-14 16:12 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll 2015-10-14 16:12 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2015-10-14 16:12 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2015-10-14 16:12 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2015-10-14 16:12 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll 2015-10-14 16:12 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2015-10-14 16:12 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2015-10-14 16:12 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll 2015-10-14 16:12 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2015-10-14 16:12 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2015-10-14 16:12 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll 2015-10-14 16:12 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2015-10-14 16:12 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2015-10-14 16:12 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2015-10-14 16:12 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2015-10-14 16:12 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2015-10-14 16:12 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll 2015-10-14 16:12 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2015-10-14 16:12 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll 2015-10-14 16:11 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2015-10-14 16:11 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec 2015-10-14 16:11 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2015-10-14 16:11 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2015-10-14 16:11 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2015-10-14 16:11 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2015-10-14 16:11 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2015-10-14 16:11 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll 2015-10-14 16:11 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2015-10-14 16:10 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2015-10-14 16:10 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll 2015-10-14 16:10 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe 2015-10-14 16:10 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe 2015-10-14 16:10 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll 2015-10-14 16:10 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll 2015-10-14 16:10 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe 2015-10-14 16:10 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe 2015-10-14 16:10 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe 2015-10-14 16:10 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe 2015-10-14 16:10 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll 2015-10-14 16:10 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll 2015-10-14 16:10 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2015-10-14 16:10 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll 2015-10-14 16:10 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll 2015-10-14 16:10 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll 2015-10-14 16:10 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll 2015-10-14 16:10 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll 2015-10-14 16:10 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe 2015-10-14 16:10 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll 2015-10-14 16:10 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe 2015-10-14 16:10 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll 2015-10-14 16:10 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll 2015-10-14 16:10 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2015-10-14 16:10 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll 2015-10-14 16:10 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll 2015-10-14 16:10 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll 2015-10-14 16:10 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2015-10-14 16:10 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys 2015-10-14 16:10 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2015-10-14 16:10 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe 2015-10-14 16:10 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe 2015-10-14 16:10 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 16:10 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll 2015-10-14 16:10 - 2015-09-25 20:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2015-10-14 16:10 - 2015-09-25 20:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2015-10-14 16:10 - 2015-09-25 20:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll 2015-10-14 16:10 - 2015-09-25 20:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2015-10-14 16:10 - 2015-09-25 20:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll 2015-10-14 16:10 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2015-10-14 16:10 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2015-10-14 16:10 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2015-10-14 16:10 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2015-10-14 16:10 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2015-10-14 16:10 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2015-10-14 16:10 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys 2015-10-14 16:10 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2015-10-14 16:10 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2015-10-14 16:10 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll 2015-10-14 16:10 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll 2015-10-14 16:10 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll 2015-10-14 16:10 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll 2015-10-14 16:10 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe 2015-10-14 16:10 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2015-10-14 16:10 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll 2015-10-14 16:10 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll 2015-10-14 16:10 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll 2015-10-14 16:09 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi 2015-10-14 16:09 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi 2015-10-14 16:09 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe 2015-10-14 16:09 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll 2015-10-14 16:09 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll 2015-10-14 16:09 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll 2015-10-14 16:09 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe 2015-10-14 16:09 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll 2015-10-14 16:09 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys 2015-10-10 22:38 - 2015-10-10 22:38 - 00000000 ____D C:\Users\Kjell-Torge\Downloads\hlm-gsaeu (1) 2015-10-10 22:37 - 2015-10-10 22:37 - 04729171 _____ C:\Users\Kjell-Torge\Downloads\hlm-gsaeu.rar 2015-10-10 22:37 - 2015-10-10 22:37 - 04729171 _____ C:\Users\Kjell-Torge\Downloads\hlm-gsaeu (1).rar 2015-10-04 17:42 - 2015-10-04 17:42 - 08279505 _____ C:\Users\Kjell-Torge\Downloads\TALKFX_SDK_v2.1.1.zip 2015-10-04 17:40 - 2015-10-04 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT 2015-10-04 17:40 - 2015-10-04 17:40 - 00000000 ____D C:\Program Files (x86)\ROCCAT 2015-10-04 17:39 - 2015-10-04 17:39 - 04740459 _____ C:\Users\Kjell-Torge\Downloads\RoccatTalkV2.6.zip 2015-10-03 17:40 - 2015-10-03 17:56 - 00000000 ____D C:\Users\Kjell-Torge\Desktop\Neuer Ordner 2015-09-28 16:09 - 2015-09-28 16:09 - 00868138 _____ C:\Users\Kjell-Torge\Downloads\TI84Plus_OS.8Xu 2015-09-28 16:07 - 2015-09-28 16:07 - 00007182 _____ C:\windows\DPINST.LOG 2015-09-28 16:07 - 2015-09-28 16:07 - 00001026 _____ C:\Users\Public\Desktop\TI Connect.lnk 2015-09-28 16:07 - 2015-09-28 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools 2015-09-28 16:07 - 2015-09-28 16:07 - 00000000 ____D C:\Program Files\DIFX 2015-09-28 16:07 - 2015-09-28 16:07 - 00000000 ____D C:\Program Files (x86)\TI Education 2015-09-28 16:07 - 2012-03-07 10:07 - 00128512 _____ (Texas Instruments) C:\windows\system32\Drivers\tiehdusb.sys 2015-09-28 16:07 - 2012-02-17 14:01 - 01060864 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFC71.dll 2015-09-28 16:07 - 2012-02-17 14:01 - 01047552 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFC71u.dll 2015-09-28 16:07 - 2012-02-17 14:01 - 00499712 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp71.dll 2015-09-28 16:07 - 2012-02-17 14:01 - 00348160 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr71.dll 2015-09-28 16:07 - 2012-02-17 14:01 - 00089088 _____ (Microsoft Corporation) C:\windows\SysWOW64\atl71.dll 2015-09-28 16:05 - 2015-09-28 16:06 - 17766768 _____ C:\Users\Kjell-Torge\Downloads\TI-Connect_DE-4.0.0.218.exe 2015-09-28 15:16 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll 2015-09-28 15:16 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll 2015-09-28 15:16 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll 2015-09-28 15:16 