Trojaner-Board - Windows Firewall & Updater funktionieren nicht mehr

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows Firewall & Updater funktionieren nicht mehr (https://www.trojaner-board.de/144127-windows-firewall-updater-funktionieren-mehr.html)

Windows Firewall & Updater funktionieren nicht mehr

Bitte helft mir, ich bin am Verzweifeln!

Ich habe Windows 7. Beim Versuch Updates zu machen bricht er mit einer Fehlermeldung ab, die Windows Firewall Console (inkl. der Firewall an sich) lässt sich nicht öffnen bzw. starten. Zuerst mit der Fehlermeldung '0x8007005' das fenster kann nicht geöffnet werden, mittlerweile bin ich bei die Meldung '0x8007042'.

Ich habe gedacht der Fehler wäre ähnlich wie hier im Forum schon mal behandelt:
http://www.trojaner-board.de/140426-...ktioniert.html

Demnach habe ich bereits durchprobiert:
Malwarebytes Anti-Malware (s.u)
Malwarebytes Anti-Rootkit (kein Ergebnis)
TDSS-Killer (kein Ergebnis)
adwCleaner
Junkware Removal Tool
ESET Online Scanner (kein Ergebnis)
Temp File Cleaner
HijackThis (kein Ergebnis)
Fixit von Windows kann natürlich auch nichts ausrichten

C:\**\AppData\Local\Temp\Quarantine.exe habe ich mit FRST gefixt.

Ansonsten benutze ich Kaspersky Anti-Virus 2014. Leider habe ich gerade erst gewechselt und finde die Logdatein der 2013er Version nicht mehr.

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.11.05.04
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16686

SVEN :: SVEN-PC [Administrator]
 

Schutz: Aktiviert
 

05.11.2013 18:08:27

mbam-log-2013-11-05 (18-08-27).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 245659

Laufzeit: 6 Minute(n), 21 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 10

HKCR\CrossriderApp0029481.BHO (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CrossriderApp0029481.BHO.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CrossriderApp0029481.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CrossriderApp0029481.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\Cr_Installer\29481 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211941181} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CLSID\{11111111-1111-1111-1111-110211941181} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\TypeLib\{44444444-4444-4444-4444-440244944481} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\Interface\{55555555-5555-5555-5555-550255945581} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211941181} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 1

C:\Program Files (x86)\Mein Gutscheincode\Mein Gutscheincode-bho.dll (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Neustes FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013

Ran by SVEN (administrator) on SVEN-PC on 05-11-2013 23:29:28

Running from C:\Users\SVEN\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

(ASUS) C:\Windows\AsScrPro.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-02] ()

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll No File

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856

FF DefaultSearchEngine: Amazon.de

FF SelectedSearchEngine: Amazon.de

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: fireftp - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi

FF Extension: Adblock Plus - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2003) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (vShare.tv plug-in) - C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx
 

==================== Services (Whitelisted) =================
 

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-18] (CyberLink)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-03-20] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-03-30] (DT Soft Ltd)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)

S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2007-08-09] (Huawei Tech. Co., Ltd.)

S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-17] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2013-10-17] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-03-20] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\Cyberlink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.)

S3 ALSysIO; \??\C:\Users\SVEN\AppData\Local\Temp\ALSysIO64.sys [x]

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [x]

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-05 21:40 - 2013-11-05 21:26 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:09 - 2013-11-05 21:11 - 00000000 ____D C:\AdwCleaner

2013-11-05 20:39 - 2013-11-05 21:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 20:38 - 2013-11-05 21:07 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 19:24 - 2013-11-05 19:24 - 00029903 _____ C:\ComboFix.txt

2013-11-05 18:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-11-05 18:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-11-05 18:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-11-05 18:40 - 2013-11-05 19:24 - 00000000 ____D C:\Qoobox

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 18:07 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-11-05 17:24 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2013-11-05 17:23 - 2013-11-05 23:20 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-05 17:23 - 2013-10-17 15:47 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-05 17:23 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2013-10-30 21:28 - 2013-10-30 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:23 - 2013-11-05 17:37 - 00000000 ____D C:\ProgramData\AVAST Software

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:16 - 2013-10-30 20:17 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:10 - 2013-10-30 20:11 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-28 16:50 - 2013-11-01 17:05 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-10-25 16:59 - 2013-10-25 17:00 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-21 08:52 - 2013-10-21 08:52 - 00008190 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-17 15:47 - 2013-10-17 15:47 - 07717984 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-14 14:31 - 2013-11-05 23:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
 

==================== One Month Modified Files and Folders =======
 

2013-11-05 23:27 - 2010-11-02 20:43 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-05 23:27 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-05 23:27 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-05 23:20 - 2013-11-05 17:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-05 23:20 - 2010-11-02 20:43 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-05 23:20 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-05 23:20 - 2009-07-14 05:51 - 00402754 _____ C:\Windows\setupact.log

2013-11-05 23:18 - 2010-11-02 20:15 - 01266469 _____ C:\Windows\WindowsUpdate.log

2013-11-05 23:01 - 2013-10-14 14:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-05 22:33 - 2012-07-18 15:28 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002UA.job

2013-11-05 21:26 - 2013-11-05 21:40 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:11 - 2013-11-05 21:09 - 00000000 ____D C:\AdwCleaner

2013-11-05 21:07 - 2013-11-05 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 21:07 - 2013-11-05 20:38 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 19:24 - 2013-11-05 19:24 - 00029903 _____ C:\ComboFix.txt

2013-11-05 19:24 - 2013-11-05 18:40 - 00000000 ____D C:\Qoobox

2013-11-05 19:11 - 2011-03-30 14:35 - 00000000 ____D C:\Users\SVEN\Desktop\Software

2013-11-05 19:09 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-11-05 19:07 - 2010-11-02 20:50 - 00362348 _____ C:\Windows\PFRO.log

2013-11-05 19:05 - 2012-09-21 11:44 - 00000000 ____D C:\Windows\erdnt

2013-11-05 18:22 - 2010-11-02 21:06 - 00001901 _____ C:\Windows\system32\ServiceFilter.ini

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 17:37 - 2013-10-30 20:23 - 00000000 ____D C:\ProgramData\AVAST Software

2013-11-05 17:27 - 2011-03-30 16:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-04 22:28 - 2012-04-10 19:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Dropbox

2013-11-04 22:26 - 2012-04-10 19:47 - 00000000 ___RD C:\Users\SVEN\Dropbox

2013-11-03 21:00 - 2009-08-04 10:51 - 00697082 _____ C:\Windows\system32\perfh007.dat

2013-11-03 21:00 - 2009-08-04 10:51 - 00148346 _____ C:\Windows\system32\perfc007.dat

2013-11-03 21:00 - 2009-07-14 06:13 - 01613166 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-02 16:33 - 2012-07-18 15:28 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002Core.job

2013-11-01 17:05 - 2013-10-28 16:50 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-10-31 17:08 - 2011-11-09 22:28 - 01363456 ___SH C:\Users\SVEN\Desktop\Thumbs.db

2013-10-30 23:29 - 2012-05-01 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-30 21:29 - 2013-10-30 21:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 21:19 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Adobe

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:25 - 2013-08-12 18:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:17 - 2013-10-30 20:16 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:11 - 2013-10-30 20:10 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-30 19:39 - 2011-06-08 21:21 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Skype

2013-10-26 17:27 - 2011-04-03 13:44 - 00000000 ____D C:\Program Files (x86)\JDownloader

2013-10-25 17:00 - 2013-10-25 16:59 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-23 19:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-10-21 08:52 - 2013-10-21 08:52 - 00008190 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-20 19:07 - 2011-03-30 15:02 - 00000000 ____D C:\Users\SVEN\Desktop\Svens Ordner

2013-10-20 18:59 - 2011-04-03 15:51 - 00000000 ____D C:\Windows\Minidump

2013-10-17 15:47 - 2013-11-05 17:23 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 07717984 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ____D C:\ProgramData\Skype

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-17 12:07 - 2011-03-30 18:17 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-16 11:50 - 2012-04-03 14:02 - 00000000 ____D C:\Users\SVEN\Desktop\Studium

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-14 14:31 - 2013-04-06 14:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-14 14:31 - 2013-04-06 14:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-13 14:09 - 2011-09-14 18:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\vlc

2013-10-13 13:59 - 2011-07-23 10:06 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\dvdcss
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-31 17:38
 

==================== End Of Log ============================

--- --- ---

--- --- ---

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Danke für die schnelle Antwort!

Mir ist außerdem aufgefallen das der PC deutlich länger zum herunterfahren braucht als gewöhnlich.

Code:

ComboFix 13-11-04.01 - SVEN 06.11.2013  13:17:35.3.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3886.2254 [GMT 1:00]

ausgeführt von:: d:\downloads\ComboFix.exe

AV: Kaspersky Anti-Virus *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}

SP: Kaspersky Anti-Virus *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-10-06 bis 2013-11-06  ))))))))))))))))))))))))))))))

.

.

2013-11-06 12:29 . 2013-11-06 12:29        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2013-11-06 12:29 . 2013-11-06 12:29        --------        d-----w-        c:\users\Public\AppData\Local\temp

2013-11-06 12:29 . 2013-11-06 12:29        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-11-05 20:26 . 2013-11-05 20:26        --------        d-----w-        C:\FRST

2013-11-05 20:17 . 2013-11-05 20:17        --------        d-----w-        c:\windows\ERUNT

2013-11-05 20:09 . 2013-11-05 20:11        --------        d-----w-        C:\AdwCleaner

2013-11-05 19:39 . 2013-11-05 20:07        --------        d-----w-        c:\programdata\Malwarebytes' Anti-Malware (portable)

2013-11-05 19:38 . 2013-11-05 19:38        91352        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys

2013-11-05 17:07 . 2013-11-05 17:07        --------        d-----w-        c:\users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 17:07 . 2013-11-05 17:07        --------        d-----w-        c:\programdata\Malwarebytes

2013-11-05 17:07 . 2013-11-05 17:07        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2013-11-05 17:07 . 2013-04-04 13:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-11-05 16:24 . 2013-05-06 08:13        110176        ----a-w-        c:\windows\system32\klfphc.dll

2013-11-05 16:23 . 2013-11-05 16:23        --------        d-----w-        c:\windows\ELAMBKUP

2013-11-05 16:23 . 2013-11-06 12:32        --------        d-----w-        c:\programdata\Kaspersky Lab

2013-11-05 16:23 . 2013-11-05 16:23        --------        d-----w-        c:\program files (x86)\Kaspersky Lab

2013-11-05 16:23 . 2013-10-17 14:47        620640        ----a-w-        c:\windows\system32\drivers\klif.sys

2013-11-05 16:23 . 2013-06-08 19:18        112224        ----a-w-        c:\windows\system32\drivers\klflt.sys

2013-10-30 19:27 . 2013-10-30 19:27        --------        d-----w-        c:\users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 19:25 . 2013-10-30 19:25        334648        ----a-w-        c:\windows\system32\aswBoot.exe

2013-10-30 19:23 . 2013-10-30 19:23        409832        ----a-w-        c:\windows\system32\drivers\zeqwoueb.sys

2013-10-30 19:23 . 2013-11-05 16:37        --------        d-----w-        c:\programdata\AVAST Software

2013-10-17 14:47 . 2013-10-17 14:47        29280        ----a-w-        c:\windows\system32\drivers\klmouflt.sys

2013-10-17 14:47 . 2013-10-17 14:47        29280        ----a-w-        c:\windows\system32\drivers\klkbdflt.sys

2013-10-17 14:47 . 2013-10-17 14:47        7717984        ----a-w-        c:\windows\system32\drivers\kl1.sys

2013-10-17 14:47 . 2013-10-17 14:47        29792        ----a-w-        c:\windows\system32\drivers\klim6.sys

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-10-14 13:31 . 2013-04-06 13:14        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-10-14 13:31 . 2013-04-06 13:14        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-09-16 14:15 . 2013-09-16 14:15        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe

2013-09-16 14:15 . 2013-09-16 14:15        226304        ----a-w-        c:\windows\system32\elshyph.dll

2013-09-16 14:15 . 2013-09-16 14:15        185344        ----a-w-        c:\windows\SysWow64\elshyph.dll

2013-09-16 14:15 . 2013-09-16 14:15        1767936        ----a-w-        c:\windows\SysWow64\wininet.dll

2013-09-16 14:15 . 2013-09-16 14:15        158720        ----a-w-        c:\windows\SysWow64\msls31.dll

2013-09-16 14:15 . 2013-09-16 14:15        1054720        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2013-09-16 14:15 . 2013-09-16 14:15        719360        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2013-09-16 14:15 . 2013-09-16 14:15        523264        ----a-w-        c:\windows\SysWow64\vbscript.dll

2013-09-16 14:15 . 2013-09-16 14:15        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2013-09-16 14:15 . 2013-09-16 14:15        138752        ----a-w-        c:\windows\SysWow64\wextract.exe

2013-09-16 14:15 . 2013-09-16 14:15        38400        ----a-w-        c:\windows\SysWow64\imgutil.dll

2013-09-16 14:15 . 2013-09-16 14:15        2706432        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2013-09-16 14:15 . 2013-09-16 14:15        137216        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2013-09-16 14:15 . 2013-09-16 14:15        12800        ----a-w-        c:\windows\SysWow64\mshta.exe

2013-09-16 14:15 . 2013-09-16 14:15        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2013-09-16 14:15 . 2013-09-16 14:15        73728        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2013-09-16 14:15 . 2013-09-16 14:15        61952        ----a-w-        c:\windows\SysWow64\tdc.ocx

2013-09-16 14:15 . 2013-09-16 14:15        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2013-09-16 14:15 . 2013-09-16 14:15        361984        ----a-w-        c:\windows\SysWow64\html.iec

