Trojaner-Board - Computer öffnet eigenwillig mehrmals Internetseite

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Computer öffnet eigenwillig mehrmals Internetseite (https://www.trojaner-board.de/157121-computer-oeffnet-eigenwillig-mehrmals-internetseite.html)

Computer öffnet eigenwillig mehrmals Internetseite

Hallo zusammen!
Ich habe seit gestern einen neuen Laptop mit Windows 8.1 64bit. Anfangs hatte ich nur die kostenfreie Version von Avira Antivir drauf und habe mir zu Anfang natürlich allerlei Dinge runtergeladen. (Eigentlich aber nur von seriösen Quellen)
Habe mittlerweile die Antivir Pro Version, da ich auf die Schlüsseldatei noch warten musste.

Jetzt zu meinem eigentlichen Problem:
Nachts fing mein Laptop an die Internetseite 98uj8.de/s3brsn5ba66mgfzeinrum#noad fünf Minuten lang im Sekundentakt aufzurufen mit meinem Standardbrowser Chrome. Ich habe Chrome immer wieder geschlossen, aber es wurde immer wieder neugestartet, bis ich den Prozess im Taskmanager endlich beenden konnte.
Angefangen hat es nachdem ich Chrome normal geschlossen habe.
EDIT: Ich glaub nicht, dass es was zur Sache tut, aber Chrome habe ich heruntergeladen bevor ich Avira installiert habe, weil es das erste war, was ich gemacht habe.

Ansonsten habe ich keine Probleme, nur das beunruhigt mich schon, vor allem da der Laptop ja ganz neu ist. :P
Vielen Dank schon mal im Vorraus,
Brownie242

Ich habe einen Scan mit Malwarebytes Anti-Malware und Avira Antivir gemacht, allerdings haben diese nichts gefunden. Ich poste die Logs trotzdem einmal, da ich sonst nichts anderes habe.

Log Malwarebytes:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Scan Date: 01.08.2014

Scan Time: 01:41:05

Logfile: logfileMalware.txt

Administrator: Yes
 

Version: 2.00.2.1012

Malware Database: v2014.07.31.09

Rootkit Database: v2014.07.17.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled
 

OS: Windows 8.1

CPU: x64

File System: NTFS

User: ******
 

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 314037

Time Elapsed: 12 min, 54 sec
 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled
 

Processes: 0

(No malicious items detected)
 

Modules: 0

(No malicious items detected)
 

Registry Keys: 0

(No malicious items detected)
 

Registry Values: 0

(No malicious items detected)
 

Registry Data: 0

(No malicious items detected)
 

Folders: 0

(No malicious items detected)
 

Files: 0

(No malicious items detected)
 

Physical Sectors: 0

(No malicious items detected)
 
 

(end)

Log Avira Antivir (Namen habe ich entfernt)

Code:



Antivirus Pro

Erstellungsdatum der Reportdatei: Freitag, 1. August 2014  00:37
 
 

Das Programm läuft als uneingeschränkte Vollversion.

Online-Dienste stehen zur Verfügung.
 

Lizenznehmer   : *********

Seriennummer   : 2223945646-PEPWE-0000001

Plattform      : Windows 8.1

Windowsversion : (plain)  [6.2.9200]

Boot Modus     : Normal gebootet

Benutzername   : SYSTEM

Computername   : ******-PC
 

Versionsinformationen:

BUILD.DAT      : 14.0.6.552     94332 Bytes  23.07.2014 13:29:00

AVSCAN.EXE     : 14.0.6.548   1046608 Bytes  23.07.2014 11:29:07

AVSCANRC.DLL   : 14.0.6.522     62544 Bytes  23.07.2014 11:29:07

LUKE.DLL       : 14.0.6.522     57936 Bytes  23.07.2014 11:29:12

AVSCPLR.DLL    : 14.0.6.548     92752 Bytes  23.07.2014 11:29:07

AVREG.DLL      : 14.0.6.522    262224 Bytes  23.07.2014 11:29:07

avlode.dll     : 14.0.6.526    603728 Bytes  23.07.2014 11:29:07

avlode.rdf     : 14.0.4.42      65114 Bytes  23.07.2014 11:29:07

XBV00008.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00009.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00010.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00011.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00012.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00013.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00014.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00015.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00016.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00017.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00018.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00019.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00020.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00021.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00022.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00023.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00024.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00025.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00026.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00027.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00028.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00029.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00030.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00031.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00032.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00033.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00034.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00035.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00036.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00037.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00038.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00039.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00040.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00041.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:29:41

XBV00225.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00226.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00227.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00228.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00229.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00230.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00231.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00232.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00233.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00234.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00235.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00236.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00237.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00238.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00239.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00240.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00241.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00242.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00243.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00244.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00245.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00246.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00247.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00248.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00249.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00250.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00251.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00252.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00253.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00254.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00255.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 11:29:41

XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 11:29:41

XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 11:29:41

XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 11:29:41

XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:29:41

XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 11:29:41

XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:29:41

XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 11:29:41

XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 11:29:41

XBV00042.VDF   : 8.11.153.142   710656 Bytes  06.06.2014 11:29:41

XBV00043.VDF   : 8.11.155.44  1013760 Bytes  16.06.2014 11:29:41

XBV00044.VDF   : 8.11.159.102  1662976 Bytes  08.07.2014 11:29:41

XBV00045.VDF   : 8.11.159.104    13824 Bytes  08.07.2014 11:29:41

XBV00046.VDF   : 8.11.159.108    13312 Bytes  08.07.2014 11:29:41

XBV00047.VDF   : 8.11.159.112    30720 Bytes  09.07.2014 11:29:41

XBV00048.VDF   : 8.11.159.114     6144 Bytes  09.07.2014 11:29:41

XBV00049.VDF   : 8.11.159.116    10240 Bytes  09.07.2014 11:29:41

XBV00050.VDF   : 8.11.159.118     5632 Bytes  09.07.2014 11:29:41

XBV00051.VDF   : 8.11.159.122     7168 Bytes  09.07.2014 11:29:41

XBV00052.VDF   : 8.11.159.126   180736 Bytes  09.07.2014 11:29:41

XBV00053.VDF   : 8.11.159.148   174080 Bytes  09.07.2014 11:29:41

XBV00054.VDF   : 8.11.159.168     2560 Bytes  09.07.2014 11:29:41

XBV00055.VDF   : 8.11.159.188    15360 Bytes  09.07.2014 11:29:41

XBV00056.VDF   : 8.11.159.210    25600 Bytes  09.07.2014 11:29:41

XBV00057.VDF   : 8.11.159.212     7168 Bytes  09.07.2014 11:29:41

XBV00058.VDF   : 8.11.159.218    27648 Bytes  10.07.2014 11:29:41

XBV00059.VDF   : 8.11.159.220     2048 Bytes  10.07.2014 11:29:41

XBV00060.VDF   : 8.11.159.222    29696 Bytes  10.07.2014 11:29:41

XBV00061.VDF   : 8.11.159.224   167936 Bytes  10.07.2014 11:29:41

XBV00062.VDF   : 8.11.159.226    35328 Bytes  10.07.2014 11:29:41

XBV00063.VDF   : 8.11.159.230   186368 Bytes  10.07.2014 11:29:41

XBV00064.VDF   : 8.11.159.250    16896 Bytes  10.07.2014 11:29:41

XBV00065.VDF   : 8.11.159.252     2048 Bytes  10.07.2014 11:29:41

XBV00066.VDF   : 8.11.160.16     6144 Bytes  10.07.2014 11:29:41

XBV00067.VDF   : 8.11.160.40    17408 Bytes  10.07.2014 11:29:41

XBV00068.VDF   : 8.11.160.42     2048 Bytes  11.07.2014 11:29:41

XBV00069.VDF   : 8.11.160.46   179200 Bytes  11.07.2014 11:29:41

XBV00070.VDF   : 8.11.160.48   203264 Bytes  11.07.2014 11:29:41

XBV00071.VDF   : 8.11.160.50     6144 Bytes  11.07.2014 11:29:41

XBV00072.VDF   : 8.11.160.52     2048 Bytes  11.07.2014 11:29:41

XBV00073.VDF   : 8.11.160.54     2048 Bytes  11.07.2014 11:29:41

XBV00074.VDF   : 8.11.160.58    22016 Bytes  11.07.2014 11:29:41

XBV00075.VDF   : 8.11.160.60     2048 Bytes  11.07.2014 11:29:41

XBV00076.VDF   : 8.11.160.62     8192 Bytes  11.07.2014 11:29:41

XBV00077.VDF   : 8.11.160.66   198656 Bytes  12.07.2014 11:29:41

XBV00078.VDF   : 8.11.160.68     7168 Bytes  12.07.2014 11:29:41

XBV00079.VDF   : 8.11.160.70    14848 Bytes  12.07.2014 11:29:41

XBV00080.VDF   : 8.11.160.72     7168 Bytes  12.07.2014 11:29:41

XBV00081.VDF   : 8.11.160.92    40448 Bytes  13.07.2014 11:29:41

XBV00082.VDF   : 8.11.160.112     2048 Bytes  13.07.2014 11:29:41

XBV00083.VDF   : 8.11.160.130   193024 Bytes  13.07.2014 11:29:41

XBV00084.VDF   : 8.11.160.132     2048 Bytes  13.07.2014 11:29:41

XBV00085.VDF   : 8.11.160.152    20480 Bytes  13.07.2014 11:29:41

XBV00086.VDF   : 8.11.160.154     2048 Bytes  13.07.2014 11:29:41

XBV00087.VDF   : 8.11.160.156    20992 Bytes  14.07.2014 11:29:41

XBV00088.VDF   : 8.11.160.158     2560 Bytes  14.07.2014 11:29:41

XBV00089.VDF   : 8.11.160.160    11264 Bytes  14.07.2014 11:29:41

XBV00090.VDF   : 8.11.160.162     2560 Bytes  14.07.2014 11:29:41

XBV00091.VDF   : 8.11.160.166    14336 Bytes  14.07.2014 11:29:41

XBV00092.VDF   : 8.11.160.168     5120 Bytes  14.07.2014 11:29:41

XBV00093.VDF   : 8.11.160.178     7168 Bytes  14.07.2014 11:29:41

XBV00094.VDF   : 8.11.160.180     2048 Bytes  14.07.2014 11:29:41

XBV00095.VDF   : 8.11.160.182     2048 Bytes  14.07.2014 11:29:41

XBV00096.VDF   : 8.11.160.188   256000 Bytes  14.07.2014 11:29:41

XBV00097.VDF   : 8.11.160.190     7680 Bytes  14.07.2014 11:29:41

XBV00098.VDF   : 8.11.160.194    18432 Bytes  15.07.2014 11:29:41

XBV00099.VDF   : 8.11.160.212   184832 Bytes  15.07.2014 11:29:41

XBV00100.VDF   : 8.11.160.230   289792 Bytes  15.07.2014 11:29:41

XBV00101.VDF   : 8.11.160.232     2048 Bytes  15.07.2014 11:29:41

XBV00102.VDF   : 8.11.160.234   176128 Bytes  15.07.2014 11:29:41

XBV00103.VDF   : 8.11.160.254    18432 Bytes  15.07.2014 11:29:41

XBV00104.VDF   : 8.11.161.16     6144 Bytes  16.07.2014 11:29:41

XBV00105.VDF   : 8.11.161.32     2048 Bytes  16.07.2014 11:29:41

XBV00106.VDF   : 8.11.161.34     2048 Bytes  16.07.2014 11:29:41

XBV00107.VDF   : 8.11.161.52    26624 Bytes  16.07.2014 11:29:41

XBV00108.VDF   : 8.11.161.68   184832 Bytes  16.07.2014 11:29:41

XBV00109.VDF   : 8.11.161.84     2048 Bytes  16.07.2014 11:29:41

XBV00110.VDF   : 8.11.162.2      2560 Bytes  16.07.2014 11:29:41

XBV00111.VDF   : 8.11.162.6     16896 Bytes  16.07.2014 11:29:41

XBV00112.VDF   : 8.11.162.8     24064 Bytes  16.07.2014 11:29:41

XBV00113.VDF   : 8.11.162.10     2560 Bytes  16.07.2014 11:29:41

XBV00114.VDF   : 8.11.162.14    41472 Bytes  17.07.2014 11:29:41

XBV00115.VDF   : 8.11.162.16     2048 Bytes  17.07.2014 11:29:41

XBV00116.VDF   : 8.11.162.18   215040 Bytes  17.07.2014 11:29:41

XBV00117.VDF   : 8.11.162.22   184320 Bytes  17.07.2014 11:29:41

XBV00118.VDF   : 8.11.162.40   258048 Bytes  17.07.2014 11:29:41

XBV00119.VDF   : 8.11.162.42     3584 Bytes  17.07.2014 11:29:41

XBV00120.VDF   : 8.11.162.58     3072 Bytes  17.07.2014 11:29:41

XBV00121.VDF   : 8.11.162.78     2048 Bytes  17.07.2014 11:29:41

XBV00122.VDF   : 8.11.162.94     2048 Bytes  17.07.2014 11:29:41

XBV00123.VDF   : 8.11.162.110    35840 Bytes  17.07.2014 11:29:41

XBV00124.VDF   : 8.11.162.112     2048 Bytes  18.07.2014 11:29:41

XBV00125.VDF   : 8.11.162.130    23040 Bytes  18.07.2014 11:29:41

XBV00126.VDF   : 8.11.162.134   184320 Bytes  18.07.2014 11:29:41

XBV00127.VDF   : 8.11.162.136     2048 Bytes  18.07.2014 11:29:41

XBV00128.VDF   : 8.11.162.152   231424 Bytes  18.07.2014 11:29:41

XBV00129.VDF   : 8.11.162.154     2048 Bytes  18.07.2014 11:29:41

XBV00130.VDF   : 8.11.162.170   108032 Bytes  18.07.2014 11:29:41

XBV00131.VDF   : 8.11.162.172     9728 Bytes  18.07.2014 11:29:41

XBV00132.VDF   : 8.11.162.174     2048 Bytes  18.07.2014 11:29:41

XBV00133.VDF   : 8.11.162.188    20992 Bytes  18.07.2014 11:29:41

XBV00134.VDF   : 8.11.162.192     2048 Bytes  18.07.2014 11:29:41

XBV00135.VDF   : 8.11.162.194     2048 Bytes  18.07.2014 11:29:41

XBV00136.VDF   : 8.11.162.200    19968 Bytes  18.07.2014 11:29:41

XBV00137.VDF   : 8.11.162.204     2048 Bytes  18.07.2014 11:29:41

XBV00138.VDF   : 8.11.162.212     2048 Bytes  18.07.2014 11:29:41

XBV00139.VDF   : 8.11.162.228   227840 Bytes  19.07.2014 11:29:41

XBV00140.VDF   : 8.11.162.244     2048 Bytes  19.07.2014 11:29:41

XBV00141.VDF   : 8.11.163.2     31232 Bytes  19.07.2014 11:29:41

XBV00142.VDF   : 8.11.163.16    62464 Bytes  20.07.2014 11:29:41

XBV00143.VDF   : 8.11.163.20   202752 Bytes  20.07.2014 11:29:41

XBV00144.VDF   : 8.11.163.22     2048 Bytes  20.07.2014 11:29:41

XBV00145.VDF   : 8.11.163.26    50176 Bytes  21.07.2014 11:29:41

XBV00146.VDF   : 8.11.163.28    23040 Bytes  21.07.2014 11:29:41

XBV00147.VDF   : 8.11.163.42     6144 Bytes  21.07.2014 11:29:41

XBV00148.VDF   : 8.11.163.44     2560 Bytes  21.07.2014 11:29:41

XBV00149.VDF   : 8.11.163.56     5120 Bytes  21.07.2014 11:29:41

XBV00150.VDF   : 8.11.163.68     8192 Bytes  21.07.2014 11:29:41