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2015-09-28 15:16 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll 2015-09-28 15:16 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll 2015-09-28 15:16 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe 2015-09-28 15:16 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe 2015-09-27 19:22 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys 2015-09-27 19:22 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-09-27 19:22 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-09-27 19:22 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll 2015-09-27 19:22 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll 2015-09-27 19:22 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll 2015-09-27 19:22 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll 2015-09-27 19:22 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll 2015-09-27 19:22 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe 2015-09-27 19:22 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe 2015-09-27 19:09 - 2015-08-05 19:56 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\icaapi.dll 2015-09-27 19:09 - 2015-08-05 19:06 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys 2015-09-27 19:07 - 2015-07-18 15:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-19 21:05 - 2013-03-13 18:01 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2015-10-19 21:00 - 2012-12-06 10:44 - 02091732 _____ C:\windows\WindowsUpdate.log 2015-10-19 20:23 - 2013-09-01 17:51 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-19 19:23 - 2013-09-01 17:51 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-19 18:19 - 2013-03-28 15:43 - 00000000 ____D C:\Program Files (x86)\Avira 2015-10-19 18:19 - 2012-12-25 19:07 - 00000000 ____D C:\ProgramData\Avira 2015-10-19 18:18 - 2014-08-14 18:32 - 00000000 ____D C:\ProgramData\Package Cache 2015-10-19 18:01 - 2012-12-25 20:14 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\TS3Client 2015-10-19 17:50 - 2009-07-14 06:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-19 17:50 - 2009-07-14 06:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-19 17:49 - 2014-02-28 17:20 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client 2015-10-19 17:48 - 2012-12-27 11:08 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\vlc 2015-10-19 17:44 - 2013-09-29 14:26 - 00000000 ____D C:\Program Files (x86)\Steam 2015-10-19 17:42 - 2010-11-21 05:47 - 01388820 _____ C:\windows\PFRO.log 2015-10-19 17:42 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2015-10-19 17:42 - 2009-07-14 06:51 - 00198919 _____ C:\windows\setupact.log 2015-10-19 11:37 - 2013-04-26 16:25 - 00003954 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{2EB4A7C5-F90D-432E-886E-FFDF917D0732} 2015-10-18 00:40 - 2014-05-18 11:17 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Spotify 2015-10-18 00:35 - 2014-05-18 11:18 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Local\Spotify 2015-10-16 21:05 - 2013-03-13 18:01 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2015-10-16 21:05 - 2012-12-25 20:08 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2015-10-16 21:05 - 2012-12-25 20:08 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-16 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache 2015-10-15 21:45 - 2014-12-10 19:22 - 00000000 ____D C:\windows\system32\appraiser 2015-10-15 21:45 - 2014-04-30 23:47 - 00000000 ___SD C:\windows\system32\CompatTel 2015-10-15 20:48 - 2012-12-31 22:28 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-10-15 14:25 - 2013-09-01 17:53 - 00002182 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-10-14 23:40 - 2013-08-14 16:26 - 00000000 ____D C:\windows\system32\MRT 2015-10-14 23:36 - 2012-11-26 11:44 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2015-10-14 21:09 - 2015-09-02 20:42 - 00000000 ____D C:\Users\Kjell-Torge\Desktop\Schule 2015-2016 2015-10-13 20:06 - 2015-09-04 16:25 - 00000000 ____D C:\Users\Kjell-Torge\Documents\Bilder 2015-10-13 14:05 - 2012-12-27 12:12 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Local\CrashDumps 2015-10-12 16:11 - 2012-12-31 22:29 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Skype 2015-10-12 16:06 - 2012-12-31 22:28 - 00000000 ____D C:\ProgramData\Skype 2015-10-09 20:25 - 2014-09-08 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-10-08 22:18 - 2015-04-05 02:34 - 00000000 ___SD C:\windows\SysWOW64\GWX 2015-10-08 22:18 - 2015-04-05 02:34 - 00000000 ___SD C:\windows\system32\GWX 2015-10-08 21:50 - 2011-04-12 09:43 - 00699432 _____ C:\windows\system32\perfh007.dat 2015-10-08 21:50 - 2011-04-12 09:43 - 00154090 _____ C:\windows\system32\perfc007.dat 2015-10-08 21:50 - 2009-07-14 07:13 - 01625370 _____ C:\windows\system32\PerfStringBackup.INI 2015-09-29 13:47 - 2009-07-14 06:45 - 00324712 _____ C:\windows\system32\FNTCACHE.DAT 2015-09-28 22:03 - 2013-09-29 14:40 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-09-28 19:25 - 2012-12-25 15:58 - 00075536 _____ C:\Users\Kjell-Torge\AppData\Local\GDIPFONTCACHEV1.DAT 2015-09-27 20:29 - 2015-03-30 18:22 - 00000000 ____D C:\Program Files (x86)\Razer 2015-09-27 20:26 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-09-27 19:16 - 2014-02-27 18:33 - 01598714 _____ C:\windows\SysWOW64\PerfStringBackup.INI 2015-09-23 19:55 - 2012-12-26 13:05 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Local\Akamai ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-08-23 13:25 - 2014-08-23 13:33 - 0000802 _____ () C:\Users\Kjell-Torge\AppData\Roaming\LiveSupport.exe_log.txt 2014-08-23 13:25 - 2014-08-23 13:33 - 0000092 _____ () C:\Users\Kjell-Torge\AppData\Roaming\regsvr32.exe_log.txt 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml 2015-10-19 18:17 - 2015-10-19 18:17 - 0000000 _____ () C:\ProgramData\rebootpending.txt 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\winiml.dat Einige Dateien in TEMP: ==================== C:\Users\Kjell-Torge\AppData\Local\Temp\avgnt.exe C:\Users\Kjell-Torge\AppData\Local\Temp\GoogleSetup.exe C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-2313197435715919862.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-3039059091144841838.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-3115302480945356227.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-467408752211817879.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-6668057536854875423.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-7276293201085060107.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-8148646468106202606.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-8585885203191153874.dll C:\Users\Kjell-Torge\AppData\Local\Temp\jansi-32-git-Spigot-fdc1440-53fac9f-9063104768286805242.dll C:\Users\Kjell-Torge\AppData\Local\Temp\setup.exe C:\Users\Kjell-Torge\AppData\Local\Temp\SkypeSetup.exe C:\Users\Kjell-Torge\AppData\Local\Temp\UmmyVideoDownloader.exe C:\Users\Kjell-Torge\AppData\Local\Temp\utils.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\windows\system32\winlogon.exe => Datei ist digital signiert C:\windows\system32\wininit.exe => Datei ist digital signiert C:\windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\windows\explorer.exe => Datei ist digital signiert C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\windows\system32\svchost.exe => Datei ist digital signiert C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\windows\system32\services.exe => Datei ist digital signiert C:\windows\system32\User32.dll => Datei ist digital signiert C:\windows\SysWOW64\User32.dll => Datei ist digital signiert C:\windows\system32\userinit.exe => Datei ist digital signiert C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\windows\system32\rpcss.dll => Datei ist digital signiert C:\windows\system32\dnsapi.dll => Datei ist digital signiert C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-10-11 00:43 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-10-2015
durchgeführt von Kjell-Torge (2015-10-19 21:08:55)
Gestartet von C:\Users\Kjell-Torge\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-12-25 13:58:31)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2130307973-279622539-2383385947-500 - Administrator - Disabled)
Gast (S-1-5-21-2130307973-279622539-2383385947-501 - Limited - Disabled)
Kjell-Torge (S-1-5-21-2130307973-279622539-2383385947-1001 - Administrator - Enabled) => C:\Users\Kjell-Torge
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Launcher (HKLM-x32\...\{d6a7cfcc-1f1c-4638-8f9e-0f184696fcdb}) (Version: 1.1.48.9049 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.48.9049 - Avira Operations GmbH & Co. KG) Hidden
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version: - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version: - Treyarch)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)
Google Drive (HKLM-x32\...\{7159FB02-B77E-41E6-B7BF-75431631864B}) (Version: 1.25.0468.5720 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
HydraVision (x32 Version: 4.2.242.0 - Advanced Micro Devices, Inc.) Hidden
IM Lock (HKLM-x32\...\IMLock) (Version: - Comvigo, Inc.)
iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft IntelliType Pro 7.1 (HKLM\...\{E6B7BD80-A921-4C72-A68B-44A9EB438BE4}) (Version: 7.10.344.0 - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
Nur Entfernen der CopyTrans Suite möglich (HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
One Finger Death Punch (HKLM-x32\...\Steam App 264200) (Version: - Silver Dollar Games)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
osu! (HKLM-x32\...\{30ee9d6b-d08b-4bc8-884c-34d6de8a878d}) (Version: latest - ppy Pty Ltd)
Paintball2 Alpha build 40 (HKLM-x32\...\Paintball2) (Version: Alpha build 40 - Digital Paint)
PCDPmod v1.1 EN (HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\PCDPmod v1.1 EN) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) (Version: 1.00.0174 - )
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0015 - Roccat GmbH)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TI Connect™ (HKLM-x32\...\{D06BA64C-4447-49B4-B99D-E85BEA9E1035}) (Version: 4.0.0.218 - Texas Instruments Inc.)
VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
YTD Video Downloader 4.9.1 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9.1 - GreenTree Applications SRL) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
08-10-2015 22:17:38 Windows Update
11-10-2015 19:00:11 Windows-Sicherung
13-10-2015 13:48:52 Windows Update
14-10-2015 23:31:03 Windows Update
15-10-2015 21:44:47 Windows Update
19-10-2015 11:44:00 Windows-Sicherung
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0D8A0BED-7EB8-45D6-A646-E5BD0E61F67F} - System32\Tasks\{B34E6A20-13E3-412A-A422-167C7B629B1B} => pcalua.exe -a "C:\Users\Kjell-Torge\Desktop\CoD 4\$RMV7ZTY\iw3mp.exe" -d "C:\Users\Kjell-Torge\Desktop\CoD 4\$RMV7ZTY"
Task: {13526FE5-B0AF-4CD8-95FD-BAD1E44B9C28} - System32\Tasks\{CD15A197-FB0B-4093-A216-05B78A53D69D} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)
Task: {19824A71-94CF-4824-9EF0-2836C0ED0333} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {40E41DE5-00B8-4B03-BDE8-DCB08B8735EF} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\compattelrunner.exe [2015-09-18] (Microsoft Corporation)
Task: {46C03BD3-91D5-4FB2-A983-71C9D571D437} - System32\Tasks\{79253664-49D4-496F-958A-36749889E03D} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)
Task: {537476AB-AC78-4D4B-9917-493C056D818D} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {61B40E7C-4B56-436C-80D8-27EF9CEA4DF3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {67159D22-A75B-4425-B8A7-C8F19DA767B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {D8FCCF5C-70DB-417E-A9B0-0B55F25A7C30} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16] (Adobe Systems Incorporated)
Task: {D968E16B-A207-46E2-BCBC-66A4D1FE8D93} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\IType.exe [2009-11-05] (Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-05-15 16:26 - 2015-05-15 16:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-06 16:00 - 2013-06-06 16:00 - 00066872 _____ () C:\windows\SysWOW64\PnkBstrA.exe
2012-12-26 12:55 - 2009-12-09 22:20 - 00126976 _____ () C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\EnumDevLib.dll
2015-10-15 14:25 - 2015-10-09 02:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll
2015-10-15 14:25 - 2015-10-09 02:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll
2013-08-21 14:18 - 2015-10-05 18:18 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-02-26 14:27 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-02-26 14:27 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-02-26 14:27 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-24 18:21 - 2015-10-14 22:56 - 02423376 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 13:01 - 2015-09-24 02:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 13:01 - 2015-09-24 02:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 13:01 - 2015-09-24 02:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 13:01 - 2015-09-24 02:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 13:01 - 2015-09-24 02:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2013-09-21 10:35 - 2015-10-14 22:56 - 00705104 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-07-22 11:47 - 2015-10-09 20:13 - 00193024 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2013-09-21 10:35 - 2015-10-14 22:56 - 00140368 _____ () C:\Program Files (x86)\Steam\bin\audio.dll
2013-06-14 15:49 - 2014-11-11 20:48 - 00071680 _____ () C:\Program Files (x86)\Steam\bin\mssmp3.asi
2013-06-14 15:49 - 2014-11-11 20:48 - 00153088 _____ () C:\Program Files (x86)\Steam\bin\mssvoice.asi
2013-09-10 14:20 - 2015-10-09 00:20 - 45010208 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-02-26 14:27 - 2015-09-25 01:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\aeriagames.com -> hxxp://aeriagames.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kjell-Torge\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Kjell-Torge\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{7535E826-6109-4EF1-99F2-3F1E5C860F2D}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{F239ACEC-9469-49FD-B572-525CA8E5D6EA}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{F9DB7A02-C372-40E4-8958-0196293F463A}] => (Allow) LPort=1542
FirewallRules: [{2C629D5F-47F2-42D9-ABEF-AB9431CC0F52}] => (Allow) LPort=1542
FirewallRules: [{217A5843-5F0E-4288-AE5B-7694AA2914FB}] => (Allow) LPort=53
FirewallRules: [{53998128-EDB7-49C9-BB25-62F708E9F9E5}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{BB90313E-5488-40F3-A051-2ECE4034C5DD}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{C556686A-2EE4-4D87-A9F5-971ED7DA0E43}] => (Allow) LPort=1542
FirewallRules: [{15B99B83-C7CE-41DA-9915-F4DF908F2934}] => (Allow) LPort=1542
FirewallRules: [{52E85A11-997C-474E-BB9F-A83B55E76FE0}] => (Allow) LPort=53