2013-09-16 14:15 . 2013-09-16 14:15        2876928        ----a-w-        c:\windows\SysWow64\jscript9.dll

2013-09-16 14:15 . 2013-09-16 14:15        109056        ----a-w-        c:\windows\SysWow64\iesysprep.dll

2013-09-16 14:15 . 2013-09-16 14:15        23040        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2013-09-16 14:15 . 2013-09-16 14:15        1441280        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2013-09-16 14:15 . 2013-09-16 14:15        89600        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe

2013-09-16 14:15 . 2013-09-16 14:15        61440        ----a-w-        c:\windows\SysWow64\iesetup.dll

2013-09-16 14:15 . 2013-09-16 14:15        2647040        ----a-w-        c:\windows\system32\iertutil.dll

2013-09-16 14:15 . 2013-09-16 14:15        197120        ----a-w-        c:\windows\system32\msrating.dll

2013-09-16 14:15 . 2013-09-16 14:15        1365504        ----a-w-        c:\windows\system32\urlmon.dll

2013-09-16 14:15 . 2013-09-16 14:15        216064        ----a-w-        c:\windows\system32\msls31.dll

2013-09-16 14:15 . 2013-09-16 14:15        2241024        ----a-w-        c:\windows\system32\wininet.dll

2013-09-16 14:15 . 2013-09-16 14:15        97280        ----a-w-        c:\windows\system32\mshtmled.dll

2013-09-16 14:15 . 2013-09-16 14:15        905728        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2013-09-16 14:15 . 2013-09-16 14:15        81408        ----a-w-        c:\windows\system32\icardie.dll

2013-09-16 14:15 . 2013-09-16 14:15        762368        ----a-w-        c:\windows\system32\ieapfltr.dll

2013-09-16 14:15 . 2013-09-16 14:15        67072        ----a-w-        c:\windows\system32\iesetup.dll

2013-09-16 14:15 . 2013-09-16 14:15        603136        ----a-w-        c:\windows\system32\msfeeds.dll

2013-09-16 14:15 . 2013-09-16 14:15        599552        ----a-w-        c:\windows\system32\vbscript.dll

2013-09-16 14:15 . 2013-09-16 14:15        53248        ----a-w-        c:\windows\system32\jsproxy.dll

2013-09-16 14:15 . 2013-09-16 14:15        51712        ----a-w-        c:\windows\system32\ie4uinit.exe

2013-09-16 14:15 . 2013-09-16 14:15        452096        ----a-w-        c:\windows\system32\dxtmsft.dll

2013-09-16 14:15 . 2013-09-16 14:15        441856        ----a-w-        c:\windows\system32\html.iec

2013-09-16 14:15 . 2013-09-16 14:15        39936        ----a-w-        c:\windows\system32\iernonce.dll

2013-09-16 14:15 . 2013-09-16 14:15        281600        ----a-w-        c:\windows\system32\dxtrans.dll

2013-09-16 14:15 . 2013-09-16 14:15        27648        ----a-w-        c:\windows\system32\licmgr10.dll

2013-09-16 14:15 . 2013-09-16 14:15        270848        ----a-w-        c:\windows\system32\iedkcs32.dll

2013-09-16 14:15 . 2013-09-16 14:15        247296        ----a-w-        c:\windows\system32\webcheck.dll

2013-09-16 14:15 . 2013-09-16 14:15        235008        ----a-w-        c:\windows\system32\url.dll

2013-09-16 14:15 . 2013-09-16 14:15        167424        ----a-w-        c:\windows\system32\iexpress.exe

2013-09-16 14:15 . 2013-09-16 14:15        1509376        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-09-16 14:15 . 2013-09-16 14:15        144896        ----a-w-        c:\windows\system32\wextract.exe

2013-09-16 14:15 . 2013-09-16 14:15        1400416        ----a-w-        c:\windows\system32\ieapfltr.dat

2013-09-16 14:15 . 2013-09-16 14:15        102912        ----a-w-        c:\windows\system32\inseng.dll

2013-09-16 14:15 . 2013-09-16 14:15        19246592        ----a-w-        c:\windows\system32\mshtml.dll

2013-09-16 14:15 . 2013-09-16 14:15        92160        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2013-09-16 14:15 . 2013-09-16 14:15        855552        ----a-w-        c:\windows\system32\jscript.dll

2013-09-16 14:15 . 2013-09-16 14:15        62976        ----a-w-        c:\windows\system32\pngfilt.dll

2013-09-16 14:15 . 2013-09-16 14:15        526336        ----a-w-        c:\windows\system32\ieui.dll

2013-09-16 14:15 . 2013-09-16 14:15        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll

2013-09-16 14:15 . 2013-09-16 14:15        51200        ----a-w-        c:\windows\system32\imgutil.dll

2013-09-16 14:15 . 2013-09-16 14:15        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2013-09-16 14:15 . 2013-09-16 14:15        3959296        ----a-w-        c:\windows\system32\jscript9.dll

2013-09-16 14:15 . 2013-09-16 14:15        2706432        ----a-w-        c:\windows\system32\mshtml.tlb

2013-09-16 14:15 . 2013-09-16 14:15        173568        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-09-16 14:15 . 2013-09-16 14:15        149504        ----a-w-        c:\windows\system32\occache.dll

2013-09-16 14:15 . 2013-09-16 14:15        13824        ----a-w-        c:\windows\system32\mshta.exe

2013-09-16 14:15 . 2013-09-16 14:15        136704        ----a-w-        c:\windows\system32\iesysprep.dll

2013-09-16 14:15 . 2013-09-16 14:15        136192        ----a-w-        c:\windows\system32\iepeers.dll

2013-09-16 14:15 . 2013-09-16 14:15        135680        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-09-16 14:15 . 2013-09-16 14:15        12800        ----a-w-        c:\windows\system32\msfeedssync.exe

2013-09-16 14:15 . 2013-09-16 14:15        15404544        ----a-w-        c:\windows\system32\ieframe.dll

2013-09-16 14:15 . 2013-09-16 14:15        77312        ----a-w-        c:\windows\system32\tdc.ocx

2013-09-16 14:13 . 2013-09-16 14:13        9728        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        9728        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        648192        ----a-w-        c:\windows\system32\d3d10level9.dll

2013-09-16 14:13 . 2013-09-16 14:13        604160        ----a-w-        c:\windows\SysWow64\d3d10level9.dll

2013-09-16 14:13 . 2013-09-16 14:13        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        522752        ----a-w-        c:\windows\system32\XpsGdiConverter.dll

2013-09-16 14:13 . 2013-09-16 14:13        465920        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-09-16 14:13 . 2013-09-16 14:13        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll

2013-09-16 14:13 . 2013-09-16 14:13        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        4096        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        3928064        ----a-w-        c:\windows\system32\d2d1.dll

2013-09-16 14:13 . 2013-09-16 14:13        364544        ----a-w-        c:\windows\SysWow64\XpsGdiConverter.dll

2013-09-16 14:13 . 2013-09-16 14:13        363008        ----a-w-        c:\windows\system32\dxgi.dll

2013-09-16 14:13 . 2013-09-16 14:13        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        3584        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        3419136        ----a-w-        c:\windows\SysWow64\d2d1.dll

2013-09-16 14:13 . 2013-09-16 14:13        333312        ----a-w-        c:\windows\system32\d3d10_1core.dll

2013-09-16 14:13 . 2013-09-16 14:13        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        3072        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        3072        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-16 14:13 . 2013-09-16 14:13        296960        ----a-w-        c:\windows\system32\d3d10core.dll

2013-09-16 14:13 . 2013-09-16 14:13        293376        ----a-w-        c:\windows\SysWow64\dxgi.dll

2013-09-16 14:13 . 2013-09-16 14:13        2776576        ----a-w-        c:\windows\system32\msmpeg2vdec.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]

@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"

[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]

2007-06-01 15:08        143360        ----a-w-        c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Akamai NetSession Interface"="c:\users\SVEN\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Boingo Wi-Fi"="c:\program files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk" [2010-11-02 2429]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-01-30 450560]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-15 152392]

"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2013-01-11 328504]

"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2012-10-17 205184]

"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 CLKMSVC10_9EC60124;CyberLink Product - 2012/03/26 21:33;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 ALSysIO;ALSysIO;c:\users\SVEN\AppData\Local\Temp\ALSysIO64.sys;c:\users\SVEN\AppData\Local\Temp\ALSysIO64.sys [x]

R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]

R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]

R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]

R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]

R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]

R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]

R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]

R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x]

R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x]

S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys;c:\windows\SYSNATIVE\DRIVERS\lullaby.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]

S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]

S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x]

S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]

S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]

S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/11/02 12:32];c:\program files (x86)\Cyberlink\PowerDVD9\000.fcl;c:\program files (x86)\Cyberlink\PowerDVD9\000.fcl [x]

S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]

S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]

S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]

S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]

S2 TGCM_ImportWiFiSvc;TGCM_ImportWiFiSvc;c:\program files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe;c:\program files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [x]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]

S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]

S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys;c:\windows\SYSNATIVE\DRIVERS\WDKMD.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*Deregistered* - CLKMDRV10_9EC60124

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-04-10 18:22        1642448        ----a-w-        c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-11-06 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-06 13:31]

.

2013-11-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002Core.job

- c:\users\SVEN\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-18 14:27]

.

2013-11-06 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002UA.job

- c:\users\SVEN\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-18 14:27]

.

2013-11-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-02 19:43]

.

2013-11-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-02 19:43]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]

@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"

[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]

2007-06-01 14:52        159744        ----a-w-        c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]

@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"

[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]

2009-11-26 05:49        70656        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]

@="{64174815-8D98-4CE6-8646-4C039977D808}"

[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]

2009-11-26 05:49        70656        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-03-05 1928976]

"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]

"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256]

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = about:blank

uLocal Page = c:\windows\system32\blank.htm

mStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.2.1 192.168.2.1

FF - ProfilePath - c:\users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\

FF - prefs.js: browser.search.selectedEngine - Amazon.de

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/

FF - ExtSQL: 2013-10-20 10:18; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF - ExtSQL: 2013-10-30 20:50; {a7c6cf7f-112c-4500-a7ea-39801a327e5f}; c:\users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi

FF - ExtSQL: 2013-11-05 17:23; content_blocker@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF - ExtSQL: 2013-11-05 17:24; url_advisor@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF - ExtSQL: 2013-11-05 17:24; virtual_keyboard@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)

AddRemove-ASUS_N_Series_Screensaver - c:\windows\system32\ASUS_N_Series_Screensaver.scr

AddRemove-vShare.tv plugin - c:\program files (x86)\vShare.tv plugin\uninst.exe

AddRemove-Wörterbuch Pschyrembel & Hunnius - c:\windows\IsUn0407.exe

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\MpsSvc]

"ImagePath"="."

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}]

"ImagePath"="\??\c:\program files (x86)\Cyberlink\PowerDVD9\000.fcl"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe

c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe

c:\program files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe

c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe

c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

c:\program files (x86)\CyberLink\Shared files\RichVideo.exe

c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-11-06  13:50:45 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-11-06 12:50

ComboFix2.txt  2013-11-05 18:24

ComboFix3.txt  2012-09-21 11:23

.

Vor Suchlauf: 22 Verzeichnis(se), 36.511.920.128 Bytes frei

Nach Suchlauf: 23 Verzeichnis(se), 36.379.660.288 Bytes frei

.

- - End Of File - - E6A639210195564444241036736D35A7

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.11.06.07
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16686

SVEN :: SVEN-PC [Administrator]
 

Schutz: Deaktiviert
 

06.11.2013 18:22:05

mbam-log-2013-11-06 (18-22-05).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 513603

Laufzeit: 1 Stunde(n), 33 Minute(n), 36 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 2

C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mein Gutscheincode\Uninstall.exe.vir (PUP.OPtional.MGCode) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\~~Apps~~\flash 8\Flash-DreamWeaver-Fireworks keygen.exe (Riskware.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Code:

# AdwCleaner v3.011 - Bericht erstellt am 06/11/2013 um 21:03:42

# Updated 03/11/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : SVEN - SVEN-PC

# Gestartet von : D:\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16686
 
 

-\\ Mozilla Firefox v25.0 (de)
 

[ Datei : C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\prefs.js ]
 
 

-\\ Google Chrome v
 

[ Datei : C:\Users\SVEN\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [6092 octets] - [05/11/2013 21:09:31]

AdwCleaner[R1].txt - [1031 octets] - [06/11/2013 20:27:42]

AdwCleaner[S0].txt - [5827 octets] - [05/11/2013 21:11:27]

AdwCleaner[S1].txt - [954 octets] - [06/11/2013 21:03:42]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1013 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Home Premium x64

Ran by SVEN on 06.11.2013 at 21:09:58,92

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\SVEN\AppData\Roaming\mozilla\firefox\profiles\k57o9m59.default-1382014060856\minidumps [2 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 06.11.2013 at 21:21:15,83

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013

Ran by SVEN (administrator) on SVEN-PC on 06-11-2013 21:46:12

Running from C:\Users\SVEN\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

(ASUS) C:\Windows\AsScrPro.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-02] ()

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll No File

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856

FF DefaultSearchEngine: Amazon.de

FF SelectedSearchEngine: Amazon.de

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: fireftp - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi

FF Extension: Adblock Plus - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2003) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (vShare.tv plug-in) - C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx
 

==================== Services (Whitelisted) =================
 

S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-18] (CyberLink)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 MpsSvc; C:\Windows\System32\. [0 2013-11-05] ()

S3 MpsSvc; C:\Windows\SysWow64\. [0 2013-11-06] ()

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-03-20] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-03-30] (DT Soft Ltd)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)

S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2007-08-09] (Huawei Tech. Co., Ltd.)

S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-17] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2013-10-17] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-03-20] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\Cyberlink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.)