XBV00151.VDF   : 8.11.163.74   213504 Bytes  21.07.2014 11:29:41

XBV00152.VDF   : 8.11.163.78    22528 Bytes  22.07.2014 11:29:41

XBV00153.VDF   : 8.11.163.82     2560 Bytes  22.07.2014 11:29:41

XBV00154.VDF   : 8.11.163.84   181248 Bytes  22.07.2014 11:29:41

XBV00155.VDF   : 8.11.163.86     9728 Bytes  22.07.2014 11:29:41

XBV00156.VDF   : 8.11.163.92     2560 Bytes  22.07.2014 11:29:41

XBV00157.VDF   : 8.11.163.98   230400 Bytes  22.07.2014 11:29:41

XBV00158.VDF   : 8.11.163.100     2048 Bytes  22.07.2014 11:29:41

XBV00159.VDF   : 8.11.163.102     2048 Bytes  22.07.2014 11:29:41

XBV00160.VDF   : 8.11.163.108    22528 Bytes  22.07.2014 11:29:41

XBV00161.VDF   : 8.11.163.112    17920 Bytes  22.07.2014 11:29:41

XBV00162.VDF   : 8.11.163.116     2048 Bytes  23.07.2014 11:29:41

XBV00163.VDF   : 8.11.163.130   194048 Bytes  23.07.2014 11:29:41

XBV00164.VDF   : 8.11.163.142    20992 Bytes  23.07.2014 11:29:41

XBV00165.VDF   : 8.11.163.154    11776 Bytes  23.07.2014 19:13:17

XBV00166.VDF   : 8.11.163.158    17920 Bytes  23.07.2014 19:13:17

XBV00167.VDF   : 8.11.163.164     2048 Bytes  23.07.2014 19:13:17

XBV00168.VDF   : 8.11.163.170    14848 Bytes  23.07.2014 19:13:17

XBV00169.VDF   : 8.11.163.174   193024 Bytes  23.07.2014 19:13:18

XBV00170.VDF   : 8.11.163.176     3072 Bytes  23.07.2014 19:13:18

XBV00171.VDF   : 8.11.163.178     3072 Bytes  23.07.2014 19:13:18

XBV00172.VDF   : 8.11.163.184   199168 Bytes  24.07.2014 19:13:18

XBV00173.VDF   : 8.11.163.186   421376 Bytes  24.07.2014 19:13:18

XBV00174.VDF   : 8.11.163.198     2048 Bytes  24.07.2014 19:13:18

XBV00175.VDF   : 8.11.163.200     2048 Bytes  24.07.2014 19:13:19

XBV00176.VDF   : 8.11.163.212   212992 Bytes  24.07.2014 19:13:19

XBV00177.VDF   : 8.11.163.222    34816 Bytes  24.07.2014 19:13:19

XBV00178.VDF   : 8.11.163.226     2048 Bytes  24.07.2014 19:13:19

XBV00179.VDF   : 8.11.163.230    21504 Bytes  24.07.2014 19:13:19

XBV00180.VDF   : 8.11.163.234    18944 Bytes  25.07.2014 19:13:19

XBV00181.VDF   : 8.11.163.236     6656 Bytes  25.07.2014 19:13:19

XBV00182.VDF   : 8.11.163.238     2048 Bytes  25.07.2014 19:13:19

XBV00183.VDF   : 8.11.163.240   198144 Bytes  25.07.2014 19:13:19

XBV00184.VDF   : 8.11.163.244    38400 Bytes  25.07.2014 19:13:20

XBV00185.VDF   : 8.11.163.246     2048 Bytes  25.07.2014 19:13:20

XBV00186.VDF   : 8.11.163.248     6144 Bytes  25.07.2014 19:13:20

XBV00187.VDF   : 8.11.163.252    11776 Bytes  25.07.2014 19:13:20

XBV00188.VDF   : 8.11.163.254     2048 Bytes  25.07.2014 19:13:20

XBV00189.VDF   : 8.11.164.2      2048 Bytes  26.07.2014 19:13:20

XBV00190.VDF   : 8.11.164.6      5120 Bytes  26.07.2014 19:13:20

XBV00191.VDF   : 8.11.164.8      2048 Bytes  26.07.2014 19:13:20

XBV00192.VDF   : 8.11.164.20    32768 Bytes  26.07.2014 19:13:20

XBV00193.VDF   : 8.11.164.30     2048 Bytes  26.07.2014 19:13:20

XBV00194.VDF   : 8.11.164.42    37376 Bytes  27.07.2014 19:13:21

XBV00195.VDF   : 8.11.164.52     5632 Bytes  27.07.2014 19:13:21

XBV00196.VDF   : 8.11.164.54    40960 Bytes  28.07.2014 19:13:21

XBV00197.VDF   : 8.11.164.56     2048 Bytes  28.07.2014 19:13:21

XBV00198.VDF   : 8.11.164.58     4096 Bytes  28.07.2014 19:13:21

XBV00199.VDF   : 8.11.164.60     4608 Bytes  28.07.2014 19:13:21

XBV00200.VDF   : 8.11.164.62    17920 Bytes  28.07.2014 19:13:21

XBV00201.VDF   : 8.11.164.66     2048 Bytes  28.07.2014 19:13:21

XBV00202.VDF   : 8.11.164.74   206848 Bytes  28.07.2014 19:13:21

XBV00203.VDF   : 8.11.164.76   191488 Bytes  28.07.2014 19:13:22

XBV00204.VDF   : 8.11.164.78     2048 Bytes  28.07.2014 19:13:22

XBV00205.VDF   : 8.11.164.82     7168 Bytes  28.07.2014 19:13:22

XBV00206.VDF   : 8.11.164.86     9216 Bytes  29.07.2014 19:13:22

XBV00207.VDF   : 8.11.164.88   218112 Bytes  29.07.2014 19:13:22

XBV00208.VDF   : 8.11.164.98     7168 Bytes  29.07.2014 19:13:22

XBV00209.VDF   : 8.11.164.106     2048 Bytes  29.07.2014 19:13:22

XBV00210.VDF   : 8.11.164.116    90112 Bytes  29.07.2014 19:13:22

XBV00211.VDF   : 8.11.164.128   197120 Bytes  29.07.2014 19:13:22

XBV00212.VDF   : 8.11.164.138     5632 Bytes  29.07.2014 19:13:23

XBV00213.VDF   : 8.11.164.142     9728 Bytes  30.07.2014 19:13:23

XBV00214.VDF   : 8.11.164.144   199680 Bytes  30.07.2014 19:13:23

XBV00215.VDF   : 8.11.164.146   206848 Bytes  30.07.2014 19:13:23

XBV00216.VDF   : 8.11.164.148     4096 Bytes  30.07.2014 19:13:23

XBV00217.VDF   : 8.11.164.150    39936 Bytes  30.07.2014 19:13:23

XBV00218.VDF   : 8.11.164.156   220160 Bytes  30.07.2014 19:13:24

XBV00219.VDF   : 8.11.164.164    16896 Bytes  31.07.2014 19:13:24

XBV00220.VDF   : 8.11.164.172     6144 Bytes  31.07.2014 19:13:24

XBV00221.VDF   : 8.11.164.188   218624 Bytes  31.07.2014 19:13:24

XBV00222.VDF   : 8.11.164.196     2048 Bytes  31.07.2014 19:13:24

XBV00223.VDF   : 8.11.164.206    27136 Bytes  31.07.2014 19:13:24

XBV00224.VDF   : 8.11.164.214    11264 Bytes  31.07.2014 21:34:17

LOCAL000.VDF   : 8.11.164.214 109327360 Bytes  31.07.2014 21:34:39

Engineversion  : 8.3.22.14 

AEVDF.DLL      : 8.3.0.4       118976 Bytes  23.07.2014 11:29:06

AESCRIPT.DLL   : 8.2.0.12      426184 Bytes  23.07.2014 11:29:06

AESCN.DLL      : 8.3.2.2       139456 Bytes  23.07.2014 11:29:06

AESBX.DLL      : 8.2.20.24    1409224 Bytes  23.07.2014 11:29:06

AERDL.DLL      : 8.2.0.138     704888 Bytes  23.07.2014 11:29:06

AEPACK.DLL     : 8.4.0.46      786632 Bytes  31.07.2014 19:13:17

AEOFFICE.DLL   : 8.3.0.16      213192 Bytes  31.07.2014 19:13:17

AEHEUR.DLL     : 8.1.4.1188   7332040 Bytes  31.07.2014 19:13:16

AEHELP.DLL     : 8.3.1.0       278728 Bytes  23.07.2014 11:29:06

AEGEN.DLL      : 8.1.7.28      450752 Bytes  23.07.2014 11:29:06

AEEXP.DLL      : 8.4.2.6       237760 Bytes  23.07.2014 11:29:06

AEEMU.DLL      : 8.1.3.2       393587 Bytes  23.07.2014 11:29:06

AEDROID.DLL    : 8.4.2.24      442568 Bytes  23.07.2014 11:29:06

AECORE.DLL     : 8.3.2.2       241864 Bytes  23.07.2014 11:29:06

AEBB.DLL       : 8.1.1.4        53619 Bytes  23.07.2014 11:29:06

AVWINLL.DLL    : 14.0.6.522     24144 Bytes  23.07.2014 11:29:08

AVPREF.DLL     : 14.0.6.522     50256 Bytes  23.07.2014 11:29:07

AVREP.DLL      : 14.0.6.522    219216 Bytes  23.07.2014 11:29:07

AVARKT.DLL     : 14.0.5.368    226384 Bytes  23.07.2014 11:29:06

AVEVTLOG.DLL   : 14.0.6.522    182352 Bytes  23.07.2014 11:29:07

SQLITE3.DLL    : 14.0.6.522    452176 Bytes  23.07.2014 11:29:32

AVSMTP.DLL     : 14.0.6.522     76368 Bytes  23.07.2014 11:29:07

NETNT.DLL      : 14.0.6.522     13392 Bytes  23.07.2014 11:29:12

RCIMAGE.DLL    : 14.0.6.544   4886096 Bytes  23.07.2014 11:29:13

RCTEXT.DLL     : 14.0.6.536     73808 Bytes  23.07.2014 11:29:14
 

Konfiguration für den aktuellen Suchlauf:

Job Name..............................: Vollständige Systemprüfung

Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp

Protokollierung.......................: standard

Primäre Aktion........................: Interaktiv

Sekundäre Aktion......................: Ignorieren

Durchsuche Masterbootsektoren.........: ein

Durchsuche Bootsektoren...............: ein

Bootsektoren..........................: C:, 

Durchsuche aktive Programme...........: ein

Laufende Programme erweitert..........: ein

Durchsuche Registrierung..............: ein

Suche nach Rootkits...................: ein

Integritätsprüfung von Systemdateien..: aus

Prüfe alle Dateien....................: Alle Dateien

Durchsuche Archive....................: ein

Rekursionstiefe einschränken..........: 20

Archiv Smart Extensions...............: ein

Makrovirenheuristik...................: ein

Dateiheuristik........................: erweitert
 

Beginn des Suchlaufs: Freitag, 1. August 2014  00:37
 

Der Suchlauf über die Bootsektoren wird begonnen:

Bootsektor 'HDD0(C:)'

    [INFO]      Es wurde kein Virus gefunden!
 