FirewallRules: [TCP Query User{0E5DD36A-0203-4732-BBD1-1539CBF3B397}C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{8E858A7A-7169-43A5-AA96-831B68D0D439}C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{523D232E-D08F-4F13-AFB6-A48A892189B5}C:\aeriagames\wolfteam-de\wolfteam.bin] => (Allow) C:\aeriagames\wolfteam-de\wolfteam.bin
FirewallRules: [UDP Query User{22CC9A98-51B0-4CD3-AE95-EB92095D73BA}C:\aeriagames\wolfteam-de\wolfteam.bin] => (Allow) C:\aeriagames\wolfteam-de\wolfteam.bin
FirewallRules: [TCP Query User{2B6196FB-BE26-4BEA-A412-0372BC23571C}C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{7118F9F0-1A1D-4338-BE56-5B23227C3325}C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\kjell-torge\appdata\local\akamai\netsession_win.exe
FirewallRules: [{0D38C30D-83B9-4B66-8F19-C8EF09F467A7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{58BA1E92-12E7-416A-9A9A-1F93471C279F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{BD11BAE3-F97B-4534-A75A-292C032D7103}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{89D7E9CB-D004-4938-B9CD-FB1461BBFB06}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{57FF89B2-1EF1-48CA-963D-C438EC3A62AB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{A3249861-1AB8-4C58-BF59-C90C85580063}C:\users\kjell-torge\desktop\cod 4\$rmv7zty\iw3mp.exe] => (Allow) C:\users\kjell-torge\desktop\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [UDP Query User{CD47537E-9D5A-4FA9-8DA0-24428663E58C}C:\users\kjell-torge\desktop\cod 4\$rmv7zty\iw3mp.exe] => (Allow) C:\users\kjell-torge\desktop\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [{194A7504-712A-495B-B409-1529F10DAB4F}] => (Block) C:\users\kjell-torge\desktop\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [{FA7C4517-95DA-427D-AB88-27B63DA2A792}] => (Block) C:\users\kjell-torge\desktop\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [TCP Query User{75D2F841-0801-4BD0-9162-1A11FE8DF279}C:\users\kjell-torge\desktop\standard-programme\cod 4\$rmv7zty\iw3mp.exe] => (Allow) C:\users\kjell-torge\desktop\standard-programme\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [UDP Query User{64BD2207-86AB-4BA6-B72B-DF3DE1897261}C:\users\kjell-torge\desktop\standard-programme\cod 4\$rmv7zty\iw3mp.exe] => (Allow) C:\users\kjell-torge\desktop\standard-programme\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [{31770DD4-80EB-4059-AC73-14C1303C522B}] => (Block) C:\users\kjell-torge\desktop\standard-programme\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [{9A8E9EF3-DE5D-477E-A652-01E7A979A4B8}] => (Block) C:\users\kjell-torge\desktop\standard-programme\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [{30ACBB45-ADEA-459B-846E-BF74E686172B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BE16A39D-2920-4D16-8DF7-DCF95175A91E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0FA50059-2E05-49EC-BD7E-FEB91754CB48}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F2903375-7234-427D-8E29-1DA3F96F7D7C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{AE6B3AFA-4AC8-4322-AA53-5F857A91D616}C:\users\kjell-torge\desktop\neuer ordner\server.exe] => (Allow) C:\users\kjell-torge\desktop\neuer ordner\server.exe
FirewallRules: [UDP Query User{FE4349A3-AE64-4A47-9AFF-05D375EE1E62}C:\users\kjell-torge\desktop\neuer ordner\server.exe] => (Allow) C:\users\kjell-torge\desktop\neuer ordner\server.exe
FirewallRules: [{E93A8EF6-DB1F-4002-941E-CA4062D1B958}] => (Block) C:\users\kjell-torge\desktop\neuer ordner\server.exe
FirewallRules: [{FCC550A8-D8A9-4B84-ABB1-6219D94E7C44}] => (Block) C:\users\kjell-torge\desktop\neuer ordner\server.exe
FirewallRules: [TCP Query User{BF06D517-A22D-43F7-88B5-EE5A51A2DDE3}C:\users\kjell-torge\desktop\cube world\server.exe] => (Allow) C:\users\kjell-torge\desktop\cube world\server.exe
FirewallRules: [UDP Query User{7E9A3FFB-BD3F-4B3D-B551-E5601DB13009}C:\users\kjell-torge\desktop\cube world\server.exe] => (Allow) C:\users\kjell-torge\desktop\cube world\server.exe
FirewallRules: [{11F34297-E01C-453B-A9EA-9F4F512DC376}] => (Block) C:\users\kjell-torge\desktop\cube world\server.exe
FirewallRules: [{307896C2-A684-4A54-9F04-68C286C75A12}] => (Block) C:\users\kjell-torge\desktop\cube world\server.exe
FirewallRules: [{683BD379-569E-4EE4-99AD-D31668EE3946}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F34E5C9C-3590-4FFB-A741-2823C85CE866}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{006080F2-5BD5-459E-BDC7-6E0A1CC81294}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{21BA39B0-7057-4B70-A877-8DF8DBFD6976}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{6CE4A39A-FAC2-47C0-8045-A871186B0739}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{46ECBF22-DF44-4950-A0AA-80C845D9C3EB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{6D69A218-4B62-48E2-9F32-E542A41EB3A8}C:\users\kjell-torge\desktop\a-z\standard-programme\cod 4\$rmv7zty\iw3mp.exe] => (Block) C:\users\kjell-torge\desktop\a-z\standard-programme\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [UDP Query User{EDBEA158-FB67-4ECD-AC66-92D099F36701}C:\users\kjell-torge\desktop\a-z\standard-programme\cod 4\$rmv7zty\iw3mp.exe] => (Block) C:\users\kjell-torge\desktop\a-z\standard-programme\cod 4\$rmv7zty\iw3mp.exe
FirewallRules: [TCP Query User{A932B83B-77C0-4B1A-8C21-8DC0223A0B74}C:\users\kjell-torge\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\kjell-torge\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E5A9860A-DF4D-4AC6-9E37-E182DC5BA976}C:\users\kjell-torge\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\kjell-torge\appdata\roaming\spotify\spotify.exe
FirewallRules: [{075B3A7B-40A8-45A2-A201-9FF079D56BDA}] => (Block) C:\users\kjell-torge\appdata\roaming\spotify\spotify.exe
FirewallRules: [{CE852C18-F91D-4B23-B6C3-9281C7241084}] => (Block) C:\users\kjell-torge\appdata\roaming\spotify\spotify.exe