S3 ALSysIO; \??\C:\Users\SVEN\AppData\Local\Temp\ALSysIO64.sys [x]

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [x]

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-06 21:21 - 2013-11-06 21:21 - 00000768 _____ C:\Users\SVEN\Desktop\JRT.txt

2013-11-06 21:09 - 2013-11-05 23:36 - 01034531 _____ (Thisisu) C:\Users\SVEN\Desktop\JRT_NEW.exe

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:16 - 2013-11-06 13:51 - 00000000 ____D C:\ComboFix

2013-11-05 21:40 - 2013-11-05 21:26 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:09 - 2013-11-06 21:03 - 00000000 ____D C:\AdwCleaner

2013-11-05 20:39 - 2013-11-05 21:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 20:38 - 2013-11-05 21:07 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 18:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-11-05 18:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-11-05 18:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-11-05 18:40 - 2013-11-06 13:51 - 00000000 ____D C:\Qoobox

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 18:07 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-11-05 17:24 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2013-11-05 17:23 - 2013-11-06 21:07 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-05 17:23 - 2013-10-17 15:47 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-05 17:23 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2013-10-30 21:28 - 2013-10-30 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:23 - 2013-11-05 17:37 - 00000000 ____D C:\ProgramData\AVAST Software

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:16 - 2013-10-30 20:17 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:10 - 2013-10-30 20:11 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-28 16:50 - 2013-11-06 20:28 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-10-25 16:59 - 2013-10-25 17:00 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-21 08:52 - 2013-10-21 08:52 - 00009450 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-17 15:47 - 2013-10-17 15:47 - 07717984 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-14 14:31 - 2013-11-06 21:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
 

==================== One Month Modified Files and Folders =======
 

2013-11-06 21:27 - 2010-11-02 20:43 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-06 21:21 - 2013-11-06 21:21 - 00000768 _____ C:\Users\SVEN\Desktop\JRT.txt

2013-11-06 21:14 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-06 21:14 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-06 21:07 - 2013-11-05 17:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-06 21:06 - 2010-11-02 20:50 - 00364048 _____ C:\Windows\PFRO.log

2013-11-06 21:06 - 2010-11-02 20:43 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-06 21:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-06 21:06 - 2009-07-14 05:51 - 00403594 _____ C:\Windows\setupact.log

2013-11-06 21:04 - 2010-11-02 20:15 - 01504377 _____ C:\Windows\WindowsUpdate.log

2013-11-06 21:03 - 2013-11-05 21:09 - 00000000 ____D C:\AdwCleaner

2013-11-06 21:01 - 2013-10-14 14:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-06 20:28 - 2013-10-28 16:50 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-11-06 19:33 - 2012-07-18 15:28 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002UA.job

2013-11-06 16:33 - 2012-07-18 15:28 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002Core.job

2013-11-06 13:51 - 2013-11-06 13:16 - 00000000 ____D C:\ComboFix

2013-11-06 13:51 - 2013-11-05 18:40 - 00000000 ____D C:\Qoobox

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:33 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-11-05 23:39 - 2011-05-18 11:01 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2013-11-05 23:39 - 2011-03-30 20:05 - 00000000 ____D C:\Windows\System32\Tasks\Games

2013-11-05 23:36 - 2013-11-06 21:09 - 01034531 _____ (Thisisu) C:\Users\SVEN\Desktop\JRT_NEW.exe

2013-11-05 21:26 - 2013-11-05 21:40 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:07 - 2013-11-05 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 21:07 - 2013-11-05 20:38 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 19:11 - 2011-03-30 14:35 - 00000000 ____D C:\Users\SVEN\Desktop\Software

2013-11-05 19:05 - 2012-09-21 11:44 - 00000000 ____D C:\Windows\erdnt

2013-11-05 18:22 - 2010-11-02 21:06 - 00001901 _____ C:\Windows\system32\ServiceFilter.ini

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 17:37 - 2013-10-30 20:23 - 00000000 ____D C:\ProgramData\AVAST Software

2013-11-05 17:27 - 2011-03-30 16:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-04 22:28 - 2012-04-10 19:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Dropbox

2013-11-04 22:26 - 2012-04-10 19:47 - 00000000 ___RD C:\Users\SVEN\Dropbox

2013-11-03 21:00 - 2009-08-04 10:51 - 00697082 _____ C:\Windows\system32\perfh007.dat

2013-11-03 21:00 - 2009-08-04 10:51 - 00148346 _____ C:\Windows\system32\perfc007.dat

2013-11-03 21:00 - 2009-07-14 06:13 - 01613166 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-31 17:08 - 2011-11-09 22:28 - 01363456 ___SH C:\Users\SVEN\Desktop\Thumbs.db

2013-10-30 23:29 - 2012-05-01 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-30 21:29 - 2013-10-30 21:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 21:19 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Adobe

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:25 - 2013-08-12 18:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:17 - 2013-10-30 20:16 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:11 - 2013-10-30 20:10 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-30 19:39 - 2011-06-08 21:21 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Skype

2013-10-26 17:27 - 2011-04-03 13:44 - 00000000 ____D C:\Program Files (x86)\JDownloader

2013-10-25 17:00 - 2013-10-25 16:59 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-23 19:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-10-21 08:52 - 2013-10-21 08:52 - 00009450 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-20 19:07 - 2011-03-30 15:02 - 00000000 ____D C:\Users\SVEN\Desktop\Svens Ordner

2013-10-20 18:59 - 2011-04-03 15:51 - 00000000 ____D C:\Windows\Minidump

2013-10-17 15:47 - 2013-11-05 17:23 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 07717984 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ____D C:\ProgramData\Skype

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-17 12:07 - 2011-03-30 18:17 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-16 11:50 - 2012-04-03 14:02 - 00000000 ____D C:\Users\SVEN\Desktop\Studium

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-14 14:31 - 2013-04-06 14:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-14 14:31 - 2013-04-06 14:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-13 14:09 - 2011-09-14 18:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\vlc

2013-10-13 13:59 - 2011-07-23 10:06 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\dvdcss
 

Some content of TEMP:

====================

C:\Users\SVEN\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-31 17:38
 

==================== End Of Log ============================

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Ich muss aktuell eh von morgens bis abend nur lernen, da habe ich Kaspersky und den ESET Online Scanner heute morgen gerade erst noch mal durchlaufen lassen, aber ohne Ergebnis. Das Problem besteht leider immer noch, nur der Error-Code ist jetzt wieder der, den ich am Anfang angezeigt bekommen habe. Soll ich davon mal ein Screenshot machen? :confused:

Code:

 Results of screen317's Security Check version 0.99.74  

 Windows 7 Service Pack 1 x64   

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

Kaspersky Anti-Virus   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 JavaFX 2.1.1    

 Java(TM) 6 Update 29  

 Java 7 Update 21  

 Java version out of Date! 

 Adobe Flash Player 11.9.900.117  

 Adobe Reader XI  

 Mozilla Firefox (25.0) 

 Mozilla Thunderbird (17.0.8) 