Der Suchlauf nach versteckten Objekten wird begonnen.

Fehler in der ARK Library
 

Der Suchlauf über gestartete Prozesse wird begonnen:

Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '122' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '202' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '106' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '77' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '69' Modul(e) wurden durchsucht

Durchsuche Prozess 'nvvsvc.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'spoolsv.exe' - '68' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '82' Modul(e) wurden durchsucht

Durchsuche Prozess 'adminservice.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'HeciServer.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'LMSvc.exe' - '22' Modul(e) wurden durchsucht

Durchsuche Prozess 'daemonu.exe' - '76' Modul(e) wurden durchsucht

Durchsuche Prozess 'SearchIndexer.exe' - '64' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '70' Modul(e) wurden durchsucht

Durchsuche Prozess 'dashost.exe' - '64' Modul(e) wurden durchsucht

Durchsuche Prozess 'GamesAppIntegrationService.exe' - '32' Modul(e) wurden durchsucht

Durchsuche Prozess 'jhi_service.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'LMS.exe' - '59' Modul(e) wurden durchsucht

Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'wmiprvse.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'wmiprvse.exe' - '57' Modul(e) wurden durchsucht

Durchsuche Prozess 'McAPExe.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'mcawfwk.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'ePowerSvc.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '43' Modul(e) wurden durchsucht

Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '107' Modul(e) wurden durchsucht

Durchsuche Prozess 'sched.exe' - '63' Modul(e) wurden durchsucht

Durchsuche Prozess 'avguard.exe' - '121' Modul(e) wurden durchsucht

Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'avmailc7.exe' - '37' Modul(e) wurden durchsucht

Durchsuche Prozess 'avwebg7.exe' - '54' Modul(e) wurden durchsucht

Durchsuche Prozess 'dwm.exe' - '61' Modul(e) wurden durchsucht

Durchsuche Prozess 'rundll32.exe' - '14' Modul(e) wurden durchsucht

Durchsuche Prozess 'rundll32.exe' - '40' Modul(e) wurden durchsucht

Durchsuche Prozess 'nvxdsync.exe' - '57' Modul(e) wurden durchsucht

Durchsuche Prozess 'nvvsvc.exe' - '68' Modul(e) wurden durchsucht

Durchsuche Prozess 'rundll32.exe' - '40' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskhostex.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'Explorer.EXE' - '255' Modul(e) wurden durchsucht

Durchsuche Prozess 'LMEvent.exe' - '51' Modul(e) wurden durchsucht

Durchsuche Prozess 'unsecapp.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'LMTray.exe' - '35' Modul(e) wurden durchsucht

Durchsuche Prozess 'TabTip.exe' - '54' Modul(e) wurden durchsucht

Durchsuche Prozess 'TabTip32.exe' - '22' Modul(e) wurden durchsucht

Durchsuche Prozess 'nvtray.exe' - '40' Modul(e) wurden durchsucht

Durchsuche Prozess 'BtvStack.exe' - '101' Modul(e) wurden durchsucht

Durchsuche Prozess 'ActivateDesktop.exe' - '48' Modul(e) wurden durchsucht

Durchsuche Prozess 'igfxtray.exe' - '45' Modul(e) wurden durchsucht

Durchsuche Prozess 'igfxsrvc.exe' - '49' Modul(e) wurden durchsucht

Durchsuche Prozess 'hkcmd.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'igfxpers.exe' - '45' Modul(e) wurden durchsucht

Durchsuche Prozess 'ddp.exe' - '73' Modul(e) wurden durchsucht

Durchsuche Prozess 'Apoint.exe' - '64' Modul(e) wurden durchsucht

Durchsuche Prozess 'ApMsgFwd.exe' - '38' Modul(e) wurden durchsucht

Durchsuche Prozess 'HidFind.exe' - '38' Modul(e) wurden durchsucht

Durchsuche Prozess 'Apntex.exe' - '39' Modul(e) wurden durchsucht

Durchsuche Prozess 'conhost.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'RAVCpl64.exe' - '55' Modul(e) wurden durchsucht

Durchsuche Prozess 'RAVBg64.exe' - '52' Modul(e) wurden durchsucht

Durchsuche Prozess 'SpotifyWebHelper.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'Skype.exe' - '153' Modul(e) wurden durchsucht

Durchsuche Prozess 'Avira.OE.Systray.exe' - '117' Modul(e) wurden durchsucht

Durchsuche Prozess 'avgnt.exe' - '105' Modul(e) wurden durchsucht

Durchsuche Prozess 'jusched.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'ePowerTray.exe' - '64' Modul(e) wurden durchsucht

Durchsuche Prozess 'igfxext.exe' - '42' Modul(e) wurden durchsucht

Durchsuche Prozess 'unsecapp.exe' - '45' Modul(e) wurden durchsucht

Durchsuche Prozess 'ePowerEvent.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'pokki.exe' - '98' Modul(e) wurden durchsucht

Durchsuche Prozess 'WWAHost.exe' - '109' Modul(e) wurden durchsucht

Durchsuche Prozess 'RuntimeBroker.exe' - '67' Modul(e) wurden durchsucht

Durchsuche Prozess 'WSHost.exe' - '94' Modul(e) wurden durchsucht

Durchsuche Prozess 'mfevtps.exe' - '25' Modul(e) wurden durchsucht

Durchsuche Prozess 'mfefire.exe' - '35' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskhost.exe' - '72' Modul(e) wurden durchsucht

Durchsuche Prozess 'wwahost.exe' - '197' Modul(e) wurden durchsucht

Durchsuche Prozess 'Camera.exe' - '134' Modul(e) wurden durchsucht

Durchsuche Prozess 'PhotosApp.exe' - '119' Modul(e) wurden durchsucht

Durchsuche Prozess 'Spotify.exe' - '126' Modul(e) wurden durchsucht

Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht

Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht

Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht

Durchsuche Prozess 'SpotifyHelper.exe' - '62' Modul(e) wurden durchsucht

Durchsuche Prozess 'SpotifyHelper.exe' - '86' Modul(e) wurden durchsucht

Durchsuche Prozess 'steam.exe' - '142' Modul(e) wurden durchsucht

Durchsuche Prozess 'SteamService.exe' - '48' Modul(e) wurden durchsucht

Durchsuche Prozess 'McSvHost.exe' - '116' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '97' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '51' Modul(e) wurden durchsucht

Durchsuche Prozess 'DllHost.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'mcuihost.exe' - '113' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '51' Modul(e) wurden durchsucht

Durchsuche Prozess 'qcshm.exe' - '50' Modul(e) wurden durchsucht

Durchsuche Prozess 'SearchProtocolHost.exe' - '36' Modul(e) wurden durchsucht

Durchsuche Prozess 'SearchFilterHost.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'mcupdate.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'mcinst.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'rundll32.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'rundll32.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'avscan.exe' - '107' Modul(e) wurden durchsucht

Durchsuche Prozess 'vssvc.exe' - '39' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '30' Modul(e) wurden durchsucht

Durchsuche Prozess 'TrustedInstaller.exe' - '22' Modul(e) wurden durchsucht

Durchsuche Prozess 'TiWorker.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '51' Modul(e) wurden durchsucht

Durchsuche Prozess 'wininit.exe' - '17' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsass.exe' - '71' Modul(e) wurden durchsucht

Durchsuche Prozess 'WinLogon.exe' - '29' Modul(e) wurden durchsucht
 

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:

Die Registry wurde durchsucht ( '1254' Dateien ).
 
 

Der Suchlauf über die ausgewählten Dateien wird begonnen:
 

Beginne mit der Suche in 'C:\' <Acer>

C:\swapfile.sys

  [WARNUNG]   Die Datei konnte nicht geöffnet werden!

C:\Program Files (x86)\Steam\SteamApps\downloading\255320\jre-7-windows-i586.exe

  [WARNUNG]   Die Datei konnte nicht geöffnet werden!
 
 

Ende des Suchlaufs: Freitag, 1. August 2014  01:35

Benötigte Zeit: 57:46 Minute(n)
 

Der Suchlauf wurde vollständig durchgeführt.
 