FirewallRules: [{34E92B12-9160-4E73-8B2F-26496B54B407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{F646C8BE-650F-4CA9-8B1F-D4D5E2797372}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{D0D7C27B-C6E3-4FAA-A8BE-4BCE97F899D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{A9A6251E-654F-4299-A46A-FF0508C7176E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{10DB7C59-90F2-475D-9D54-1E215C377F99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{FB345F8C-F711-4A8F-A385-7F093E5A1155}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{7B2AFE5D-CC46-48B0-AB41-242682E7C262}C:\games\paintball2\paintball2.exe] => (Allow) C:\games\paintball2\paintball2.exe
FirewallRules: [UDP Query User{CB6A0873-A8E8-4799-874B-D0CA1A2D4F44}C:\games\paintball2\paintball2.exe] => (Allow) C:\games\paintball2\paintball2.exe
FirewallRules: [{F1647395-2C02-4644-B627-0548E47A48C4}] => (Block) C:\games\paintball2\paintball2.exe
FirewallRules: [{92D4CEB3-8CDF-46FF-A988-2A2D08FEA729}] => (Block) C:\games\paintball2\paintball2.exe
FirewallRules: [{416B9D43-C981-4203-B2B4-EA6C136CF061}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{BE551F04-88B1-45CF-ADC2-D22AA5231BE6}] => (Allow) LPort=2869
FirewallRules: [{BCDF4118-653B-41E4-83E2-5ED33DC14C4A}] => (Allow) LPort=1900
FirewallRules: [{638103EB-6614-4F66-B078-0A831EA9F7BF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{0DDAA70E-EDAD-4FB8-B39E-1430BDD7EEBC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8AD31B12-D6F5-483D-B06E-460ED16C1492}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{E5E101F2-93A8-4736-8BB3-D2E991DF96DC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [TCP Query User{969B6A51-01E3-41B6-AB2F-7EF7D94DCA0B}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{4B0B78D7-47F8-4560-8E69-C131C6E2E5E4}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{98A27BCE-A200-46C1-9D80-A4BB8AC049A0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{07EE8AF6-17B9-4181-AD2B-D1570D88A46D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{8D237167-B370-4E69-AA2F-401D1E571232}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{09EAE40C-C922-41A4-A4A1-92863B13CC36}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{900F9BE9-0E60-4306-A4A7-15BC3CEFF5C8}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [{8BA9C603-2607-4B63-A0B2-F6043595D1D5}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{D21A23EB-C615-4C8E-B173-EE8684537E69}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{EC5EDC84-08CC-404C-9900-1ACB6FF30E55}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{EB86908C-FB41-4A34-B72A-3563FE5195F8}C:\users\kjell-torge\downloads\baronreplays\baronreplays.exe] => (Allow) C:\users\kjell-torge\downloads\baronreplays\baronreplays.exe
FirewallRules: [UDP Query User{78DE7DE6-845E-44C5-85AD-68077EA6D914}C:\users\kjell-torge\downloads\baronreplays\baronreplays.exe] => (Allow) C:\users\kjell-torge\downloads\baronreplays\baronreplays.exe
FirewallRules: [TCP Query User{B0C9888E-F155-4D2E-86BA-BAB8C6528F95}C:\users\kjell-torge\desktop\baronreplays\baronreplays.exe] => (Allow) C:\users\kjell-torge\desktop\baronreplays\baronreplays.exe
FirewallRules: [UDP Query User{DC31F467-5FEC-4FB7-A26F-1F530D41FAE3}C:\users\kjell-torge\desktop\baronreplays\baronreplays.exe] => (Allow) C:\users\kjell-torge\desktop\baronreplays\baronreplays.exe
FirewallRules: [{0C4C3904-85EE-42D4-AC2D-AA21FD78FE10}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{8FB26780-261A-4286-B255-AAB52AA417E6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{D21D6C97-E243-41E1-9448-9529D0671848}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe
FirewallRules: [UDP Query User{150DD35C-D81D-44D4-8D26-F81C9F6C3512}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe
FirewallRules: [{11FC50EF-050E-433C-B7F9-916934CA9F56}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe
FirewallRules: [{AC4DB349-5D28-429A-89B8-C8DD317ED9DC}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe
FirewallRules: [{8109045D-E673-41DA-80E5-B97BF3730F23}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{702DF64B-772D-48AB-92C6-112D68B4C677}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2695F2C5-CB78-4EE8-AD89-8A9955240067}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B37FDE9E-64FD-48FC-A1A2-1A4BF9433F9F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B893A009-78C4-4B31-A62B-0DD8525B3D45}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{C7C9C6B1-6B9F-4CE8-808E-07D4ED28672C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/19/2015 05:42:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/19/2015 05:21:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/19/2015 11:34:02 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/18/2015 01:40:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/18/2015 01:21:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/18/2015 12:34:53 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/17/2015 11:26:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/16/2015 01:30:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/15/2015 01:46:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/14/2015 03:54:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Systemfehler:
=============
Error: (10/19/2015 05:42:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "MBAMService" ist vom Dienst "MBAMProtector" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%193
Error: (10/19/2015 05:42:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMProtector" wurde aufgrund folgenden Fehlers nicht gestartet:
%%193
Error: (10/15/2015 02:01:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/15/2015 02:01:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (10/15/2015 01:47:02 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek11nCU erreicht.
Error: (10/10/2015 08:35:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/10/2015 08:35:45 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (10/08/2015 01:44:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/08/2015 01:44:21 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (09/27/2015 08:26:55 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek11nCU erreicht.