 Google Chrome 26.0.1410.43  

 Google Chrome 26.0.1410.64  
 ````````Process Check: objlist.exe by Laurent````````  

 Kaspersky Lab Kaspersky Anti-Virus 14.0.0 avp.exe  

 Kaspersky Lab Kaspersky Anti-Virus 14.0.0 avpui.exe  

 Malwarebytes' Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013

Ran by SVEN (administrator) on SVEN-PC on 07-11-2013 14:11:55

Running from C:\Users\SVEN\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

(ASUS) C:\Windows\AsScrPro.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Microsoft Corporation) C:\PROGRA~2\MICROS~1\Office14\WINWORD.EXE

(Microsoft Corporation) C:\Windows\splwow64.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-02] ()

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll No File

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856

FF DefaultSearchEngine: Wikipedia (de)

FF SelectedSearchEngine: Wikipedia (de)

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: fireftp - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi

FF Extension: Adblock Plus - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2003) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (vShare.tv plug-in) - C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx
 

==================== Services (Whitelisted) =================
 

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-18] (CyberLink)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 MpsSvc; C:\Windows\System32\. [0 2013-11-07] ()

S3 MpsSvc; C:\Windows\SysWow64\. [0 2013-11-07] ()

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-03-20] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-03-30] (DT Soft Ltd)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)

S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2007-08-09] (Huawei Tech. Co., Ltd.)

S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [623200 2013-11-07] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-03-20] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\Cyberlink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.)

S3 ALSysIO; \??\C:\Users\SVEN\AppData\Local\Temp\ALSysIO64.sys [x]

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [x]

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-06 20:40 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-11-06 20:40 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-11-06 20:40 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-11-06 20:40 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-11-06 20:40 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-11-06 20:40 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:16 - 2013-11-06 13:51 - 00000000 ____D C:\ComboFix

2013-11-05 21:40 - 2013-11-05 21:26 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:09 - 2013-11-06 21:03 - 00000000 ____D C:\AdwCleaner

2013-11-05 20:39 - 2013-11-05 21:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 20:38 - 2013-11-05 21:07 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 18:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-11-05 18:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-11-05 18:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-11-05 18:40 - 2013-11-06 13:51 - 00000000 ____D C:\Qoobox

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 18:07 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-11-05 17:24 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2013-11-05 17:23 - 2013-11-07 12:49 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-05 17:23 - 2013-11-07 10:50 - 00623200 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-05 17:23 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2013-10-30 21:28 - 2013-10-30 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:23 - 2013-11-05 17:37 - 00000000 ____D C:\ProgramData\AVAST Software

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:16 - 2013-10-30 20:17 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:10 - 2013-10-30 20:11 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-28 16:50 - 2013-11-07 13:34 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-10-25 16:59 - 2013-10-25 17:00 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-21 08:52 - 2013-10-21 08:52 - 00009702 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-17 15:47 - 2013-11-07 10:50 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-14 14:31 - 2013-11-07 14:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
 

==================== One Month Modified Files and Folders =======
 

2013-11-07 14:01 - 2013-10-14 14:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-07 13:50 - 2009-07-14 05:51 - 00403986 _____ C:\Windows\setupact.log

2013-11-07 13:49 - 2011-11-09 22:28 - 01382400 ___SH C:\Users\SVEN\Desktop\Thumbs.db

2013-11-07 13:34 - 2013-10-28 16:50 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-11-07 13:33 - 2012-07-18 15:28 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002UA.job

2013-11-07 13:27 - 2010-11-02 20:43 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-07 12:49 - 2013-11-05 17:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-07 10:50 - 2013-11-05 17:23 - 00623200 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-07 10:50 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-11-07 10:39 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-07 10:39 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-07 10:38 - 2010-11-02 20:15 - 01651555 _____ C:\Windows\WindowsUpdate.log

2013-11-07 10:32 - 2010-11-02 20:43 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-07 10:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-07 00:20 - 2011-03-31 10:19 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-11-06 21:06 - 2010-11-02 20:50 - 00364048 _____ C:\Windows\PFRO.log

2013-11-06 21:03 - 2013-11-05 21:09 - 00000000 ____D C:\AdwCleaner

2013-11-06 16:33 - 2012-07-18 15:28 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002Core.job

2013-11-06 13:51 - 2013-11-06 13:16 - 00000000 ____D C:\ComboFix

2013-11-06 13:51 - 2013-11-05 18:40 - 00000000 ____D C:\Qoobox

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:33 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-11-05 23:39 - 2011-05-18 11:01 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2013-11-05 23:39 - 2011-03-30 20:05 - 00000000 ____D C:\Windows\System32\Tasks\Games

2013-11-05 21:26 - 2013-11-05 21:40 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:07 - 2013-11-05 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 21:07 - 2013-11-05 20:38 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 19:11 - 2011-03-30 14:35 - 00000000 ____D C:\Users\SVEN\Desktop\Software

2013-11-05 19:05 - 2012-09-21 11:44 - 00000000 ____D C:\Windows\erdnt

2013-11-05 18:22 - 2010-11-02 21:06 - 00001901 _____ C:\Windows\system32\ServiceFilter.ini

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 17:37 - 2013-10-30 20:23 - 00000000 ____D C:\ProgramData\AVAST Software

2013-11-05 17:27 - 2011-03-30 16:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-04 22:28 - 2012-04-10 19:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Dropbox

2013-11-04 22:26 - 2012-04-10 19:47 - 00000000 ___RD C:\Users\SVEN\Dropbox

2013-11-03 21:00 - 2009-08-04 10:51 - 00697082 _____ C:\Windows\system32\perfh007.dat

2013-11-03 21:00 - 2009-08-04 10:51 - 00148346 _____ C:\Windows\system32\perfc007.dat

2013-11-03 21:00 - 2009-07-14 06:13 - 01613166 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-30 23:29 - 2012-05-01 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-30 21:29 - 2013-10-30 21:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 21:19 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Adobe

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:25 - 2013-08-12 18:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:17 - 2013-10-30 20:16 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:11 - 2013-10-30 20:10 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-30 19:39 - 2011-06-08 21:21 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Skype

2013-10-26 17:27 - 2011-04-03 13:44 - 00000000 ____D C:\Program Files (x86)\JDownloader

2013-10-25 17:00 - 2013-10-25 16:59 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-23 19:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-10-21 08:52 - 2013-10-21 08:52 - 00009702 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-20 19:07 - 2011-03-30 15:02 - 00000000 ____D C:\Users\SVEN\Desktop\Svens Ordner

2013-10-20 18:59 - 2011-04-03 15:51 - 00000000 ____D C:\Windows\Minidump

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ____D C:\ProgramData\Skype

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-17 12:07 - 2011-03-30 18:17 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-16 11:50 - 2012-04-03 14:02 - 00000000 ____D C:\Users\SVEN\Desktop\Studium

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-14 14:31 - 2013-04-06 14:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-14 14:31 - 2013-04-06 14:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-13 14:09 - 2011-09-14 18:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\vlc

2013-10-13 13:59 - 2011-07-23 10:06 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\dvdcss
 

Some content of TEMP:

====================

C:\Users\SVEN\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-31 17:38
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Ja bitte, zeig mal nen Screenshot.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

http://www7.pic-upload.de/08.11.13/xwfm75iwos3.jpg
hxxp://www.pic-upload.de/view-21268719/fehler1.jpg.html

Code:

Farbar Service Scanner Version: 24-10-2013

Ran by SVEN (administrator) on 08-11-2013 at 12:35:31

Running from "D:\Downloads"

Microsoft Windows 7 Home Premium  Service Pack 1 (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============

mpsdrv Service is not running. Checking service configuration:

The start type of mpsdrv service is OK.

The ImagePath of mpsdrv service is OK.
 

MpsSvc Service is not running. Checking service configuration:

The start type of MpsSvc service is set to Demand. The default start type is Auto.

The ImagePath of MpsSvc: ".".

Checking ServiceDll: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.
 

bfe Service is not running. Checking service configuration:

Checking Start type: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.

Checking ImagePath: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.

Checking ServiceDll: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
 
 

Firewall Disabled Policy: 

==================

"HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall" registry value does not exist.
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Action Center:

============
 

Action Center Notification Icon =====> HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}\\"AutoStart" value does not exist.
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============

WinDefend Service is not running. Checking service configuration:

The start type of WinDefend service is set to Demand. The default start type is Auto.

The ImagePath of WinDefend service is OK.

The ServiceDll of WinDefend service is OK.
 
 

Windows Defender Disabled Policy: 

==========================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]

"DisableAntiSpyware"=DWORD:1
 
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

C:\Windows\System32\dhcpcore.dll => MD5 is legit

C:\Windows\System32\drivers\afd.sys => MD5 is legit

C:\Windows\System32\drivers\tdx.sys => MD5 is legit

C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit

C:\Windows\System32\dnsrslvr.dll => MD5 is legit

C:\Windows\System32\mpssvc.dll => MD5 is legit

C:\Windows\System32\bfe.dll => MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

C:\Windows\System32\SDRSVC.dll => MD5 is legit

C:\Windows\System32\vssvc.exe => MD5 is legit

C:\Windows\System32\wscsvc.dll => MD5 is legit

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\System32\wuaueng.dll => MD5 is legit

C:\Windows\System32\qmgr.dll => MD5 is legit

C:\Windows\System32\es.dll => MD5 is legit

C:\Windows\System32\cryptsvc.dll => MD5 is legit

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\System32\ipnathlp.dll => MD5 is legit

C:\Windows\System32\iphlpsvc.dll => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.

http://i1224.photobucket.com/albums/...3/Capture3.gif
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

http://i1224.photobucket.com/albums/...y3/Capture.gif
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

http://i1224.photobucket.com/albums/...3/Capture1.gif
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

http://i1238.photobucket.com/albums/...eakingtool.jpg

Fehler besteht immer noch bei der Firewall, nur habe ich nun einen anderen Fehlercode. Der Windows Updater hat vorher mysteriöserweiße schon wieder funktioniert. :confused:

welchen Fehlercode? Frisches FSS und FRST log bitte.

http://www7.pic-upload.de/09.11.13/jur9j7pn673p.jpg
hxxp://www.pic-upload.de/view-21278833/fehler2.jpg.html

http://www7.pic-upload.de/09.11.13/exbn5xbjngd.jpg
hxxp://www.pic-upload.de/view-21278875/fehler3.jpg.html

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013

Ran by SVEN (administrator) on SVEN-PC on 09-11-2013 13:50:13

Running from C:\Users\SVEN\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe

(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(ASUS) C:\Windows\AsScrPro.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\javaw.exe

(MPC-HC Team) C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe

(Adobe Systems, Incorporated) C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\Photoshop.exe

(Macrovision Europe Ltd.) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-02] ()

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll No File

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856

FF DefaultSearchEngine: Amazon.de

FF SelectedSearchEngine: Amazon.de

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: fireftp - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi

FF Extension: Adblock Plus - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2003) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (vShare.tv plug-in) - C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File

CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx
 

==================== Services (Whitelisted) =================
 

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-18] (CyberLink)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-03-20] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-03-30] (DT Soft Ltd)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)

S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2007-08-09] (Huawei Tech. Co., Ltd.)

S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [623200 2013-11-07] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-03-20] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\Cyberlink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.)

S3 ALSysIO; \??\C:\Users\SVEN\AppData\Local\Temp\ALSysIO64.sys [x]

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [x]

U3 tmlwf; 

U3 tmwfp; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-08 14:04 - 2013-11-08 14:32 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE

2013-11-08 14:00 - 2013-11-08 14:00 - 00000207 _____ C:\Windows\tweaking.com-regbackup-SVEN-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat

2013-11-08 13:58 - 2013-11-08 13:58 - 00000000 ____D C:\RegBackup

2013-11-08 13:30 - 2013-11-08 13:30 - 00003288 ____N C:\bootsqm.dat

2013-11-08 13:07 - 2013-11-08 13:07 - 00000000 ____D C:\Users\SVEN\Desktop\Tweaking.com - Windows Repair

2013-11-08 12:58 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-08 12:58 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-08 12:58 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-08 12:58 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-08 12:58 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-08 12:58 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-08 12:58 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-08 12:58 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-08 12:58 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-08 12:58 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-08 12:58 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-08 12:58 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-08 12:38 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-11-08 12:38 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-11-08 12:38 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-11-08 12:38 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys

2013-11-08 12:38 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-11-08 12:38 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-11-08 12:38 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-11-08 12:38 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-11-08 12:38 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-11-08 12:38 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-11-08 12:38 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-11-08 12:38 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-11-08 12:38 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-11-08 12:38 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-11-08 12:38 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-11-08 12:38 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-11-08 12:38 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-11-08 12:37 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-11-08 12:37 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-11-08 12:37 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-11-08 12:37 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2013-11-08 12:37 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-11-08 12:37 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-11-08 12:37 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2013-11-08 12:36 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-11-08 12:36 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-11-06 20:40 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-11-06 20:40 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-11-06 20:40 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-11-06 20:40 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-11-06 20:40 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-11-06 20:40 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:16 - 2013-11-06 13:51 - 00000000 ____D C:\ComboFix

2013-11-05 21:40 - 2013-11-05 21:26 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:09 - 2013-11-06 21:03 - 00000000 ____D C:\AdwCleaner

2013-11-05 20:39 - 2013-11-05 21:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 20:38 - 2013-11-05 21:07 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 18:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-11-05 18:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-11-05 18:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-11-05 18:40 - 2013-11-06 13:51 - 00000000 ____D C:\Qoobox

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 18:07 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-11-05 17:24 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2013-11-05 17:23 - 2013-11-09 13:11 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-05 17:23 - 2013-11-07 10:50 - 00623200 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-05 17:23 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2013-10-30 21:28 - 2013-10-30 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:23 - 2013-11-05 17:37 - 00000000 ____D C:\ProgramData\AVAST Software