  27299 Verzeichnisse wurden überprüft

 500596 Dateien wurden geprüft

      0 Viren bzw. unerwünschte Programme wurden gefunden

      0 Dateien wurden als verdächtig eingestuft

      0 Dateien wurden gelöscht

      0 Viren bzw. unerwünschte Programme wurden repariert

      0 Dateien wurden in die Quarantäne verschoben

      0 Dateien wurden umbenannt

      2 Dateien konnten nicht durchsucht werden

 500594 Dateien ohne Befall

   3387 Archive wurden durchsucht

      2 Warnungen

      0 Hinweise

    118 Objekte wurden beim Rootkitscan durchsucht

      0 Versteckte Objekte wurden gefunden

:hallo:

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02

Ran by Malin (administrator) on Malin-PC on 01-08-2014 12:08:24

Running from C:\Users\Malin\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(McAfee, Inc.) C:\Program Files\mcafee\msc\McAAE8A.tmp

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Pokki) C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Windows\Camera\Camera.exe

(Microsoft Corporation) C:\Windows\FileManager\PhotosApp.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.4872\Battle.net.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\cmd.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-09-30] (Alps Electric Co., Ltd.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

SearchScopes: HKLM - DefaultScope {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKLM - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKLM-x32 - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKCU - DefaultScope {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 

SearchScopes: HKCU - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 

SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
 

Chrome: 

=======

CHR Extension: (Google Docs) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]

CHR Extension: (Google Drive) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]

CHR Extension: (YouTube) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]

CHR Extension: (Google-Suche) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]

CHR Extension: (AdBlock) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-01]

CHR Extension: (Google Wallet) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]

CHR Extension: (Google Mail) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 0207601406813689mcinstcleanup; C:\Windows\TEMP\020760~1.EXE [836168 2014-03-13] (McAfee, Inc.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)

S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

R2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [42040 2014-07-23] (Avira Operations GmbH & Co. KG)

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)

U3 mfeavfk01; No ImagePath

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)

U3 mfehidk01; No ImagePath

U3 mfencbdc01; No ImagePath

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)

S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-01 12:08 - 2014-08-01 12:09 - 00019811 _____ () C:\Users\Malin\Desktop\FRST.txt

2014-08-01 12:08 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST

2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe

2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001274 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2014-08-01 10:15 - 2014-08-01 10:21 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-08-01 10:13 - 2014-08-01 12:08 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net

2014-08-01 10:13 - 2014-08-01 10:51 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net

2014-08-01 10:13 - 2014-08-01 10:13 - 00001138 _____ () C:\Users\Public\Desktop\Battle.net.lnk

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2014-08-01 10:12 - 2014-08-01 10:13 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk

2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe

2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net

2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG

2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt

2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-01 01:14 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-01 01:14 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment

2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log

2014-07-31 23:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2014-07-31 23:37 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2014-07-31 23:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2014-07-31 23:37 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2014-07-31 23:37 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2014-07-31 23:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2014-07-31 23:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2014-07-31 23:37 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2014-07-31 23:37 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2014-07-31 23:37 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2014-07-31 23:37 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2014-07-31 23:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2014-07-31 23:37 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2014-07-31 23:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2014-07-31 23:37 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2014-07-31 23:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2014-07-31 23:37 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2014-07-31 23:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2014-07-31 23:37 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2014-07-31 23:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2014-07-31 23:37 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2014-07-31 23:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2014-07-31 23:37 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2014-07-31 23:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2014-07-31 23:37 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2014-07-31 23:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2014-07-31 23:37 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2014-07-31 23:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2014-07-31 23:37 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2014-07-31 23:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2014-07-31 23:37 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2014-07-31 23:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2014-07-31 23:37 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2014-07-31 23:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2014-07-31 23:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2014-07-31 23:37 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2014-07-31 23:37 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2014-07-31 23:37 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2014-07-31 23:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2014-07-31 23:37 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2014-07-31 23:37 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2014-07-31 23:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2014-07-31 23:37 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2014-07-31 23:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2014-07-31 23:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2014-07-31 23:37 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2014-07-31 23:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2014-07-31 23:37 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2014-07-31 23:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2014-07-31 23:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2014-07-31 23:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2014-07-31 23:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2014-07-31 23:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2014-07-31 23:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2014-07-31 23:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2014-07-31 23:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2014-07-31 23:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2014-07-31 23:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2014-07-31 23:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA

2014-07-31 22:07 - 2014-08-01 00:52 - 00000000 ____D () C:\Program Files (x86)\SpeedFan

2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo

2014-07-31 21:24 - 2014-07-31 21:25 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-07-31 21:06 - 2014-07-31 21:07 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe

2014-07-31 20:19 - 2014-07-31 21:40 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe

2014-07-31 19:58 - 2014-06-22 19:24 - 00018944 _____ () C:\Users\Malin\Desktop\Picture Picker.exe

2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip

2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d

2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 19:03 - 2013-11-05 23:18 - 00024972 _____ () C:\Users\Malin\Desktop\Picture Sorter 0.9.zip

2014-07-31 18:47 - 2014-07-31 18:50 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)

2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2014-07-31 17:34 - 2014-08-01 01:00 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe

2014-07-31 17:23 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft

2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe

2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe

2014-07-31 16:48 - 2014-08-01 11:49 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype

2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype

2014-07-31 16:47 - 2014-07-31 16:48 - 00000000 ____D () C:\ProgramData\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe

2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll

2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial

2014-07-31 16:39 - 2014-07-31 18:22 - 00000000 ___RD () C:\Users\Malin\SkyDrive

2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira

2014-07-31 16:00 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-31 15:58 - 2014-07-31 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\ProgramData\Avira

2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe

2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-31 15:53 - 2014-08-01 01:00 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify

2014-07-31 15:53 - 2014-07-31 16:10 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify

2014-07-31 15:41 - 2014-08-01 11:46 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-31 15:41 - 2014-07-31 21:33 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-31 15:41 - 2014-07-31 21:33 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-31 15:40 - 2014-08-01 01:35 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002

2014-07-31 15:40 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment

2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0

2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia

2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki

2014-07-31 15:36 - 2014-07-31 21:37 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi

2014-07-31 15:36 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old

2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream

2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-07-31 15:34 - 2014-08-01 10:01 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki

2014-07-31 15:34 - 2014-07-31 20:17 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages

2014-07-31 15:34 - 2014-07-31 16:39 - 00000000 ____D () C:\Users\Malin

2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-01 12:09 - 2014-08-01 12:08 - 00019811 _____ () C:\Users\Malin\Desktop\FRST.txt

2014-08-01 12:08 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST

2014-08-01 12:08 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net

2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe

2014-08-01 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-08-01 11:49 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype

2014-08-01 11:46 - 2014-07-31 15:41 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-01 11:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF

2014-08-01 11:17 - 2014-05-08 11:55 - 00980775 _____ () C:\Windows\WindowsUpdate.log

2014-08-01 10:51 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net

2014-08-01 10:21 - 2014-08-01 10:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001274 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2014-08-01 10:13 - 2014-08-01 10:13 - 00001138 _____ () C:\Users\Public\Desktop\Battle.net.lnk

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2014-08-01 10:13 - 2014-08-01 10:12 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk

2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe

2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net

2014-08-01 10:01 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki

2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG

2014-08-01 01:35 - 2014-07-31 15:40 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002

2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt

2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-01 01:00 - 2014-07-31 17:34 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-01 01:00 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify

2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment

2014-08-01 00:52 - 2014-07-31 22:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan

2014-08-01 00:39 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files\mcafee

2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log

2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA

2014-07-31 22:20 - 2014-07-31 17:23 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft

2014-07-31 22:13 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-07-31 22:11 - 2013-11-05 07:12 - 00000000 ____D () C:\ProgramData\McAfee

2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo

2014-07-31 21:40 - 2014-07-31 20:19 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug

2014-07-31 21:37 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi

2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Acer

2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\Program Files (x86)\Acer

2014-07-31 21:36 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2014-07-31 21:33 - 2014-07-31 15:41 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-31 21:33 - 2014-07-31 15:41 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-31 21:25 - 2014-07-31 21:24 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele

2014-07-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-07-31 21:20 - 2013-11-05 06:53 - 00001340 _____ () C:\Windows\PFRO.log

2014-07-31 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-07-31 21:20 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-31 21:20 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default

2014-07-31 21:11 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-31 21:11 - 2014-05-08 21:42 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2014-07-31 21:11 - 2014-05-08 21:42 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2014-07-31 21:11 - 2013-11-05 06:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-31 21:07 - 2014-07-31 21:06 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe

2014-07-31 20:17 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages

2014-07-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip

2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d

2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 18:50 - 2014-07-31 18:47 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)

2014-07-31 18:46 - 2013-08-22 16:46 - 00019181 _____ () C:\Windows\setupact.log

2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2014-07-31 18:22 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive

2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-31 17:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore

2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe

2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe

2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype

2014-07-31 16:48 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe

2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll

2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial

2014-07-31 16:39 - 2014-07-31 15:36 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old

2014-07-31 16:39 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin

2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-07-31 16:10 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify

2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira

2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Avira

2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe

2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-31 15:41 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment

2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0

2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia

2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki

2014-07-31 15:37 - 2014-05-08 12:51 - 00003546 _____ () C:\Windows\System32\Tasks\Norton Online Backup ARA

2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream

2014-07-31 15:36 - 2014-05-08 12:51 - 00000000 ____D () C:\ProgramData\Norton

2014-07-31 15:36 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-07-31 15:35 - 2013-11-05 06:49 - 00000000 ___HD () C:\OEM

2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store

2014-07-31 15:34 - 2013-11-05 06:53 - 00000000 ____D () C:\Windows\Panther

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-07-23 13:29 - 2014-07-31 16:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
 

Some content of TEMP:

====================

C:\Users\Malin\AppData\Local\Temp\AcerPortalSetup.exe

C:\Users\Malin\AppData\Local\Temp\avgnt.exe

C:\Users\Malin\AppData\Local\Temp\oct3404.tmp.exe

C:\Users\Malin\AppData\Local\Temp\sfamcc00001.dll

C:\Users\Malin\AppData\Local\Temp\sfextra.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-11-05 06:53
 

==================== End Of Log ============================

--- --- ---

Addition.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02

Ran by Malin at 2014-08-01 12:09:36

Running from C:\Users\Malin\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)

Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)

Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)

Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)

Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3104.6 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)

Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)

Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.103.2020.206 - Alps Electric)

Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)

Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)

eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)

Edna & Harvey: The Breakout (HKLM-x32\...\Steam App 255320) (Version:  - Daedalic Entertainment)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)

Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden

Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)

Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden

Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden

Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)

Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden

Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden

Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden

Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden

Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)

Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden

NVIDIA Optimus 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden

NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden

Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)

Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)

Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )

Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden

Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

31-07-2014 15:20:57 Installed Java 7 Update 65
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {026823A1-1A66-4BE5-955E-591BCE739E02} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()

Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {26E42D64-F67B-4B9B-B6E7-C6DD2E26CD16} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3672130C-D4B8-4C98-B810-F5632E396E69} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)

Task: {37487533-7D77-4987-A748-5BBB617CF9DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {52153B8A-1B81-4084-BDC5-2129EB67E7BE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {B7C588E8-B875-465D-B829-6436E8B39508} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()

Task: {BB2C5934-822D-41DC-9B53-81F9A214D4A0} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)

Task: {C3086504-AF6D-4B66-9A1E-3754A357FF34} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {FFDAB2EC-6995-4836-BF94-26607656D9A1} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-05-08 12:13 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2014-05-08 12:54 - 2013-07-30 18:11 - 00110152 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll

2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll

2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

2013-07-08 18:53 - 2013-07-08 18:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll

2013-08-22 09:19 - 2013-08-22 08:54 - 00054784 _____ () C:\Windows\system32\WinMetadata\Windows.Globalization.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00030208 _____ () C:\Windows\system32\WinMetadata\Windows.Foundation.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00020480 _____ () C:\Windows\system32\WinMetadata\Windows.System.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00174592 _____ () C:\Windows\system32\WinMetadata\Windows.UI.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00096256 _____ () C:\Windows\system32\WinMetadata\Windows.Storage.winmd

2014-05-08 11:57 - 2014-05-08 11:57 - 00012728 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\Microsoft.PerfTrack.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00134144 _____ () C:\Windows\system32\WinMetadata\Windows.ApplicationModel.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00112640 _____ () C:\Windows\system32\WinMetadata\Windows.Networking.winmd

2014-05-08 11:57 - 2014-05-08 11:57 - 00016312 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\SqliteWrapper.winmd

2014-05-08 11:57 - 2014-05-08 11:57 - 00485816 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\SqliteWrapper.dll

2014-05-08 11:57 - 2014-05-08 11:57 - 00660920 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\Sqlite3.dll

2013-08-22 09:19 - 2013-08-22 08:54 - 00049664 _____ () C:\Windows\system32\WinMetadata\Windows.Graphics.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00093696 _____ () C:\Windows\system32\WinMetadata\Windows.Web.winmd

2013-08-22 09:19 - 2013-08-22 08:54 - 00066560 _____ () C:\Windows\system32\WinMetadata\Windows.Security.winmd

2014-05-08 11:57 - 2014-05-08 11:57 - 00246168 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\Microsoft.WindowsAzure.Messaging.Managed.DLL

2013-08-22 09:19 - 2013-08-22 08:54 - 00169472 _____ () C:\Windows\system32\WinMetadata\Windows.Devices.winmd

2014-05-08 12:10 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll

2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-07-31 16:01 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Malin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-05-08 12:54 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

2014-08-01 10:12 - 2014-08-01 10:13 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4872\libcef.dll

2014-08-01 10:12 - 2014-08-01 10:13 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4872\libglesv2.dll

2014-08-01 10:12 - 2014-08-01 10:13 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4872\libegl.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Malin\SkyDrive:ms-properties

AlternateDataStreams: C:\Users\Malin\SkyDrive.old:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: Bluetooth USB Module

Description: Bluetooth USB Module

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Qualcomm Atheros Communications

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/31/2014 11:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: McSvHost.exe, Version: 3.8.703.0, Zeitstempel: 0x51f7deae

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16408, Zeitstempel: 0x523d5305

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004bb96

ID des fehlerhaften Prozesses: 0x308c

Startzeit der fehlerhaften Anwendung: 0xMcSvHost.exe0

Pfad der fehlerhaften Anwendung: McSvHost.exe1

Pfad des fehlerhaften Moduls: McSvHost.exe2

Berichtskennung: McSvHost.exe3

Vollständiger Name des fehlerhaften Pakets: McSvHost.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: McSvHost.exe5
 

Error: (07/31/2014 10:09:40 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm speedfan.exe, Version 4.49.0.403 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 17c4
 

Startzeit: 01cfacfb38fb15a0
 

Endzeit: 18
 

Anwendungspfad: C:\Program Files (x86)\SpeedFan\speedfan.exe
 

Berichts-ID: 955a58d6-18ee-11e4-8258-c45444599c7c
 

Vollständiger Name des fehlerhaften Pakets: 
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/31/2014 04:41:58 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm wwahost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: e28
 

Startzeit: 01cfacccb835ed1d
 

Endzeit: 15
 

Anwendungspfad: C:\Windows\syswow64\wwahost.exe
 

Berichts-ID: d016b74f-18c0-11e4-8258-c45444599c7c
 

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_3.0.0.1002_x86__kzf8qxf38zg5c
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
 

Error: (07/31/2014 04:39:40 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Malin-PC)

Description: windows_ie_ac_0013
 

Error: (07/31/2014 04:28:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Malin-PC)

Description: Die App „Microsoft.SkypeApp_2.0.0.5012_x86__kzf8qxf38zg5c+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (07/31/2014 09:23:42 PM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: )

Description: Die indizierten Daten von Windows Search für den Benutzer '<Event xmlns='hxxp://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2014-07-31T19:23:42.000000000Z'/><EventRecordID>702</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>Malin-PC</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4D0061006C0069006E002D00500043005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event>' können im Zuge der Löschung des Benutzerprofils nicht entfernt werden. Fehlercode %2.
 

%3.
 
 

System errors:

=============

Error: (08/01/2014 02:03:13 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (08/01/2014 02:02:43 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (08/01/2014 00:38:19 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)

Description: {209500FC-6B45-4693-8871-6296C4843751}
 

Error: (08/01/2014 00:37:49 AM) (Source: DCOM) (EventID: 10010) (User: Malin-PC)

Description: {209500FC-6B45-4693-8871-6296C4843751}
 

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee Anti-Spam Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee Proxy Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee Platform Services" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee VirusScan Announcer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee Personal Firewall Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/31/2014 11:39:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "McAfee SiteAdvisor Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (07/31/2014 11:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: McSvHost.exe3.8.703.051f7deaentdll.dll6.3.9600.16408523d5305c0000005000000000004bb96308c01cfacfbf48448a9C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exeC:\Windows\SYSTEM32\ntdll.dll2c2377f6-18fb-11e4-8258-c45444599c7c
 

Error: (07/31/2014 10:09:40 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: speedfan.exe4.49.0.40317c401cfacfb38fb15a018C:\Program Files (x86)\SpeedFan\speedfan.exe955a58d6-18ee-11e4-8258-c45444599c7c
 

Error: (07/31/2014 04:41:58 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: wwahost.exe6.3.9600.16384e2801cfacccb835ed1d15C:\Windows\syswow64\wwahost.exed016b74f-18c0-11e4-8258-c45444599c7cMicrosoft.SkypeApp_3.0.0.1002_x86__kzf8qxf38zg5cApp
 