CodeIntegrity:
===================================
Date: 2015-03-07 12:37:00.554
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-07 12:37:00.415
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-07 12:04:25.607
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-07 12:04:25.449
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: AMD FX(tm)-6100 Six-Core Processor
Prozentuale Nutzung des RAM: 30%
Installierter physikalischer RAM: 8189.54 MB
Verfügbarer physikalischer RAM: 5712.04 MB
Summe virtueller Speicher: 16377.28 MB
Verfügbarer virtueller Speicher: 13507.22 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:921.41 GB) (Free:755.64 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D5BF8591)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=921.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=27)
==================== Ende von Addition.txt ============================
|
|
20.10.2015, 20:31
| #4 |
| /// the machine /// TB-Ausbilder | Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.10.2015, 14:10
| #5 |
| | Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult..Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015
durchgeführt von Kjell-Torge (Administrator) auf TORGE-PC (21-10-2015 15:04:42)
Gestartet von C:\Users\Kjell-Torge\Downloads
Geladene Profile: Kjell-Torge (Verfügbare Profile: Kjell-Torge)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Kjell-Torge\Downloads\FRST64 (1).exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2345848 2009-11-05] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-21] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782520 2015-10-05] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Kjell-Torge\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-09-28] (AMD)
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [Spotify Web Helper] => C:\Users\Kjell-Torge\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-20] (Spotify Ltd)
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\...\RunOnce: [Uninstall C:\Users\Kjell-Torge\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Kjell-Torge\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2012-11-23]
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML64.lnk [2012-11-23]
ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{147FBDE8-2A9F-4E56-A343-BC7FEB23FBB4}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nmd.msn.com
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-2130307973-279622539-2383385947-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
SearchScopes: HKLM -> DefaultScope {E8911278-537D-472A-86CE-33CD85481760} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {E8911278-537D-472A-86CE-33CD85481760} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {E8911278-537D-472A-86CE-33CD85481760} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2130307973-279622539-2383385947-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2130307973-279622539-2383385947-1001 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-12-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-29] [ist nicht signiert]
Chrome:
=======
CHR Profile: C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-23]
CHR Extension: (Avira Browserschutz) - C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-05-23]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kjell-Torge\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [932912 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1147720 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [240360 2015-09-21] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [66872 2013-06-06] ()
S2 Realtek11nCU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [163544 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [74952 2015-10-05] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-10-21] (Malwarebytes)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 NPPTNT2; C:\windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) [Datei ist nicht signiert]
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation )
S3 dump_wmimmc; \??\C:\AeriaGames\Wolfteam-DE\GameGuard\dump_wmimmc.sys [X]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
S3 wolf; \??\C:\AeriaGames\Wolfteam-DE\avital\wolf64.sys [X]
S3 wolfkr; \??\C:\AeriaGames\WolfTeam-DE\avital\wolfk64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-21 15:04 - 2015-10-21 15:04 - 02196992 _____ (Farbar) C:\Users\Kjell-Torge\Downloads\FRST64 (1).exe
2015-10-21 15:01 - 2015-10-21 15:01 - 00003432 _____ C:\windows\System32\Tasks\Avira Browser Safety Updater Task
2015-10-21 14:59 - 2015-10-05 15:51 - 00163544 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2015-10-21 14:59 - 2015-10-05 15:51 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2015-10-21 14:59 - 2015-10-05 15:51 - 00074952 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2015-10-21 14:59 - 2015-10-05 15:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2015-10-21 14:54 - 2015-10-21 14:54 - 01798976 _____ (Malwarebytes) C:\Users\Kjell-Torge\Downloads\JRT.exe
2015-10-21 14:54 - 2015-10-21 14:54 - 01798976 _____ (Malwarebytes) C:\Users\Kjell-Torge\Downloads\JRT (1).exe
2015-10-21 14:54 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\Kjell-Torge\Desktop\JRT.exe
2015-10-21 14:51 - 2015-10-21 14:51 - 00001076 _____ C:\windows\PFRO.log
2015-10-21 14:43 - 2015-10-21 14:44 - 22908888 _____ (Malwarebytes ) C:\Users\Kjell-Torge\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-21 14:32 - 2015-10-21 14:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Kjell-Torge\Downloads\revosetup95.exe
2015-10-21 14:32 - 2015-10-21 14:32 - 00001271 _____ C:\Users\Kjell-Torge\Desktop\Revo Uninstaller.lnk
2015-10-21 14:32 - 2015-10-21 14:32 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-10-20 10:43 - 2015-10-20 10:43 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-20 10:43 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2015-10-20 10:33 - 2015-10-20 12:39 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-20 10:33 - 2015-10-20 10:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-10-20 10:33 - 2015-10-20 10:33 - 00001398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-10-20 10:33 - 2015-10-20 10:33 - 00001386 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-10-20 10:33 - 2015-10-20 10:33 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2015-10-20 10:33 - 2015-10-20 10:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-10-20 10:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2015-10-20 10:29 - 2015-10-20 10:29 - 01461024 _____ C:\Users\Kjell-Torge\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2015-10-20 09:58 - 2015-10-21 14:51 - 00000280 _____ C:\windows\setupact.log
2015-10-20 09:58 - 2015-10-20 09:58 - 00000000 _____ C:\windows\setuperr.log
2015-10-19 21:35 - 2015-10-19 21:35 - 00002802 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2015-10-19 21:35 - 2015-10-19 21:35 - 00000829 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-10-19 21:35 - 2015-10-19 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-10-19 21:35 - 2015-10-19 21:35 - 00000000 ____D C:\Program Files\CCleaner
2015-10-19 21:34 - 2015-10-19 21:34 - 05438072 _____ (Piriform Ltd) C:\Users\Kjell-Torge\Downloads\ccsetup510_slim.exe
2015-10-19 21:28 - 2015-10-21 14:50 - 00000000 ____D C:\AdwCleaner
2015-10-19 21:28 - 2015-10-19 21:28 - 01691648 _____ C:\Users\Kjell-Torge\Downloads\adwcleaner_5.014.exe
2015-10-19 21:08 - 2015-10-21 15:04 - 00018664 _____ C:\Users\Kjell-Torge\Downloads\FRST.txt
2015-10-19 21:08 - 2015-10-19 21:09 - 00041607 _____ C:\Users\Kjell-Torge\Downloads\Addition.txt
2015-10-19 21:07 - 2015-10-21 15:04 - 00000000 ____D C:\FRST
2015-10-19 21:07 - 2015-10-19 21:07 - 02196992 _____ (Farbar) C:\Users\Kjell-Torge\Downloads\FRST64.exe
2015-10-19 18:19 - 2015-10-21 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-19 18:19 - 2015-10-19 18:19 - 00001217 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2015-10-19 18:18 - 2015-10-19 18:18 - 04562576 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kjell-Torge\Downloads\avira_de_av_5625179148515__ws.exe
2015-10-19 17:52 - 2015-10-19 17:52 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2015-10-19 17:51 - 2015-10-19 17:53 - 00000000 ____D C:\Program Files (x86)\Overwolf
2015-10-19 17:49 - 2015-10-19 17:49 - 00001169 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2015-10-19 17:49 - 2015-10-19 17:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-10-19 17:48 - 2015-10-19 17:49 - 29058456 _____ (TeamSpeak Systems GmbH) C:\Users\Kjell-Torge\Downloads\TeamSpeak3-Client-win32-3.0.18.1.exe