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:16 - 2013-10-30 20:17 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:10 - 2013-10-30 20:11 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-28 16:50 - 2013-11-08 07:22 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-10-25 16:59 - 2013-10-25 17:00 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-21 08:52 - 2013-10-21 08:52 - 00011214 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-17 15:47 - 2013-11-07 10:50 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-14 14:31 - 2013-11-09 13:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
 

==================== One Month Modified Files and Folders =======
 

2013-11-09 13:49 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Adobe

2013-11-09 13:33 - 2012-07-18 15:28 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002UA.job

2013-11-09 13:27 - 2010-11-02 20:43 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-09 13:11 - 2013-11-05 17:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-09 13:01 - 2013-10-14 14:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-09 09:27 - 2010-11-02 20:43 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-09 09:11 - 2009-07-14 05:51 - 00405554 _____ C:\Windows\setupact.log

2013-11-09 08:59 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-09 08:59 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-09 08:58 - 2009-08-04 10:51 - 00683220 _____ C:\Windows\system32\perfh007.dat

2013-11-09 08:58 - 2009-08-04 10:51 - 00144176 _____ C:\Windows\system32\perfc007.dat

2013-11-09 08:58 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-09 08:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-09 01:39 - 2010-11-02 20:15 - 01078028 _____ C:\Windows\WindowsUpdate.log

2013-11-08 16:33 - 2012-07-18 15:28 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002Core.job

2013-11-08 14:49 - 2011-03-30 13:16 - 00090976 _____ C:\Users\SVEN\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-08 14:39 - 2010-11-02 20:50 - 00364396 _____ C:\Windows\PFRO.log

2013-11-08 14:39 - 2009-07-14 05:45 - 02279256 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-08 14:32 - 2013-11-08 14:04 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE

2013-11-08 14:31 - 2009-07-14 03:34 - 00000514 _____ C:\Windows\win.ini

2013-11-08 14:00 - 2013-11-08 14:00 - 00000207 _____ C:\Windows\tweaking.com-regbackup-SVEN-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat

2013-11-08 13:58 - 2013-11-08 13:58 - 00000000 ____D C:\RegBackup

2013-11-08 13:31 - 2012-10-28 15:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-11-08 13:31 - 2012-10-28 15:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-11-08 13:30 - 2013-11-08 13:30 - 00003288 ____N C:\bootsqm.dat

2013-11-08 13:15 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender

2013-11-08 13:15 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2013-11-08 13:07 - 2013-11-08 13:07 - 00000000 ____D C:\Users\SVEN\Desktop\Tweaking.com - Windows Repair

2013-11-08 13:02 - 2011-03-31 10:19 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-11-08 12:50 - 2012-12-28 00:37 - 01591060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-08 12:43 - 2013-09-16 15:27 - 00000000 ____D C:\Windows\system32\MRT

2013-11-08 12:40 - 2011-03-30 19:06 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-08 07:22 - 2013-10-28 16:50 - 00000000 ____D C:\Users\SVEN\Desktop\Elektrochemie

2013-11-07 19:17 - 2011-03-30 18:17 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-11-07 13:49 - 2011-11-09 22:28 - 01382400 ___SH C:\Users\SVEN\Desktop\Thumbs.db

2013-11-07 10:50 - 2013-11-05 17:23 - 00623200 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-07 10:50 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-11-06 21:03 - 2013-11-05 21:09 - 00000000 ____D C:\AdwCleaner

2013-11-06 13:51 - 2013-11-06 13:16 - 00000000 ____D C:\ComboFix

2013-11-06 13:51 - 2013-11-05 18:40 - 00000000 ____D C:\Qoobox

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:33 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-11-05 23:39 - 2011-05-18 11:01 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2013-11-05 23:39 - 2011-03-30 20:05 - 00000000 ____D C:\Windows\System32\Tasks\Games

2013-11-05 21:26 - 2013-11-05 21:40 - 01957098 _____ (Farbar) C:\Users\SVEN\Desktop\FRST64.exe

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:07 - 2013-11-05 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 21:07 - 2013-11-05 20:38 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 19:11 - 2011-03-30 14:35 - 00000000 ____D C:\Users\SVEN\Desktop\Software

2013-11-05 19:05 - 2012-09-21 11:44 - 00000000 ____D C:\Windows\erdnt

2013-11-05 18:22 - 2010-11-02 21:06 - 00001901 _____ C:\Windows\system32\ServiceFilter.ini

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 17:37 - 2013-10-30 20:23 - 00000000 ____D C:\ProgramData\AVAST Software

2013-11-05 17:27 - 2011-03-30 16:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-04 22:28 - 2012-04-10 19:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Dropbox

2013-11-04 22:26 - 2012-04-10 19:47 - 00000000 ___RD C:\Users\SVEN\Dropbox

2013-10-30 23:29 - 2012-05-01 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-30 21:29 - 2013-10-30 21:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 20:27 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:25 - 2013-08-12 18:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:17 - 2013-10-30 20:16 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:11 - 2013-10-30 20:10 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-30 19:39 - 2011-06-08 21:21 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Skype

2013-10-23 19:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-10-21 08:52 - 2013-10-21 08:52 - 00011214 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-10-20 19:07 - 2011-03-30 15:02 - 00000000 ____D C:\Users\SVEN\Desktop\Svens Ordner

2013-10-20 18:59 - 2011-04-03 15:51 - 00000000 ____D C:\Windows\Minidump

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-10-17 13:55 - 2011-06-08 21:21 - 00000000 ____D C:\ProgramData\Skype

2013-10-17 13:47 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-16 11:50 - 2012-04-03 14:02 - 00000000 ____D C:\Users\SVEN\Desktop\Studium

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-14 14:31 - 2013-04-06 14:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-14 14:31 - 2013-04-06 14:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-13 14:09 - 2011-09-14 18:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\vlc

2013-10-13 13:59 - 2011-07-23 10:06 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\dvdcss
 

Some content of TEMP:

====================

C:\Users\SVEN\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-31 17:38
 

==================== End Of Log ============================

--- --- ---

Ich kann mich irren, aber ich meine das wäre auf dem Notebook vorinstalliert gewesen ohne das eine DVD dabei war, habe die tage schon gesucht aber nichts gefunden. Wegen der Reparaturfunktion?

Jap, ich würde gerne ein Inplace Upgrade machen. Kannste eine baugleiche leihen?

Inplace Upgrade ist gemacht, auf dem ersten Blick scheint alles wieder einbahnfrei zu funktionieren. Großen Dank auf jeden Fall erstmal! :daumenhoc:daumenhoc:daumenhoc

Sollte ich sicherheitshalber noch irgendwas machen?

Frisches FRST log bitte :)

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2013

Ran by SVEN (administrator) on SVEN-PC on 13-11-2013 19:47:59

Running from D:\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe

() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

(ATK) C:\Program Files\P4G\BatteryLife.exe

() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(ASUS) C:\Windows\AsScrPro.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

(Farbar) D:\Downloads\FRST64(1).exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\SVEN\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin [829832 2013-10-14] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-02] ()

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKU\UpdatusUser\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516096 2010-11-21] (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll No File

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856

FF DefaultSearchEngine: Amazon.de

FF SelectedSearchEngine: Amazon.de

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: fireftp - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi

FF Extension: Adblock Plus - C:\Users\SVEN\AppData\Roaming\Mozilla\Firefox\Profiles\k57o9m59.default-1382014060856\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2003) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (vShare.tv plug-in) - C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File

CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\SVEN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx
 

==================== Services (Whitelisted) =================
 

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-18] (CyberLink)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-03-20] ()

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [623200 2013-11-07] (Kaspersky Lab ZAO)

S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-03-20] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\Cyberlink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-12 23:47 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-11-12 23:42 - 2013-11-12 23:42 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-12 23:42 - 2013-11-12 23:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-12 23:42 - 2013-11-12 23:42 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-12 23:42 - 2013-11-12 23:42 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-12 23:42 - 2013-11-12 23:42 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-12 23:42 - 2013-11-12 23:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-12 23:42 - 2013-11-12 23:42 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-12 23:42 - 2013-11-12 23:42 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-12 23:42 - 2013-11-12 23:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-12 23:42 - 2013-11-12 23:42 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-12 23:42 - 2013-11-12 23:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-12 23:41 - 2013-11-12 23:47 - 00010923 _____ C:\Windows\IE11_main.log

2013-11-12 23:41 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2013-11-12 23:41 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2013-11-12 23:41 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2013-11-12 23:41 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2013-11-12 23:41 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2013-11-12 23:41 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2013-11-12 23:41 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2013-11-12 23:41 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2013-11-12 23:41 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2013-11-12 23:41 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2013-11-12 23:41 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2013-11-12 23:41 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2013-11-12 23:41 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2013-11-12 23:41 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2013-11-12 23:41 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2013-11-12 23:41 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2013-11-12 23:41 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2013-11-12 23:41 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2013-11-12 23:40 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2013-11-12 23:40 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2013-11-12 23:40 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2013-11-12 23:40 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2013-11-12 23:40 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2013-11-12 23:40 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2013-11-12 23:40 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2013-11-12 23:37 - 2013-01-13 22:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-11-12 23:37 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-11-12 23:37 - 2013-01-13 21:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2013-11-12 23:37 - 2013-01-13 21:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2013-11-12 23:37 - 2013-01-13 21:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2013-11-12 23:37 - 2013-01-13 21:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2013-11-12 23:37 - 2013-01-13 20:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-11-12 23:37 - 2013-01-13 20:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-11-12 23:37 - 2013-01-13 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-11-12 23:37 - 2013-01-13 20:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2013-11-12 23:37 - 2013-01-13 20:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2013-11-12 23:37 - 2013-01-13 20:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-11-12 23:37 - 2013-01-13 20:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2013-11-12 23:37 - 2013-01-13 20:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2013-11-12 23:37 - 2013-01-13 20:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2013-11-12 23:37 - 2013-01-13 20:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-11-12 23:37 - 2013-01-13 20:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-11-12 23:37 - 2013-01-13 20:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-11-12 23:37 - 2013-01-13 20:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2013-11-12 23:37 - 2013-01-13 20:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2013-11-12 23:37 - 2013-01-13 20:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-11-12 23:37 - 2013-01-13 20:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2013-11-12 23:37 - 2013-01-13 20:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-11-12 23:37 - 2013-01-13 20:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-11-12 23:37 - 2013-01-13 20:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-11-12 23:37 - 2013-01-13 20:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-11-12 23:37 - 2013-01-13 20:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-12 23:37 - 2013-01-13 19:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-11-12 23:37 - 2013-01-13 19:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-12 23:37 - 2013-01-13 19:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-11-12 23:37 - 2013-01-13 18:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-11-12 23:37 - 2013-01-13 18:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-11-12 23:37 - 2013-01-04 07:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2013-11-12 23:37 - 2013-01-04 07:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2013-11-12 23:36 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2013-11-12 23:36 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2013-11-12 23:36 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2013-11-12 23:36 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2013-11-12 22:53 - 2013-11-12 22:53 - 00000000 ____D C:\Windows\PCHEALTH

2013-11-12 22:36 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe

2013-11-12 22:09 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-11-12 22:09 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-11-12 22:09 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-11-12 22:09 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-11-12 22:09 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-11-12 22:09 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-11-12 22:09 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-11-12 22:09 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-11-12 21:51 - 2013-11-07 16:00 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-12 21:33 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2013-11-12 21:33 - 2012-03-01 07:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-11-12 21:33 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2013-11-12 21:33 - 2012-03-01 06:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-11-12 21:33 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 20465256 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 15051368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 13076328 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2013-11-12 21:28 - 2011-06-05 07:22 - 12842600 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 10061416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 08106088 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 06029928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 03182184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 02954856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 02579560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 01970280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00764008 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00645736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00391784 _____ (NVIDIA Corporation) C:\Windows\system32\nvdecodemft.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00320104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdecodemft.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00226920 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00193128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00067176 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00057960 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2013-11-12 21:28 - 2011-06-05 07:22 - 00011240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd

2013-11-12 21:27 - 2011-06-05 07:22 - 18580072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2013-11-12 21:27 - 2011-06-05 07:22 - 13011560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2013-11-12 21:27 - 2011-06-05 07:22 - 06597736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2013-11-12 21:27 - 2011-06-05 07:22 - 04936808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2013-11-12 21:27 - 2011-06-05 07:22 - 02871400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2013-11-12 21:11 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-11-12 21:11 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-11-12 21:11 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-11-12 21:11 - 2012-11-30 00:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls

2013-11-12 21:11 - 2012-11-30 00:15 - 00420064 _____ C:\Windows\system32\locale.nls

2013-11-12 21:10 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-11-12 21:10 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-11-12 21:10 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-11-12 21:10 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-11-12 21:10 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-11-12 21:10 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-11-12 21:10 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-11-12 21:10 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-11-12 21:10 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-11-12 21:10 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-11-12 21:10 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-11-12 21:10 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-11-12 21:10 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-11-12 21:10 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2013-11-12 21:10 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2013-11-12 21:10 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2013-11-12 21:10 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2013-11-12 21:10 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2013-11-12 21:10 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2013-11-12 21:10 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll

2013-11-12 21:10 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2013-11-12 21:10 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll

2013-11-12 21:10 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-11-12 21:10 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2013-11-12 21:09 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-11-12 21:09 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-11-12 21:09 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-11-12 21:09 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-11-12 21:09 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-11-12 21:09 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-11-12 21:09 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2013-11-12 21:08 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-11-12 21:08 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-11-12 21:08 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2013-11-12 21:08 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-11-12 21:08 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-11-12 21:08 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-11-12 21:08 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-11-12 21:08 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-11-12 21:08 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2013-11-12 21:08 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-11-12 21:08 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2013-11-12 21:08 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-11-12 21:08 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-11-12 21:08 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-11-12 21:08 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-11-12 21:08 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-11-12 21:08 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-11-12 21:08 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-11-12 21:08 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-11-12 21:08 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-11-12 21:08 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-11-12 21:08 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-11-12 21:07 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2013-11-12 21:07 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-11-12 21:07 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-11-12 21:07 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-11-12 21:06 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-11-12 21:06 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-11-12 21:06 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-11-12 21:06 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-11-12 21:06 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-11-12 21:06 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-11-12 21:06 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2013-11-12 21:06 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2013-11-12 21:06 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2013-11-12 21:06 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2013-11-12 21:06 - 2012-08-22 19:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2013-11-12 21:06 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2013-11-12 21:06 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2013-11-12 21:06 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll

2013-11-12 21:06 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll

2013-11-12 21:05 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-11-12 21:05 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-11-12 21:05 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-11-12 21:05 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-11-12 21:05 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-11-12 21:05 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-11-12 21:05 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-11-12 21:05 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-11-12 21:05 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-11-12 21:05 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-11-12 21:05 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2013-11-12 21:05 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2013-11-12 21:04 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-12 21:04 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-11-12 21:04 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-11-12 21:04 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-11-12 21:04 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-11-12 21:04 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2013-11-12 21:04 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-11-12 21:04 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-11-12 21:04 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-11-12 21:04 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-11-12 21:04 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-11-12 21:04 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-11-12 21:04 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-11-12 21:04 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-11-12 21:04 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-11-12 21:04 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-11-12 21:04 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-11-12 21:04 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-11-12 21:04 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-11-12 21:04 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-11-12 21:04 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2013-11-12 21:04 - 2012-11-01 06:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2013-11-12 21:04 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2013-11-12 21:04 - 2012-11-01 05:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2013-11-12 21:04 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2013-11-12 21:04 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2013-11-12 21:04 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2013-11-12 21:04 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2013-11-12 21:04 - 2012-08-11 01:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2013-11-12 21:04 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-11-12 21:04 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2013-11-12 21:04 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll

2013-11-12 21:04 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-11-12 21:04 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-11-12 21:04 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2013-11-12 21:04 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll

2013-11-12 21:04 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-11-12 21:04 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-11-12 21:04 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-11-12 21:04 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-11-12 21:04 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-11-12 21:04 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-11-12 21:04 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-11-12 21:04 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-11-12 21:04 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-11-12 21:04 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-11-12 21:04 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-11-12 21:04 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-11-12 21:04 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-11-12 21:04 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-11-12 21:04 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-11-12 21:04 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-11-12 21:04 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-11-12 21:04 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-11-12 21:04 - 2010-06-26 04:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2013-11-12 21:04 - 2010-06-26 04:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2013-11-12 21:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-11-12 21:03 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-11-12 21:03 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-11-12 21:03 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-11-12 21:03 - 2013-07-19 02:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-11-12 21:03 - 2013-07-19 02:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-11-12 21:03 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-11-12 21:03 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-11-12 21:03 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-11-12 21:03 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-11-12 21:03 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-11-12 21:03 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-11-12 21:03 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-11-12 21:03 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-11-12 21:03 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-11-12 21:03 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-11-12 21:03 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-11-12 21:03 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-11-12 21:03 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2013-11-12 21:03 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2013-11-12 21:03 - 2012-04-07 13:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-11-12 21:03 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-11-12 21:03 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2013-11-12 21:03 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll

2013-11-12 21:03 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2013-11-12 21:03 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2013-11-12 21:03 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-11-12 21:03 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2013-11-12 21:03 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-11-12 21:03 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll

2013-11-12 21:03 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2013-11-12 21:03 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll

2013-11-12 21:03 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll

2013-11-12 21:03 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll

2013-11-12 21:03 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2013-11-12 21:03 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2013-11-12 21:03 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2013-11-12 21:03 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2013-11-12 21:02 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-11-12 21:02 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2013-11-12 21:02 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2013-11-12 21:02 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-11-12 21:02 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-11-12 21:02 - 2012-11-28 23:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-11-12 21:02 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-11-12 21:02 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-11-12 21:02 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-11-12 21:02 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2013-11-12 21:02 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2013-11-12 21:02 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2013-11-12 21:02 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2013-11-12 21:02 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2013-11-12 21:02 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2013-11-12 21:02 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll

2013-11-12 21:02 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll

2013-11-12 21:02 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2013-11-12 21:02 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2013-11-12 21:02 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2013-11-12 21:02 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2013-11-12 21:02 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2013-11-12 21:02 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2013-11-12 21:02 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll

2013-11-12 21:02 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll

2013-11-12 21:02 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax

2013-11-12 21:01 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-11-12 21:01 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-11-12 21:01 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-11-12 21:01 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-11-12 21:01 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-11-12 21:01 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-11-12 21:01 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-11-12 21:01 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2013-11-12 21:01 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-11-12 21:01 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-11-12 21:01 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2013-11-12 21:01 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2013-11-12 21:01 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2013-11-12 21:01 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2013-11-12 21:01 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2013-11-12 21:01 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2013-11-12 21:01 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2013-11-12 21:01 - 2012-04-26 06:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2013-11-12 21:01 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2013-11-12 21:01 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2013-11-12 21:01 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2013-11-12 21:01 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll

2013-11-12 21:01 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2013-11-12 21:01 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2013-11-12 21:01 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll

2013-11-12 21:01 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax

2013-11-12 21:00 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-11-12 21:00 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-11-12 21:00 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-11-12 21:00 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2013-11-12 21:00 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-11-12 21:00 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-11-12 21:00 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-11-12 21:00 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-11-12 21:00 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-11-12 21:00 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-11-12 21:00 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-11-12 21:00 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-11-12 21:00 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2013-11-12 21:00 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2013-11-12 21:00 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2013-11-12 21:00 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-11-12 21:00 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-11-12 21:00 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2013-11-12 21:00 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2013-11-12 21:00 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-11-12 21:00 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-11-12 21:00 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-11-12 21:00 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2013-11-12 21:00 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2013-11-12 21:00 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2013-11-12 21:00 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2013-11-12 21:00 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll

2013-11-12 21:00 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll

2013-11-12 21:00 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll

2013-11-12 21:00 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll

2013-11-12 21:00 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll

2013-11-12 21:00 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2013-11-12 21:00 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2013-11-12 21:00 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2013-11-12 21:00 - 2011-04-22 23:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-11-12 21:00 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2013-11-12 21:00 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2013-11-12 21:00 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2013-11-12 21:00 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2013-11-12 21:00 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2013-11-12 21:00 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2013-11-12 21:00 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe

2013-11-12 21:00 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2013-11-12 21:00 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-11-12 21:00 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-11-12 21:00 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2013-11-12 20:59 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-11-12 20:59 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-11-12 20:59 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-11-12 20:59 - 2012-04-28 04:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2013-11-12 20:45 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2013-11-12 20:45 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2013-11-12 20:40 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2013-11-12 20:40 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2013-11-12 20:40 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2013-11-12 20:34 - 2013-11-12 20:36 - 01589182 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-12 20:33 - 2013-11-12 20:33 - 00090976 _____ C:\Users\SVEN\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-12 20:28 - 2013-11-13 19:34 - 00001427 _____ C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-12 20:25 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-11-12 20:25 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-11-12 20:25 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-11-12 20:25 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-11-12 20:25 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2013-11-12 20:25 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-11-12 20:25 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-11-12 20:25 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-11-12 20:25 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-11-12 20:24 - 2013-11-12 20:24 - 00000020 ___SH C:\Users\SVEN\ntuser.ini

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Programme

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Dokumente und Einstellungen

2013-11-12 20:18 - 2013-11-13 19:37 - 01176908 _____ C:\Windows\WindowsUpdate.log

2013-11-12 20:06 - 2013-11-12 20:06 - 00022960 _____ C:\Windows\system32\emptyregdb.dat

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-11-12 18:54 - 2013-11-12 20:24 - 00000000 ____D C:\Users\SVEN

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Vorlagen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Startmenü

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Netzwerkumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Lokale Einstellungen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Eigene Dateien

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Druckumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Documents\Eigene Musik

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Documents\Eigene Bilder

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\AppData\Local\Verlauf

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\AppData\Local\Anwendungsdaten

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Anwendungsdaten

2013-11-12 18:54 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-11-12 18:54 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-11-12 18:54 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-11-12 18:54 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-11-12 18:53 - 2013-11-12 18:53 - 00001355 _____ C:\Windows\TSSysprep.log

2013-11-12 18:52 - 2013-11-12 22:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2013-11-12 18:52 - 2013-11-12 22:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-11-12 18:52 - 2013-11-12 19:14 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Windows\system32\SRSLabs

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Program Files\Realtek

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Program Files\Elantech

2013-11-12 18:48 - 2013-11-12 20:24 - 00000000 ____D C:\Windows\Panther

2013-11-12 18:45 - 2013-11-12 18:45 - 00262144 _____ C:\Windows\system32\config\userdiff

2013-11-12 18:34 - 2013-11-12 20:07 - 00000000 ___HD C:\$WINDOWS.~Q

2013-11-12 18:22 - 2013-11-12 18:29 - 00000000 ___HD C:\$INPLACE.~TR

2013-11-12 17:22 - 2013-11-12 20:07 - 00006084 _____ C:\Windows\comsetup.log

2013-11-12 17:18 - 2013-11-12 17:18 - 00005636 _____ C:\Users\SVEN\Desktop\Windows-Kompatibilitätsbericht.htm

2013-11-12 17:13 - 2013-11-12 17:13 - 00002544 _____ C:\Windows\diagwrn.xml

2013-11-12 17:13 - 2013-11-12 17:13 - 00001890 _____ C:\Windows\diagerr.xml

2013-11-12 16:26 - 2013-11-12 19:53 - 00000000 ____D C:\Users\SVEN\Desktop\Neuer Ordner

2013-11-09 14:57 - 2013-11-12 19:53 - 00000000 ____D C:\Users\SVEN\Desktop\mibi

2013-11-09 13:51 - 2013-11-09 13:51 - 00047220 _____ C:\Users\SVEN\Desktop\FRST.txt

2013-11-08 14:04 - 2013-11-08 14:32 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE

2013-11-08 14:00 - 2013-11-08 14:00 - 00000207 _____ C:\Windows\tweaking.com-regbackup-SVEN-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat

2013-11-08 13:58 - 2013-11-08 13:58 - 00000000 ____D C:\RegBackup

2013-11-08 13:07 - 2013-11-12 19:54 - 00000000 ____D C:\Users\SVEN\Desktop\Tweaking.com - Windows Repair

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:16 - 2013-11-06 13:51 - 00000000 ____D C:\ComboFix

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:17 - 2013-11-12 19:19 - 00000000 ____D C:\Windows\ERUNT

2013-11-05 21:09 - 2013-11-06 21:03 - 00000000 ____D C:\AdwCleaner

2013-11-05 20:39 - 2013-11-05 21:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 20:38 - 2013-11-12 19:53 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 18:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-11-05 18:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-11-05 18:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-11-05 18:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-11-05 18:40 - 2013-11-06 13:51 - 00000000 ____D C:\Qoobox

2013-11-05 18:07 - 2013-11-12 19:47 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-05 18:07 - 2013-11-12 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-05 18:07 - 2013-11-12 19:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-05 18:07 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-11-05 17:24 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2013-11-05 17:23 - 2013-11-13 19:41 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-05 17:23 - 2013-11-12 19:19 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-05 17:23 - 2013-11-12 19:11 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-05 17:23 - 2013-11-07 10:50 - 00623200 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-05 17:23 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2013-10-30 21:28 - 2013-11-12 19:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-30 20:27 - 2013-11-12 19:47 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:23 - 2013-11-12 19:17 - 00000000 ____D C:\ProgramData\AVAST Software

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:16 - 2013-10-30 20:17 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:10 - 2013-10-30 20:11 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-25 16:59 - 2013-10-25 17:00 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-17 15:47 - 2013-11-07 10:50 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-17 13:47 - 2013-11-12 19:50 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-10-14 14:31 - 2013-11-12 23:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

Code:

==================== One Month Modified Files and Folders =======
 

2013-11-13 19:42 - 2013-11-12 20:18 - 01176908 _____ C:\Windows\WindowsUpdate.log

2013-11-13 19:41 - 2013-11-05 17:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-11-13 19:39 - 2011-04-12 08:43 - 00696370 _____ C:\Windows\system32\perfh007.dat

2013-11-13 19:39 - 2011-04-12 08:43 - 00147634 _____ C:\Windows\system32\perfc007.dat

2013-11-13 19:39 - 2009-07-14 06:13 - 01611160 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-13 19:34 - 2013-11-12 20:28 - 00001427 _____ C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-13 19:34 - 2010-11-02 20:43 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-13 19:33 - 2012-07-18 15:28 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002UA.job

2013-11-13 19:33 - 2009-07-14 05:51 - 00541543 _____ C:\Windows\setupact.log

2013-11-13 19:33 - 2009-07-14 05:45 - 00018336 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-13 19:33 - 2009-07-14 05:45 - 00018336 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-13 19:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-12 23:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK

2013-11-12 23:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR

2013-11-12 23:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK

2013-11-12 23:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR

2013-11-12 23:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-11-12 23:47 - 2013-11-12 23:41 - 00010923 _____ C:\Windows\IE11_main.log

2013-11-12 23:42 - 2013-11-12 23:42 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-12 23:42 - 2013-11-12 23:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-12 23:42 - 2013-11-12 23:42 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-12 23:42 - 2013-11-12 23:42 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-12 23:42 - 2013-11-12 23:42 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-12 23:42 - 2013-11-12 23:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-12 23:42 - 2013-11-12 23:42 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-12 23:42 - 2013-11-12 23:42 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-12 23:42 - 2013-11-12 23:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-12 23:42 - 2013-11-12 23:42 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-12 23:42 - 2013-11-12 23:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-12 23:42 - 2013-11-12 23:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-12 23:42 - 2013-11-12 23:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-12 23:27 - 2011-03-30 13:23 - 00000000 ___RD C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-11-12 23:27 - 2011-03-30 13:23 - 00000000 ___RD C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-11-12 23:27 - 2010-11-02 20:43 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-12 23:26 - 2009-07-14 05:45 - 02281992 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-12 23:18 - 2011-04-12 08:55 - 00000000 ____D C:\Program Files\Windows Journal

2013-11-12 23:18 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender

2013-11-12 23:18 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2013-11-12 23:18 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System

2013-11-12 23:06 - 2011-03-31 10:19 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-11-12 23:01 - 2013-10-14 14:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-12 22:53 - 2013-11-12 22:53 - 00000000 ____D C:\Windows\PCHEALTH

2013-11-12 22:36 - 2013-11-12 18:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2013-11-12 22:36 - 2013-11-12 18:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-11-12 22:02 - 2013-09-16 15:27 - 00000000 ____D C:\Windows\system32\MRT

2013-11-12 21:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help

2013-11-12 21:33 - 2010-11-02 20:55 - 00000000 ____D C:\ProgramData\NVIDIA

2013-11-12 20:36 - 2013-11-12 20:34 - 01589182 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-12 20:33 - 2013-11-12 20:33 - 00090976 _____ C:\Users\SVEN\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-12 20:29 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries

2013-11-12 20:25 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore

2013-11-12 20:24 - 2013-11-12 20:24 - 00000020 ___SH C:\Users\SVEN\ntuser.ini

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Programme

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-11-12 20:24 - 2013-11-12 20:24 - 00000000 _SHDL C:\Dokumente und Einstellungen

2013-11-12 20:24 - 2013-11-12 18:54 - 00000000 ____D C:\Users\SVEN

2013-11-12 20:24 - 2013-11-12 18:48 - 00000000 ____D C:\Windows\Panther

2013-11-12 20:24 - 2009-07-29 06:10 - 00000000 ____D C:\Recovery

2013-11-12 20:24 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-11-12 20:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Recovery

2013-11-12 20:24 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT

2013-11-12 20:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-12 20:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe

2013-11-12 20:07 - 2013-11-12 18:34 - 00000000 ___HD C:\$WINDOWS.~Q

2013-11-12 20:07 - 2013-11-12 17:22 - 00006084 _____ C:\Windows\comsetup.log

2013-11-12 20:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Registration

2013-11-12 20:06 - 2013-11-12 20:06 - 00022960 _____ C:\Windows\system32\emptyregdb.dat

2013-11-12 20:01 - 2011-03-31 10:21 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2013-11-12 20:01 - 2011-03-30 20:05 - 00000000 ____D C:\Windows\System32\Tasks\Games

2013-11-12 19:58 - 2010-11-21 04:47 - 00005406 _____ C:\Windows\PFRO.log

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-11-12 19:57 - 2013-11-12 19:57 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-11-12 19:57 - 2013-04-09 17:54 - 00000744 _____ C:\Windows\COD.INI

2013-11-12 19:57 - 2009-07-14 05:46 - 00005157 _____ C:\Windows\DtcInstall.log

2013-11-12 19:57 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-11-12 19:57 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-11-12 19:57 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-11-12 19:57 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-11-12 19:54 - 2013-11-08 13:07 - 00000000 ____D C:\Users\SVEN\Desktop\Tweaking.com - Windows Repair

2013-11-12 19:54 - 2013-09-25 09:21 - 00000000 ____D C:\Users\SVEN\Desktop\Zahn

2013-11-12 19:54 - 2013-02-11 22:14 - 00000000 ____D C:\Users\SVEN\MediathekView

2013-11-12 19:54 - 2012-06-25 19:38 - 00000000 ____D C:\Users\SVEN\Documents\samsung

2013-11-12 19:54 - 2012-04-11 22:31 - 00000000 ____D C:\Users\SVEN\Documents\gegl-0.0

2013-11-12 19:54 - 2012-04-11 06:10 - 00000000 ____D C:\Users\SVEN\Documents\StreamTransport

2013-11-12 19:54 - 2012-04-10 19:47 - 00000000 ___RD C:\Users\SVEN\Dropbox

2013-11-12 19:54 - 2012-04-03 14:02 - 00000000 ____D C:\Users\SVEN\Desktop\Studium

2013-11-12 19:54 - 2012-03-18 00:47 - 00000000 ____D C:\Users\SVEN\Documents\EA Games

2013-11-12 19:54 - 2011-10-25 18:34 - 00000000 ____D C:\Users\SVEN\Documents\Version Cue

2013-11-12 19:54 - 2011-10-25 18:34 - 00000000 ____D C:\Users\SVEN\Documents\AdobeStockPhotos

2013-11-12 19:54 - 2011-10-11 17:59 - 00000000 ____D C:\Users\SVEN\Documents\Fax

2013-11-12 19:54 - 2011-04-13 15:28 - 00000000 ____D C:\Users\SVEN\Documents\ASUS

2013-11-12 19:54 - 2011-04-10 17:04 - 00000000 ___SD C:\Users\SVEN\Documents\Meine Websites

2013-11-12 19:54 - 2011-04-01 16:09 - 00000000 ____D C:\Users\SVEN\Documents\CyberLink

2013-11-12 19:54 - 2011-03-30 15:02 - 00000000 ____D C:\Users\SVEN\Desktop\Svens Ordner

2013-11-12 19:54 - 2011-03-30 14:35 - 00000000 ____D C:\Users\SVEN\Desktop\Software

2013-11-12 19:54 - 2010-11-02 20:54 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite

2013-11-12 19:54 - 2010-11-02 20:54 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-11-12 19:53 - 2013-11-12 16:26 - 00000000 ____D C:\Users\SVEN\Desktop\Neuer Ordner

2013-11-12 19:53 - 2013-11-09 14:57 - 00000000 ____D C:\Users\SVEN\Desktop\mibi

2013-11-12 19:53 - 2013-11-05 20:38 - 00000000 ____D C:\Users\SVEN\Desktop\mbar

2013-11-12 19:53 - 2011-03-31 10:34 - 00000000 ____D C:\Users\SVEN\Desktop\Homepages

2013-11-12 19:50 - 2013-10-17 13:47 - 00000000 ____D C:\Users\SVEN\Desktop\Alte Firefox-Daten

2013-11-12 19:50 - 2013-03-20 10:26 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\TeamViewer

2013-11-12 19:50 - 2012-03-20 14:30 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Ubisoft

2013-11-12 19:50 - 2011-09-14 18:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\vlc

2013-11-12 19:50 - 2011-07-14 16:12 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Telefónica

2013-11-12 19:50 - 2011-06-08 21:22 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\skypePM

2013-11-12 19:50 - 2011-03-30 18:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Thunderbird

2013-11-12 19:50 - 2011-03-30 18:22 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\WinRAR

2013-11-12 19:50 - 2011-03-30 16:52 - 00000000 ____D C:\Users\SVEN\CDBurnerXP Projects

2013-11-12 19:49 - 2013-07-03 18:25 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\ratiopharm2012

2013-11-12 19:49 - 2012-06-25 19:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Samsung

2013-11-12 19:49 - 2012-04-09 10:29 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Sinvise Systems

2013-11-12 19:49 - 2011-06-08 21:21 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Skype

2013-11-12 19:48 - 2013-07-03 18:39 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\ratiopharm

2013-11-12 19:48 - 2013-02-13 19:54 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Opera

2013-11-12 19:48 - 2012-12-27 23:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\ProgSense

2013-11-12 19:48 - 2012-12-27 23:30 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Orbit

2013-11-12 19:48 - 2012-03-18 00:54 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\NVIDIA

2013-11-12 19:48 - 2011-05-20 12:42 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\PlayFirst

2013-11-12 19:48 - 2011-03-30 15:50 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Mozilla

2013-11-12 19:47 - 2013-11-05 18:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Malwarebytes

2013-11-12 19:47 - 2013-10-30 20:27 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\AVAST Software

2013-11-12 19:47 - 2013-07-03 18:48 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ratiopharm

2013-11-12 19:47 - 2013-05-22 21:48 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\2K Sports

2013-11-12 19:47 - 2013-05-22 21:37 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Google

2013-11-12 19:47 - 2013-04-29 17:32 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Audacity

2013-11-12 19:47 - 2013-04-09 17:54 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty

2013-11-12 19:47 - 2012-11-24 12:42 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\DivX

2013-11-12 19:47 - 2012-05-26 16:13 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\DigitalDJ17

2013-11-12 19:47 - 2012-05-26 16:07 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2

2013-11-12 19:47 - 2012-05-26 16:06 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAGIX

2013-11-12 19:47 - 2012-04-11 22:37 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\gtk-2.0

2013-11-12 19:47 - 2012-04-10 19:44 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2013-11-12 19:47 - 2012-04-10 19:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Dropbox

2013-11-12 19:47 - 2012-03-03 19:49 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2013-11-12 19:47 - 2012-03-01 21:04 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2013-11-12 19:47 - 2012-01-26 17:12 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\LolClient

2013-11-12 19:47 - 2011-11-10 08:14 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Apple Computer

2013-11-12 19:47 - 2011-09-14 19:36 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Media Player Classic

2013-11-12 19:47 - 2011-08-13 09:54 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Guitar Pro

2013-11-12 19:47 - 2011-08-13 09:53 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Guitar Pro 6

2013-11-12 19:47 - 2011-07-23 10:06 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\dvdcss

2013-11-12 19:47 - 2011-06-07 05:38 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Canneverbe Limited

2013-11-12 19:47 - 2011-05-18 11:01 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2013-11-12 19:47 - 2011-04-04 16:26 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Leadertech

2013-11-12 19:47 - 2011-04-01 16:09 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\CyberLink

2013-11-12 19:47 - 2011-03-30 19:24 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Deutscher Apotheker Verlag (Deutscher Apotheker Verlag)

2013-11-12 19:47 - 2011-03-30 19:24 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Deutscher Apotheker Verlag

2013-11-12 19:47 - 2011-03-30 19:04 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\doctronic

2013-11-12 19:47 - 2011-03-30 18:22 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-11-12 19:47 - 2011-03-30 18:17 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\DAEMON Tools Lite

2013-11-12 19:47 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Macromedia

2013-11-12 19:47 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Adobe

2013-11-12 19:47 - 2011-03-30 13:24 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Intel

2013-11-12 19:47 - 2011-03-30 13:24 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Asus WebStorage

2013-11-12 19:47 - 2011-03-30 13:16 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite

2013-11-12 19:47 - 2011-03-30 13:16 - 00000000 ____D C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic

2013-11-12 19:46 - 2013-02-13 19:54 - 00000000 ____D C:\Users\SVEN\AppData\Local\Opera