2015-10-19 17:45 - 2015-10-21 14:45 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-19 17:45 - 2015-10-21 14:44 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-10-19 17:45 - 2015-10-21 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-10-19 17:45 - 2015-10-21 14:44 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-10-19 17:45 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2015-10-19 17:45 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-10-19 17:45 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2015-10-15 13:59 - 2015-09-18 21:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-10-15 13:59 - 2015-09-18 21:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-10-15 13:59 - 2015-09-18 21:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-10-15 13:59 - 2015-09-18 21:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-10-15 13:59 - 2015-09-18 21:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-10-15 13:59 - 2015-09-18 21:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-10-15 13:59 - 2015-09-18 21:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-10-14 16:12 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-10-14 16:12 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-10-14 16:12 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-10-14 16:12 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-10-14 16:12 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-10-14 16:12 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-10-14 16:12 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-10-14 16:12 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-10-14 16:12 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-10-14 16:12 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-10-14 16:12 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-10-14 16:12 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-10-14 16:12 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-10-14 16:12 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-10-14 16:12 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-10-14 16:12 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-10-14 16:12 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 16:12 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-10-14 16:12 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-10-14 16:12 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-10-14 16:12 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-10-14 16:12 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-10-14 16:12 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-10-14 16:12 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-10-14 16:12 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-10-14 16:12 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-10-14 16:12 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-10-14 16:12 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-10-14 16:12 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-10-14 16:12 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-10-14 16:12 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-10-14 16:12 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-10-14 16:12 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-10-14 16:12 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-10-14 16:12 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-10-14 16:12 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-10-14 16:12 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-10-14 16:12 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-10-14 16:12 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-10-14 16:12 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 16:12 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-10-14 16:12 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-10-14 16:12 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-10-14 16:12 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-10-14 16:12 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-10-14 16:12 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-10-14 16:12 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-10-14 16:12 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-10-14 16:12 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-10-14 16:12 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-10-14 16:12 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-10-14 16:12 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-10-14 16:12 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-10-14 16:12 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-10-14 16:12 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-10-14 16:12 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-10-14 16:12 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2015-10-14 16:12 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-10-14 16:12 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll
2015-10-14 16:11 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-10-14 16:11 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-10-14 16:11 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-10-14 16:11 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-10-14 16:11 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-10-14 16:11 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-10-14 16:11 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-10-14 16:11 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-10-14 16:11 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-10-14 16:10 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-10-14 16:10 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-10-14 16:10 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-10-14 16:10 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-10-14 16:10 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-10-14 16:10 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-10-14 16:10 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-10-14 16:10 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-10-14 16:10 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-10-14 16:10 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-10-14 16:10 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-10-14 16:10 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-10-14 16:10 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-10-14 16:10 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-10-14 16:10 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-10-14 16:10 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-10-14 16:10 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-10-14 16:10 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-10-14 16:10 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-10-14 16:10 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-10-14 16:10 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-10-14 16:10 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-10-14 16:10 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-10-14 16:10 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-10-14 16:10 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-10-14 16:10 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-10-14 16:10 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-10-14 16:10 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-10-14 16:10 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-10-14 16:10 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-10-14 16:10 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-10-14 16:10 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-10-14 16:10 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 16:10 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-10-14 16:10 - 2015-09-25 20:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-10-14 16:10 - 2015-09-25 20:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-10-14 16:10 - 2015-09-25 20:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-10-14 16:10 - 2015-09-25 20:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-10-14 16:10 - 2015-09-25 20:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-10-14 16:10 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-10-14 16:10 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-10-14 16:10 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-10-14 16:10 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-10-14 16:10 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-10-14 16:10 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-10-14 16:10 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-10-14 16:10 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-10-14 16:10 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-10-14 16:10 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-10-14 16:10 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-10-14 16:10 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-10-14 16:10 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-10-14 16:10 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-10-14 16:10 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-10-14 16:10 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-10-14 16:10 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-10-14 16:10 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-10-14 16:09 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-10-14 16:09 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-10-14 16:09 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-10-14 16:09 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-10-14 16:09 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-10-14 16:09 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-10-14 16:09 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-10-14 16:09 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-10-14 16:09 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-10-10 22:38 - 2015-10-10 22:38 - 00000000 ____D C:\Users\Kjell-Torge\Downloads\hlm-gsaeu (1)
2015-10-10 22:37 - 2015-10-10 22:37 - 04729171 _____ C:\Users\Kjell-Torge\Downloads\hlm-gsaeu.rar