2013-11-12 19:46 - 2012-06-25 19:39 - 00000000 ____D C:\Users\SVEN\AppData\Local\Samsung

2013-11-12 19:46 - 2012-03-01 21:04 - 00000000 ____D C:\Users\SVEN\AppData\Local\TeamSpeak 3 Client

2013-11-12 19:46 - 2012-01-15 22:22 - 00000000 ____D C:\Users\SVEN\AppData\Local\PMB Files

2013-11-12 19:46 - 2011-06-11 17:48 - 00000000 ____D C:\Users\SVEN\AppData\Local\Macromedia

2013-11-12 19:46 - 2011-03-31 10:19 - 00000000 ____D C:\Users\SVEN\AppData\Local\Microsoft Help

2013-11-12 19:46 - 2011-03-30 20:06 - 00000000 ____D C:\Users\SVEN\AppData\Local\Microsoft Games

2013-11-12 19:46 - 2011-03-30 16:09 - 00000000 ____D C:\Users\SVEN\AppData\Local\Thunderbird

2013-11-12 19:46 - 2011-03-30 15:50 - 00000000 ____D C:\Users\SVEN\AppData\Local\Mozilla

2013-11-12 19:46 - 2011-03-30 13:24 - 00000000 ____D C:\Users\SVEN\AppData\Local\SRS Labs

2013-11-12 19:46 - 2011-03-30 13:17 - 00000000 ____D C:\Users\SVEN\AppData\Local\VirtualStore

2013-11-12 19:46 - 2011-03-30 13:17 - 00000000 ____D C:\Users\SVEN\AppData\Local\Power2Go

2013-11-12 19:45 - 2013-07-24 20:03 - 00000000 ____D C:\Users\SVEN\AppData\Local\Akamai

2013-11-12 19:45 - 2013-05-27 16:49 - 00000000 ____D C:\Users\SVEN\AppData\Local\FreeOCR

2013-11-12 19:45 - 2013-02-11 21:58 - 00000000 ____D C:\Users\SVEN\.mediathek3

2013-11-12 19:45 - 2012-12-28 00:42 - 00000000 ____D C:\Users\SVEN\AppData\Local\FFsplit

2013-11-12 19:45 - 2012-11-24 12:44 - 00000000 ____D C:\Users\SVEN\AppData\Local\DDMSettings

2013-11-12 19:45 - 2012-07-18 15:27 - 00000000 ____D C:\Users\SVEN\AppData\Local\Facebook

2013-11-12 19:45 - 2012-04-11 22:33 - 00000000 ____D C:\Users\SVEN\.thumbnails

2013-11-12 19:45 - 2012-04-11 22:31 - 00000000 ____D C:\Users\SVEN\.gimp-2.6

2013-11-12 19:45 - 2012-04-11 22:13 - 00000000 ____D C:\Users\SVEN\AppData\Local\Apple Computer

2013-11-12 19:45 - 2012-02-27 17:03 - 00000000 ____D C:\Users\SVEN\AppData\Local\HP

2013-11-12 19:45 - 2011-11-09 22:10 - 00000000 ____D C:\Users\SVEN\AppData\Local\Apple

2013-11-12 19:45 - 2011-05-23 19:08 - 00000000 ____D C:\Users\SVEN\.chili

2013-11-12 19:45 - 2011-04-13 15:28 - 00000000 ____D C:\Users\SVEN\AppData\Local\ASUS

2013-11-12 19:45 - 2011-04-02 14:22 - 00000000 ____D C:\Users\SVEN\AppData\Local\Downloaded Installations

2013-11-12 19:45 - 2011-04-01 16:09 - 00000000 ____D C:\Users\SVEN\AppData\Local\Cyberlink

2013-11-12 19:45 - 2011-03-30 19:24 - 00000000 ____D C:\Users\SVEN\AppData\Local\Deutscher Apotheker Verlag (Deutscher Apotheker Verlag)

2013-11-12 19:45 - 2011-03-30 17:36 - 00000000 ____D C:\Users\SVEN\AppData\Local\Adobe

2013-11-12 19:45 - 2011-03-30 13:34 - 00000000 ____D C:\Users\SVEN\AppData\Local\Google

2013-11-12 19:21 - 2013-02-20 13:59 - 00000000 ____D C:\Windows\system32\SPReview

2013-11-12 19:21 - 2013-02-20 13:58 - 00000000 ____D C:\Windows\system32\EventProviders

2013-11-12 19:21 - 2011-10-25 08:43 - 00000000 ____D C:\Windows\system32\Macromed

2013-11-12 19:21 - 2011-04-18 19:21 - 00000000 ____D C:\Windows\SysWOW64\spool

2013-11-12 19:21 - 2010-11-02 21:12 - 00000000 ____D C:\Windows\SysWOW64\ASUS_N_Series_Screensaver dir

2013-11-12 19:21 - 2010-11-02 20:45 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-11-12 19:21 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2013-11-12 19:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep

2013-11-12 19:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-11-12 19:20 - 2011-04-12 08:54 - 00000000 ____D C:\Windows\ShellNew

2013-11-12 19:19 - 2013-11-05 21:17 - 00000000 ____D C:\Windows\ERUNT

2013-11-12 19:19 - 2013-11-05 17:23 - 00000000 ____D C:\Windows\ELAMBKUP

2013-11-12 19:19 - 2012-09-21 11:44 - 00000000 ____D C:\Windows\erdnt

2013-11-12 19:19 - 2012-03-26 20:36 - 00000000 ____D C:\ProgramData\SlySoft

2013-11-12 19:19 - 2012-03-03 20:07 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-11-12 19:19 - 2011-06-08 21:22 - 00000000 ____D C:\ProgramData\Skype Extras

2013-11-12 19:19 - 2011-06-08 21:21 - 00000000 ____D C:\ProgramData\Skype

2013-11-12 19:19 - 2011-06-08 17:56 - 00000000 ____D C:\Windows\Downloaded Installations

2013-11-12 19:19 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-11-12 19:19 - 2011-04-03 13:44 - 00000000 ____D C:\ProgramData\Sun

2013-11-12 19:19 - 2011-04-01 16:09 - 00000000 ____D C:\Users\Public\CyberLink

2013-11-12 19:19 - 2011-03-30 13:23 - 00000000 ____D C:\Users\Public\Documents\eBay

2013-11-12 19:19 - 2010-11-02 20:44 - 00000000 ____D C:\Users\Public\Documents\ASUSAccess

2013-11-12 19:19 - 2009-07-29 06:20 - 00000000 ____D C:\Windows\Log

2013-11-12 19:19 - 2009-07-29 06:20 - 00000000 ____D C:\Windows\ASUS

2013-11-12 19:19 - 2009-07-29 06:20 - 00000000 ____D C:\Windows\ABLKSR

2013-11-12 19:19 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\DigitalLocker

2013-11-12 19:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME

2013-11-12 19:18 - 2013-11-05 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-12 19:18 - 2012-12-28 00:40 - 00000000 ____D C:\ProgramData\Package Cache

2013-11-12 19:18 - 2012-06-25 18:42 - 00000000 ____D C:\ProgramData\Samsung

2013-11-12 19:18 - 2012-05-01 19:50 - 00000000 ____D C:\ProgramData\Mozilla

2013-11-12 19:18 - 2012-01-15 22:22 - 00000000 ____D C:\ProgramData\PMB Files

2013-11-12 19:18 - 2011-06-08 17:57 - 00000000 ____D C:\ProgramData\Macromedia

2013-11-12 19:18 - 2011-05-20 12:42 - 00000000 ____D C:\ProgramData\PlayFirst

2013-11-12 19:18 - 2010-11-02 21:04 - 00000000 ____D C:\ProgramData\P4G

2013-11-12 19:18 - 2010-11-02 20:44 - 00000000 ____D C:\ProgramData\OberonGameConsole

2013-11-12 19:17 - 2013-10-30 20:23 - 00000000 ____D C:\ProgramData\AVAST Software

2013-11-12 19:17 - 2013-05-24 19:40 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-11-12 19:17 - 2012-11-24 12:38 - 00000000 ____D C:\ProgramData\DivX

2013-11-12 19:17 - 2012-03-18 00:47 - 00000000 __SHD C:\ProgramData\DSS

2013-11-12 19:17 - 2012-02-27 17:05 - 00000000 ____D C:\ProgramData\HP

2013-11-12 19:17 - 2011-12-13 20:36 - 00000000 ____D C:\Program Files (x86)\WinPcap

2013-11-12 19:17 - 2011-11-09 22:11 - 00000000 ____D C:\ProgramData\Apple Computer

2013-11-12 19:17 - 2011-11-09 22:10 - 00000000 ____D C:\ProgramData\Apple

2013-11-12 19:17 - 2011-10-25 18:34 - 00000000 ____D C:\ProgramData\FLEXnet

2013-11-12 19:17 - 2011-06-07 05:38 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2013-11-12 19:17 - 2011-04-13 15:28 - 00000000 ____D C:\ProgramData\ASUS

2013-11-12 19:17 - 2011-04-02 16:31 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-11-12 19:17 - 2011-03-30 19:10 - 00000000 ____D C:\ProgramData\Deutscher Apotheker Verlag

2013-11-12 19:17 - 2011-03-30 18:17 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-11-12 19:17 - 2011-03-30 16:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

2013-11-12 19:17 - 2010-11-02 21:01 - 00000000 ____D C:\ProgramData\AmUStor

2013-11-12 19:17 - 2010-11-02 20:59 - 00000000 ____D C:\ProgramData\Intel

2013-11-12 19:17 - 2010-11-02 20:43 - 00000000 ____D C:\ProgramData\GoBoingo

2013-11-12 19:17 - 2010-11-02 20:42 - 00000000 ____D C:\ProgramData\Adobe

2013-11-12 19:17 - 2010-11-02 20:25 - 00000000 ____D C:\ProgramData\CyberLink

2013-11-12 19:16 - 2013-04-26 17:13 - 00000000 ____D C:\Program Files (x86)\Steam

2013-11-12 19:16 - 2012-12-31 12:32 - 00000000 ____D C:\Program Files (x86)\TubeDigger

2013-11-12 19:16 - 2012-04-10 21:26 - 00000000 ____D C:\Program Files (x86)\StreamTransport

2013-11-12 19:16 - 2012-03-20 13:54 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-11-12 19:16 - 2012-03-03 19:49 - 00000000 ____D C:\Program Files (x86)\Trend Micro

2013-11-12 19:16 - 2011-03-31 19:18 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2013-11-12 19:16 - 2011-03-30 18:55 - 00000000 ____D C:\Program Files (x86)\Walter de Gruyter - Pschyrembel

2013-11-12 19:16 - 2011-03-30 13:19 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive

2013-11-12 19:16 - 2011-03-30 13:18 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-11-12 19:16 - 2010-11-02 20:45 - 00000000 ____D C:\Program Files (x86)\syncables

2013-11-12 19:14 - 2013-11-12 18:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-11-12 19:14 - 2013-10-30 21:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-12 19:14 - 2013-08-12 18:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-12 19:14 - 2013-02-13 19:54 - 00000000 ____D C:\Program Files (x86)\Opera

2013-11-12 19:14 - 2012-12-29 20:14 - 00000000 ____D C:\Program Files (x86)\SlySoft

2013-11-12 19:14 - 2012-10-28 15:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-11-12 19:14 - 2012-06-25 18:42 - 00000000 ____D C:\Program Files (x86)\Samsung

2013-11-12 19:14 - 2012-06-17 12:46 - 00000000 ____D C:\Program Files (x86)\Oracle

2013-11-12 19:14 - 2012-05-01 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-12 19:14 - 2012-01-15 22:22 - 00000000 ____D C:\Program Files (x86)\Pando Networks

2013-11-12 19:14 - 2011-11-09 22:11 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-11-12 19:14 - 2011-07-14 16:12 - 00000000 ____D C:\Program Files (x86)\o2

2013-11-12 19:14 - 2011-07-14 11:44 - 00000000 ____D C:\Program Files (x86)\Mobile Partner

2013-11-12 19:14 - 2011-06-08 21:21 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-11-12 19:14 - 2011-04-10 17:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Works

2013-11-12 19:14 - 2011-04-10 17:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio

2013-11-12 19:14 - 2011-03-31 10:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services

2013-11-12 19:14 - 2011-03-30 13:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework

2013-11-12 19:14 - 2011-03-30 13:20 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-11-12 19:14 - 2010-11-02 21:01 - 00000000 ____D C:\Program Files (x86)\NEC Electronics

2013-11-12 19:14 - 2010-11-02 20:56 - 00000000 ____D C:\Program Files (x86)\Realtek

2013-11-12 19:14 - 2010-11-02 20:47 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0

2013-11-12 19:14 - 2010-11-02 20:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-11-12 19:13 - 2011-05-18 10:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Games

2013-11-12 19:13 - 2011-03-31 10:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services

2013-11-12 19:12 - 2013-11-05 18:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-12 19:12 - 2012-06-25 18:43 - 00000000 ____D C:\Program Files (x86)\MarkAny

2013-11-12 19:12 - 2012-06-17 11:29 - 00000000 ____D C:\Program Files (x86)\Medieval Software

2013-11-12 19:12 - 2012-05-26 16:05 - 00000000 ____D C:\Program Files (x86)\MAGIX

2013-11-12 19:12 - 2011-06-08 17:57 - 00000000 ____D C:\Program Files (x86)\Macromedia

2013-11-12 19:11 - 2013-11-05 17:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-11-12 19:11 - 2011-09-14 18:34 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack

2013-11-12 19:11 - 2011-04-03 13:44 - 00000000 ____D C:\Program Files (x86)\JDownloader

2013-11-12 19:10 - 2013-05-24 19:15 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-11-12 19:10 - 2012-02-27 17:04 - 00000000 ____D C:\Program Files (x86)\HP

2013-11-12 19:10 - 2011-08-13 09:53 - 00000000 ____D C:\Program Files (x86)\Guitar Pro 6.1

2013-11-12 19:10 - 2011-04-03 13:44 - 00000000 ____D C:\Program Files (x86)\Java

2013-11-12 19:10 - 2010-11-02 21:07 - 00000000 ____D C:\Program Files (x86)\Intel Corporation

2013-11-12 19:10 - 2010-11-02 20:51 - 00000000 ____D C:\Program Files (x86)\Intel

2013-11-12 19:10 - 2010-11-02 20:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-11-12 19:09 - 2012-12-28 00:35 - 00000000 ____D C:\Program Files (x86)\FFsplit

2013-11-12 19:09 - 2012-11-24 12:39 - 00000000 ____D C:\Program Files (x86)\DivX

2013-11-12 19:09 - 2012-04-11 22:31 - 00000000 ____D C:\Program Files (x86)\GIMP-2.0

2013-11-12 19:09 - 2011-09-30 18:16 - 00000000 ____D C:\Program Files (x86)\Fifa 12

2013-11-12 19:09 - 2011-04-04 16:22 - 00000000 ____D C:\Program Files (x86)\EA Sports

2013-11-12 19:09 - 2011-03-30 19:05 - 00000000 ____D C:\Program Files (x86)\Europäisches Arzneibuch

2013-11-12 19:09 - 2011-03-30 19:03 - 00000000 ____D C:\Program Files (x86)\Govi

2013-11-12 19:09 - 2011-03-30 18:17 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite

2013-11-12 19:09 - 2010-11-02 21:10 - 00000000 ____D C:\Program Files (x86)\Downloaded Installations

2013-11-12 19:09 - 2010-11-02 20:43 - 00000000 ____D C:\Program Files (x86)\Google

2013-11-12 19:09 - 2010-11-02 20:25 - 00000000 ____D C:\Program Files (x86)\CyberLink

2013-11-12 19:03 - 2013-04-29 17:31 - 00000000 ____D C:\Program Files (x86)\Audacity

2013-11-12 19:03 - 2013-04-09 17:50 - 00000000 ____D C:\Program Files (x86)\Call of Duty

2013-11-12 19:03 - 2011-04-18 19:24 - 00000000 ____D C:\Program Files (x86)\Bonjour

2013-11-12 19:03 - 2010-11-02 20:43 - 00000000 ____D C:\Program Files (x86)\Boingo

2013-11-12 19:03 - 2010-11-02 20:43 - 00000000 ____D C:\Program Files (x86)\ASUS

2013-11-12 19:01 - 2013-05-24 19:38 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2013-11-12 19:01 - 2012-05-26 16:07 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2

2013-11-12 19:01 - 2010-11-02 21:01 - 00000000 ____D C:\Program Files (x86)\AmIcoSingLun

2013-11-12 19:00 - 2010-11-02 20:41 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-11-12 18:59 - 2013-05-22 21:06 - 00000000 ____D C:\Program Files (x86)\2K Sports

2013-11-12 18:59 - 2011-03-30 18:22 - 00000000 ____D C:\Program Files\WinRAR

2013-11-12 18:58 - 2013-05-24 19:40 - 00000000 ____D C:\Program Files\iTunes

2013-11-12 18:58 - 2013-05-24 19:40 - 00000000 ____D C:\Program Files\iPod

2013-11-12 18:58 - 2013-05-24 19:38 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-11-12 18:58 - 2013-05-24 19:37 - 00000000 ____D C:\Program Files\Bonjour

2013-11-12 18:58 - 2012-12-30 14:19 - 00000000 ____D C:\Program Files\VideoLAN

2013-11-12 18:58 - 2012-11-24 12:41 - 00000000 ____D C:\Program Files\DivX

2013-11-12 18:58 - 2012-10-28 15:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-11-12 18:58 - 2012-10-28 15:50 - 00000000 ____D C:\Program Files\Java

2013-11-12 18:58 - 2012-04-09 10:29 - 00000000 ____D C:\Program Files\Sinvise Systems

2013-11-12 18:58 - 2012-02-27 17:04 - 00000000 ____D C:\Program Files\HP

2013-11-12 18:58 - 2012-01-02 17:07 - 00000000 ____D C:\Program Files\Recuva

2013-11-12 18:58 - 2011-06-07 05:37 - 00000000 ____D C:\Program Files\CDBurnerXP

2013-11-12 18:58 - 2011-03-31 10:20 - 00000000 ____D C:\Program Files\Microsoft Office

2013-11-12 18:58 - 2011-03-30 13:22 - 00000000 ____D C:\Program Files\Windows Live

2013-11-12 18:58 - 2010-11-02 21:06 - 00000000 ____D C:\Program Files\ASUS

2013-11-12 18:58 - 2010-11-02 21:04 - 00000000 ____D C:\Program Files\P4G

2013-11-12 18:58 - 2010-11-02 20:59 - 00000000 ____D C:\Program Files\Intel

2013-11-12 18:58 - 2010-11-02 20:56 - 00000000 ____D C:\Program Files\SRS Labs

2013-11-12 18:58 - 2010-11-02 20:52 - 00000000 ____D C:\Program Files\Common Files\Intel

2013-11-12 18:58 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker

2013-11-12 18:58 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Vorlagen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Startmenü

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Netzwerkumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Lokale Einstellungen

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Eigene Dateien

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Druckumgebung

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Documents\Eigene Musik

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Documents\Eigene Bilder

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\AppData\Local\Verlauf

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\AppData\Local\Anwendungsdaten

2013-11-12 18:54 - 2013-11-12 18:54 - 00000000 _SHDL C:\Users\SVEN\Anwendungsdaten

2013-11-12 18:53 - 2013-11-12 18:53 - 00001355 _____ C:\Windows\TSSysprep.log

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Windows\system32\SRSLabs

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Program Files\Realtek

2013-11-12 18:52 - 2013-11-12 18:52 - 00000000 ____D C:\Program Files\Elantech

2013-11-12 18:48 - 2009-07-29 07:03 - 00008192 __RSH C:\BOOTSECT.BAK

2013-11-12 18:48 - 2009-07-14 06:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG

2013-11-12 18:48 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template

2013-11-12 18:45 - 2013-11-12 18:45 - 00262144 _____ C:\Windows\system32\config\userdiff

2013-11-12 18:29 - 2013-11-12 18:22 - 00000000 ___HD C:\$INPLACE.~TR

2013-11-12 18:14 - 2010-11-02 20:15 - 01282361 _____ C:\Windows\WindowsUpdate (1).log

2013-11-12 17:18 - 2013-11-12 17:18 - 00005636 _____ C:\Users\SVEN\Desktop\Windows-Kompatibilitätsbericht.htm

2013-11-12 17:13 - 2013-11-12 17:13 - 00002544 _____ C:\Windows\diagwrn.xml

2013-11-12 17:13 - 2013-11-12 17:13 - 00001890 _____ C:\Windows\diagerr.xml

2013-11-12 16:33 - 2012-07-18 15:28 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4074351254-3079469659-4232736214-1002Core.job

2013-11-10 18:17 - 2011-11-09 22:28 - 01405440 ___SH C:\Users\SVEN\Desktop\Thumbs.db

2013-11-09 13:51 - 2013-11-09 13:51 - 00047220 _____ C:\Users\SVEN\Desktop\FRST.txt

2013-11-08 14:32 - 2013-11-08 14:04 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE

2013-11-08 14:31 - 2009-07-14 03:34 - 00000514 _____ C:\Windows\win.ini

2013-11-08 14:00 - 2013-11-08 14:00 - 00000207 _____ C:\Windows\tweaking.com-regbackup-SVEN-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat

2013-11-08 13:58 - 2013-11-08 13:58 - 00000000 ____D C:\RegBackup

2013-11-07 16:00 - 2013-11-12 21:51 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-07 10:50 - 2013-11-05 17:23 - 00623200 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2013-11-07 10:50 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2013-11-06 21:03 - 2013-11-05 21:09 - 00000000 ____D C:\AdwCleaner

2013-11-06 13:51 - 2013-11-06 13:16 - 00000000 ____D C:\ComboFix

2013-11-06 13:51 - 2013-11-05 18:40 - 00000000 ____D C:\Qoobox

2013-11-06 13:50 - 2013-11-06 13:50 - 00029588 _____ C:\ComboFix.txt

2013-11-06 13:33 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-11-05 21:26 - 2013-11-05 21:26 - 00000000 ____D C:\FRST

2013-11-05 21:07 - 2013-11-05 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-05 20:38 - 2013-11-05 20:38 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-11-05 18:22 - 2010-11-02 21:06 - 00001901 _____ C:\Windows\system32\ServiceFilter.ini

2013-10-30 20:25 - 2013-10-30 20:25 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-10-30 20:23 - 2013-10-30 20:23 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\zeqwoueb.sys

2013-10-30 20:17 - 2013-10-30 20:16 - 85269544 _____ (AVAST Software) C:\Users\SVEN\Downloads\avast_free_antivirus_setup.exe

2013-10-30 20:11 - 2013-10-30 20:10 - 13837496 _____ (Microsoft Corporation) C:\Users\SVEN\Downloads\mseinstall.exe

2013-10-25 17:00 - 2013-10-25 16:59 - 87572581 _____ C:\Users\SVEN\Downloads\Korn.rar

2013-10-17 15:47 - 2013-10-17 15:47 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys

2013-10-17 15:47 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys

2013-10-14 18:00 - 2013-11-12 23:47 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-10-14 14:31 - 2013-10-14 14:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-14 14:31 - 2013-04-06 14:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-14 14:31 - 2013-04-06 14:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-12 18:49
 

==================== End Of Log ============================

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.