2015-10-10 22:37 - 2015-10-10 22:37 - 04729171 _____ C:\Users\Kjell-Torge\Downloads\hlm-gsaeu (1).rar
2015-10-04 17:42 - 2015-10-04 17:42 - 08279505 _____ C:\Users\Kjell-Torge\Downloads\TALKFX_SDK_v2.1.1.zip
2015-10-04 17:40 - 2015-10-21 14:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-10-04 17:40 - 2015-10-21 14:38 - 00000000 ____D C:\Program Files (x86)\ROCCAT
2015-10-04 17:39 - 2015-10-04 17:39 - 04740459 _____ C:\Users\Kjell-Torge\Downloads\RoccatTalkV2.6.zip
2015-10-03 17:40 - 2015-10-03 17:56 - 00000000 ____D C:\Users\Kjell-Torge\Desktop\Neuer Ordner
2015-09-28 16:09 - 2015-09-28 16:09 - 00868138 _____ C:\Users\Kjell-Torge\Downloads\TI84Plus_OS.8Xu
2015-09-28 16:07 - 2015-09-28 16:07 - 00001026 _____ C:\Users\Public\Desktop\TI Connect.lnk
2015-09-28 16:07 - 2015-09-28 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools
2015-09-28 16:07 - 2015-09-28 16:07 - 00000000 ____D C:\Program Files\DIFX
2015-09-28 16:07 - 2015-09-28 16:07 - 00000000 ____D C:\Program Files (x86)\TI Education
2015-09-28 16:07 - 2012-03-07 10:07 - 00128512 _____ (Texas Instruments) C:\windows\system32\Drivers\tiehdusb.sys
2015-09-28 16:07 - 2012-02-17 14:01 - 01060864 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFC71.dll
2015-09-28 16:07 - 2012-02-17 14:01 - 01047552 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFC71u.dll
2015-09-28 16:07 - 2012-02-17 14:01 - 00499712 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp71.dll
2015-09-28 16:07 - 2012-02-17 14:01 - 00348160 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr71.dll
2015-09-28 16:07 - 2012-02-17 14:01 - 00089088 _____ (Microsoft Corporation) C:\windows\SysWOW64\atl71.dll
2015-09-28 16:05 - 2015-09-28 16:06 - 17766768 _____ C:\Users\Kjell-Torge\Downloads\TI-Connect_DE-4.0.0.218.exe
2015-09-28 15:16 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-09-28 15:16 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-09-28 15:16 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-09-28 15:16 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-09-28 15:16 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-09-28 15:16 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-09-28 15:16 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-09-28 15:16 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-09-27 19:22 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-09-27 19:22 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-09-27 19:22 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-09-27 19:22 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-09-27 19:22 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-09-27 19:22 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-09-27 19:22 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-09-27 19:22 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-09-27 19:22 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-09-27 19:22 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-09-27 19:09 - 2015-08-05 19:56 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\icaapi.dll
2015-09-27 19:09 - 2015-08-05 19:06 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2015-09-27 19:07 - 2015-07-18 15:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-09-27 19:07 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-21 15:05 - 2013-03-13 18:01 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-10-21 15:01 - 2013-03-28 15:43 - 00000000 ____D C:\Program Files (x86)\Avira
2015-10-21 14:59 - 2012-12-25 19:07 - 00000000 ____D C:\ProgramData\Avira
2015-10-21 14:58 - 2009-07-14 06:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-21 14:58 - 2009-07-14 06:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-21 14:56 - 2012-12-06 10:44 - 01227547 _____ C:\windows\WindowsUpdate.log
2015-10-21 14:52 - 2013-09-01 17:51 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-21 14:51 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-10-21 14:40 - 2014-08-31 12:39 - 00000000 ____D C:\Program Files\OBS
2015-10-21 14:39 - 2014-05-18 11:17 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Spotify
2015-10-21 14:35 - 2012-12-25 20:14 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\TS3Client
2015-10-21 14:31 - 2014-05-18 11:18 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Local\Spotify
2015-10-21 14:23 - 2013-09-01 17:51 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-21 14:19 - 2013-09-29 14:26 - 00000000 ____D C:\Program Files (x86)\Steam
2015-10-20 13:09 - 2013-04-26 16:25 - 00003954 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{2EB4A7C5-F90D-432E-886E-FFDF917D0732}
2015-10-19 21:39 - 2013-04-20 19:48 - 00000000 ____D C:\windows\Minidump
2015-10-19 21:39 - 2012-12-27 12:12 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Local\CrashDumps
2015-10-19 21:39 - 2012-11-23 13:20 - 00000000 ____D C:\windows\Panther
2015-10-19 21:30 - 2012-12-25 15:58 - 00000000 ____D C:\Users\Kjell-Torge
2015-10-19 18:18 - 2014-08-14 18:32 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-19 17:49 - 2014-02-28 17:20 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2015-10-19 17:48 - 2012-12-27 11:08 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\vlc
2015-10-16 21:05 - 2013-03-13 18:01 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 21:05 - 2012-12-25 20:08 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 21:05 - 2012-12-25 20:08 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-16 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2015-10-15 21:45 - 2014-12-10 19:22 - 00000000 ____D C:\windows\system32\appraiser
2015-10-15 21:45 - 2014-04-30 23:47 - 00000000 ___SD C:\windows\system32\CompatTel
2015-10-15 20:48 - 2012-12-31 22:28 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-15 14:25 - 2013-09-01 17:53 - 00002182 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-14 23:40 - 2013-08-14 16:26 - 00000000 ____D C:\windows\system32\MRT
2015-10-14 23:36 - 2012-11-26 11:44 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-10-14 21:09 - 2015-09-02 20:42 - 00000000 ____D C:\Users\Kjell-Torge\Desktop\Schule 2015-2016
2015-10-13 20:06 - 2015-09-04 16:25 - 00000000 ____D C:\Users\Kjell-Torge\Documents\Bilder
2015-10-12 16:11 - 2012-12-31 22:29 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Skype
2015-10-12 16:06 - 2012-12-31 22:28 - 00000000 ____D C:\ProgramData\Skype
2015-10-09 20:25 - 2014-09-08 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-10-08 22:18 - 2015-04-05 02:34 - 00000000 ___SD C:\windows\SysWOW64\GWX
2015-10-08 22:18 - 2015-04-05 02:34 - 00000000 ___SD C:\windows\system32\GWX
2015-10-08 21:50 - 2011-04-12 09:43 - 00699432 _____ C:\windows\system32\perfh007.dat
2015-10-08 21:50 - 2011-04-12 09:43 - 00154090 _____ C:\windows\system32\perfc007.dat
2015-10-08 21:50 - 2009-07-14 07:13 - 01625370 _____ C:\windows\system32\PerfStringBackup.INI
2015-09-29 13:47 - 2009-07-14 06:45 - 00324712 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-28 22:03 - 2013-09-29 14:40 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-09-28 19:25 - 2012-12-25 15:58 - 00075536 _____ C:\Users\Kjell-Torge\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-27 20:29 - 2015-03-30 18:22 - 00000000 ____D C:\Program Files (x86)\Razer
2015-09-27 20:26 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-27 19:16 - 2014-02-27 18:33 - 01598714 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2015-09-23 19:55 - 2012-12-26 13:05 - 00000000 ____D C:\Users\Kjell-Torge\AppData\Local\Akamai
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\winiml.dat
Einige Dateien in TEMP:
====================
C:\Users\Kjell-Torge\AppData\Local\Temp\avgnt.exe
C:\Users\Kjell-Torge\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-10-11 00:43
==================== Ende von FRST.txt ============================
Junkware Removal Tool nach der Ausführung dieses Programmes wurde auch kein Text-Dokument erstellt... |
|
21.10.2015, 19:38
| #6 |
| /// the machine /// TB-Ausbilder | Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. Logs von MBAM? AdwCleaner? Revo gemacht?
__________________ --> Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. |
|
21.10.2015, 20:35
| #7 |
| | Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult..Code:
ATTFilter Bekomme die Logs einfach nicht in das richtige Format zum Beispiel bei Anwalwarebytes.. Und bei den anderen Programmen, finde ich die Logs nicht.. Bin einfach zu doof.. :D Ich habe mit einem Kumpel noch drüber gesprochen und haben uns die Autostartprogramme angeschaut, dort waren keine Auffälligkeiten, hat das was damit ebenfalls zutun, oder ist so ein Key Logger versteckt? Avira hat auch keine Bedrohungen gefunden... Diese Technik ist einfach nichts für mich ... :(((((
|
|
22.10.2015, 17:59
| #8 |
| /// the machine /// TB-Ausbilder | Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. Du sollst nur die Logfiles in Codetags posten, nicht deinen Text den Du an mich schreibst  Du musst ja noch nicht mal selbst was machen, einfach nur Wort für Wort den Anleitungen folgen. Dort steht genau drin was Du machen musst, Schritt für Schritt, inklusive dem Punkt wo du das Logfile findest
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Ich habe eben auf einen Link gedrückt und mein Antivenprogramm hat geheult.. |
| abend, antivirenprogramm, bedrohung, datei, fake-link, frage, guten, hilfe, key?????, komplette, link, link gedrückt, programm, pup.optional.yontoo, sache, sachen, suchlauf, vorgehen |
dann auf 
und dann auf 
. 