Error: (07/31/2014 04:39:40 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Malin-PC)

Description: windows_ie_ac_0013
 

Error: (07/31/2014 04:28:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Malin-PC)

Description: Microsoft.SkypeApp_2.0.0.5012_x86__kzf8qxf38zg5c+App
 

Error: (07/31/2014 09:23:42 PM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: )

Description: <Event xmlns='hxxp://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2014-07-31T19:23:42.000000000Z'/><EventRecordID>702</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>Malin-PC</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4D0061006C0069006E002D00500043005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event>
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 60%

Total physical RAM: 8072.27 MB

Available physical RAM: 3206.22 MB

Total Pagefile: 9992.27 MB

Available Pagefile: 4099.3 MB

Total Virtual: 131072 MB

Available Virtual: 131071.79 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:447.95 GB) (Free:361.82 GB) NTFS

Drive d: (Transcend) (Removable) (Total:29.89 GB) (Free:29.89 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 466 GB) (Disk ID: FF407FDD)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 1 (Size: 30 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

AdwCleaner:

Code:

# AdwCleaner v3.302 - Bericht erstellt am 01/08/2014 um 12:25:00

# Aktualisiert 30/07/2014 von Xplode

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Malin - Malin-PC

# Gestartet von : C:\Users\Malin\Desktop\adwcleaner_3.302.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16384
 
 

-\\ Google Chrome v36.0.1985.125
 

[ Datei : C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [1282 octets] - [01/08/2014 12:24:11]

AdwCleaner[S0].txt - [1077 octets] - [01/08/2014 12:25:00]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1137 octets] ##########

JRT

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 8.1 x64

Ran by Malin on 01.08.2014 at 12:31:29,06

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?
 

    Value Name          Type                             Value Data                     

========================================================================================

    Pokki    REG_EXPAND_SZ    C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
 
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 01.08.2014 at 12:35:33,36

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Log

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02

Ran by Malin (administrator) on MALIN-PC on 01-08-2014 12:38:00

Running from C:\Users\Malin\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe

(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Pokki) C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe

(Thisisu) C:\Users\Malin\Desktop\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-09-30] (Alps Electric Co., Ltd.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

SearchScopes: HKLM - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKLM-x32 - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKCU - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Docs) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]

CHR Extension: (Google Drive) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]

CHR Extension: (YouTube) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]

CHR Extension: (Google-Suche) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]

CHR Extension: (AdBlock) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-01]

CHR Extension: (Google Wallet) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]

CHR Extension: (Google Mail) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)

S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [X]

S2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [42040 2014-07-23] (Avira Operations GmbH & Co. KG)

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)

S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt

2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT

2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe

2014-08-01 12:24 - 2014-08-01 12:25 - 00000000 ____D () C:\AdwCleaner

2014-08-01 12:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe

2014-08-01 12:09 - 2014-08-01 12:10 - 00030268 _____ () C:\Users\Malin\Desktop\Addition.txt

2014-08-01 12:08 - 2014-08-01 12:38 - 00016173 _____ () C:\Users\Malin\Desktop\FRST.txt

2014-08-01 12:08 - 2014-08-01 12:38 - 00000000 ____D () C:\FRST

2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe

2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2014-08-01 10:15 - 2014-08-01 12:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-08-01 10:13 - 2014-08-01 12:15 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net

2014-08-01 10:13 - 2014-08-01 10:51 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2014-08-01 10:12 - 2014-08-01 10:13 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk

2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe

2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net

2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG

2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt

2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-01 01:14 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-01 01:14 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment

2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log

2014-07-31 23:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2014-07-31 23:37 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2014-07-31 23:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2014-07-31 23:37 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2014-07-31 23:37 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2014-07-31 23:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2014-07-31 23:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2014-07-31 23:37 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2014-07-31 23:37 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2014-07-31 23:37 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2014-07-31 23:37 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2014-07-31 23:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2014-07-31 23:37 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2014-07-31 23:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2014-07-31 23:37 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2014-07-31 23:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2014-07-31 23:37 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2014-07-31 23:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2014-07-31 23:37 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2014-07-31 23:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2014-07-31 23:37 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2014-07-31 23:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2014-07-31 23:37 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2014-07-31 23:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2014-07-31 23:37 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2014-07-31 23:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2014-07-31 23:37 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2014-07-31 23:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2014-07-31 23:37 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2014-07-31 23:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2014-07-31 23:37 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2014-07-31 23:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2014-07-31 23:37 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2014-07-31 23:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2014-07-31 23:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2014-07-31 23:37 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2014-07-31 23:37 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2014-07-31 23:37 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2014-07-31 23:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2014-07-31 23:37 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2014-07-31 23:37 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2014-07-31 23:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2014-07-31 23:37 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2014-07-31 23:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2014-07-31 23:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2014-07-31 23:37 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2014-07-31 23:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2014-07-31 23:37 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2014-07-31 23:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2014-07-31 23:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2014-07-31 23:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2014-07-31 23:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2014-07-31 23:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2014-07-31 23:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2014-07-31 23:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2014-07-31 23:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2014-07-31 23:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2014-07-31 23:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2014-07-31 23:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA

2014-07-31 22:07 - 2014-08-01 00:52 - 00000000 ____D () C:\Program Files (x86)\SpeedFan

2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo

2014-07-31 21:24 - 2014-08-01 12:33 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-07-31 21:06 - 2014-07-31 21:07 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe

2014-07-31 20:19 - 2014-07-31 21:40 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe

2014-07-31 19:58 - 2014-06-22 19:24 - 00018944 _____ () C:\Users\Malin\Desktop\Picture Picker.exe

2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip

2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d

2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 19:03 - 2013-11-05 23:18 - 00024972 _____ () C:\Users\Malin\Desktop\Picture Sorter 0.9.zip

2014-07-31 18:47 - 2014-07-31 18:50 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)

2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2014-07-31 17:34 - 2014-08-01 01:00 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe

2014-07-31 17:23 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft

2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe

2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe

2014-07-31 16:48 - 2014-08-01 12:29 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype

2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype

2014-07-31 16:47 - 2014-07-31 16:48 - 00000000 ____D () C:\ProgramData\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe

2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll

2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial

2014-07-31 16:39 - 2014-07-31 18:22 - 00000000 ___RD () C:\Users\Malin\SkyDrive

2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira

2014-07-31 16:00 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-31 15:58 - 2014-07-31 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\ProgramData\Avira

2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe

2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-31 15:53 - 2014-08-01 01:00 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify

2014-07-31 15:53 - 2014-07-31 16:10 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify

2014-07-31 15:41 - 2014-08-01 12:29 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-31 15:41 - 2014-08-01 12:28 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-31 15:41 - 2014-08-01 11:46 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-31 15:40 - 2014-08-01 12:38 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002

2014-07-31 15:40 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment

2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0

2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia

2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki

2014-07-31 15:36 - 2014-07-31 21:37 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi

2014-07-31 15:36 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old

2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream

2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-07-31 15:34 - 2014-08-01 10:01 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki

2014-07-31 15:34 - 2014-07-31 20:17 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages

2014-07-31 15:34 - 2014-07-31 16:39 - 00000000 ____D () C:\Users\Malin

2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-01 12:38 - 2014-08-01 12:08 - 00016173 _____ () C:\Users\Malin\Desktop\FRST.txt

2014-08-01 12:38 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST

2014-08-01 12:38 - 2014-07-31 15:40 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002

2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt

2014-08-01 12:34 - 2014-05-08 11:55 - 00985522 _____ () C:\Windows\WindowsUpdate.log

2014-08-01 12:33 - 2014-07-31 21:24 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele

2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT

2014-08-01 12:31 - 2014-05-08 21:42 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2014-08-01 12:31 - 2014-05-08 21:42 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2014-08-01 12:31 - 2013-11-05 06:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe

2014-08-01 12:29 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype

2014-08-01 12:29 - 2014-07-31 15:41 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-01 12:28 - 2014-07-31 15:41 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\ProgramData\McAfee

2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files (x86)\McAfee

2014-08-01 12:26 - 2013-11-05 06:53 - 00292590 _____ () C:\Windows\PFRO.log

2014-08-01 12:26 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-01 12:25 - 2014-08-01 12:24 - 00000000 ____D () C:\AdwCleaner

2014-08-01 12:25 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe

2014-08-01 12:15 - 2014-08-01 10:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-08-01 12:15 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net

2014-08-01 12:10 - 2014-08-01 12:09 - 00030268 _____ () C:\Users\Malin\Desktop\Addition.txt

2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe

2014-08-01 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-08-01 11:46 - 2014-07-31 15:41 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-01 11:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF

2014-08-01 10:51 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net

2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2014-08-01 10:13 - 2014-08-01 10:12 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk

2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe

2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net

2014-08-01 10:01 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Pokki

2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG

2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt

2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-01 01:00 - 2014-07-31 17:34 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-01 01:00 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify

2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment

2014-08-01 00:52 - 2014-07-31 22:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan

2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log

2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA

2014-07-31 22:20 - 2014-07-31 17:23 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft

2014-07-31 22:13 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo

2014-07-31 21:40 - 2014-07-31 20:19 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug

2014-07-31 21:37 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi

2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Acer

2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\Program Files (x86)\Acer

2014-07-31 21:36 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2014-07-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-07-31 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-07-31 21:20 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default

2014-07-31 21:11 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-31 21:07 - 2014-07-31 21:06 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe

2014-07-31 20:17 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages

2014-07-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip

2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d

2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 18:50 - 2014-07-31 18:47 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)

2014-07-31 18:46 - 2013-08-22 16:46 - 00019181 _____ () C:\Windows\setupact.log

2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2014-07-31 18:22 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive

2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-31 17:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore

2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe

2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe

2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype

2014-07-31 16:48 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe

2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll

2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial

2014-07-31 16:39 - 2014-07-31 15:36 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old

2014-07-31 16:39 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin

2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-07-31 16:10 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify

2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira

2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Avira

2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe

2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-31 15:41 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment

2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0

2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia

2014-07-31 15:37 - 2014-07-31 15:37 - 00000000 ____D () C:\Users\Public\Pokki

2014-07-31 15:37 - 2014-05-08 12:51 - 00003546 _____ () C:\Windows\System32\Tasks\Norton Online Backup ARA

2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream

2014-07-31 15:36 - 2014-05-08 12:51 - 00000000 ____D () C:\ProgramData\Norton

2014-07-31 15:36 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-07-31 15:35 - 2013-11-05 06:49 - 00000000 ___HD () C:\OEM

2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store

2014-07-31 15:34 - 2013-11-05 06:53 - 00000000 ____D () C:\Windows\Panther

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-07-23 13:29 - 2014-07-31 16:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
 

Some content of TEMP:

====================

C:\Users\Malin\AppData\Local\Temp\AcerPortalSetup.exe

C:\Users\Malin\AppData\Local\Temp\avgnt.exe

C:\Users\Malin\AppData\Local\Temp\oct3404.tmp.exe

C:\Users\Malin\AppData\Local\Temp\Quarantine.exe

C:\Users\Malin\AppData\Local\Temp\sfamcc00001.dll

C:\Users\Malin\AppData\Local\Temp\sfextra.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-11-05 06:53
 

==================== End Of Log ============================

--- --- ---

Addition Log

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02

Ran by Malin at 2014-08-01 12:38:47

Running from C:\Users\Malin\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)

Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)

Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)

Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)

Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3104.6 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)

Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)

Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.103.2020.206 - Alps Electric)

Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)

Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)

eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)

Edna & Harvey: The Breakout (HKLM-x32\...\Steam App 255320) (Version:  - Daedalic Entertainment)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)

Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden

Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)

Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden

Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden

Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)

Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden

Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden

Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden

Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden

Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)

Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden

NVIDIA Optimus 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden

NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden

Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)

Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)

Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )

Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden

Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

31-07-2014 15:20:57 Installed Java 7 Update 65
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {026823A1-1A66-4BE5-955E-591BCE739E02} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()

Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {26E42D64-F67B-4B9B-B6E7-C6DD2E26CD16} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3672130C-D4B8-4C98-B810-F5632E396E69} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)

Task: {37487533-7D77-4987-A748-5BBB617CF9DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {52153B8A-1B81-4084-BDC5-2129EB67E7BE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {B7C588E8-B875-465D-B829-6436E8B39508} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()

Task: {BB2C5934-822D-41DC-9B53-81F9A214D4A0} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)

Task: {C3086504-AF6D-4B66-9A1E-3754A357FF34} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {FFDAB2EC-6995-4836-BF94-26607656D9A1} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-05-08 12:13 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2013-07-08 18:53 - 2013-07-08 18:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll

2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll

2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll

2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-07-31 16:01 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Malin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-05-08 12:10 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2014-05-08 12:54 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll

2014-07-31 15:41 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Malin\SkyDrive:ms-properties

AlternateDataStreams: C:\Users\Malin\SkyDrive.old:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: Bluetooth USB Module

Description: Bluetooth USB Module

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Qualcomm Atheros Communications

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Percentage of memory in use: 25%

Total physical RAM: 8072.27 MB

Available physical RAM: 6012.39 MB

Total Pagefile: 9992.27 MB

Available Pagefile: 7723.4 MB

Total Virtual: 131072 MB

Available Virtual: 131071.84 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:447.95 GB) (Free:347.73 GB) NTFS

Drive d: (Transcend) (Removable) (Total:29.89 GB) (Free:29.89 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 466 GB) (Disk ID: FF407FDD)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 1 (Size: 30 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Servus,

führe bitte die folgenden Schritte durch und sag mir anschließend, ob sich immer noch Seiten öffnen.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

C:\Users\Public\Pokki

C:\Users\Public\AppData\Local\Pokki

C:\Users\Malin\AppData\Local\Pokki

C:\Users\Malin\AppData\Local\Packages

SearchScopes: HKCU - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = 

Reboot:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die beiden neuen Logdateien von FRST.

Danke für die schnelle Hilfe :)
Es öffnen sich keine Tabs

Ich kann den Fixlog leider nur als .rar Datei anhängen, da er viel zu viele Zeichen beinhaltet und zu groß ist, um ihn als .txt anzuhängen.

FRST Log

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02

Ran by Malin (administrator) on MALIN-PC on 01-08-2014 12:53:47

Running from C:\Users\Malin\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-09-30] (Alps Electric Co., Ltd.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-24] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1104384 2014-05-08] (Spotify Ltd)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)

HKU\S-1-5-21-3658371529-1683618370-1771377991-1002\...\MountPoints2: {abf9cd87-18e7-11e4-8257-c45444599c7c} - "E:\LaunchU3.exe" -a

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: StorageProviderError -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: StorageProviderSyncing -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

SearchScopes: HKLM - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

SearchScopes: HKLM-x32 - {3A1D4C36-C389-4846-B382-C9F15A4ED188} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Docs) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]

CHR Extension: (Google Drive) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]

CHR Extension: (YouTube) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]

CHR Extension: (Google-Suche) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]

CHR Extension: (AdBlock) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-01]

CHR Extension: (Google Wallet) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]

CHR Extension: (Google Mail) - C:\Users\Malin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-24] (Avira Operations GmbH & Co. KG)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)

S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)

S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [X]

S2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [42040 2014-07-23] (Avira Operations GmbH & Co. KG)

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)

S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-01 12:53 - 2014-08-01 12:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages

2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt

2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT

2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe

2014-08-01 12:24 - 2014-08-01 12:25 - 00000000 ____D () C:\AdwCleaner

2014-08-01 12:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe

2014-08-01 12:09 - 2014-08-01 12:39 - 00019568 _____ () C:\Users\Malin\Desktop\Addition.txt

2014-08-01 12:08 - 2014-08-01 12:53 - 00014945 _____ () C:\Users\Malin\Desktop\FRST.txt

2014-08-01 12:08 - 2014-08-01 12:53 - 00000000 ____D () C:\FRST

2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe

2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2014-08-01 10:15 - 2014-08-01 12:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-08-01 10:13 - 2014-08-01 12:15 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net

2014-08-01 10:13 - 2014-08-01 10:51 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2014-08-01 10:12 - 2014-08-01 10:13 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk

2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-08-01 10:12 - 2014-08-01 10:13 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe

2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net

2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG

2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt

2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-01 01:14 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-01 01:14 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment

2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log

2014-07-31 23:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll

2014-07-31 23:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-07-31 23:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll

2014-07-31 23:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2014-07-31 23:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2014-07-31 23:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-07-31 23:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-07-31 23:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2014-07-31 23:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-07-31 23:37 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2014-07-31 23:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2014-07-31 23:37 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2014-07-31 23:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2014-07-31 23:37 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2014-07-31 23:37 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2014-07-31 23:37 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2014-07-31 23:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2014-07-31 23:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2014-07-31 23:37 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2014-07-31 23:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2014-07-31 23:37 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2014-07-31 23:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2014-07-31 23:37 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2014-07-31 23:37 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2014-07-31 23:37 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2014-07-31 23:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2014-07-31 23:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2014-07-31 23:37 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2014-07-31 23:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2014-07-31 23:37 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2014-07-31 23:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2014-07-31 23:37 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2014-07-31 23:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2014-07-31 23:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2014-07-31 23:37 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2014-07-31 23:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2014-07-31 23:37 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2014-07-31 23:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2014-07-31 23:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2014-07-31 23:37 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2014-07-31 23:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2014-07-31 23:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2014-07-31 23:37 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2014-07-31 23:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2014-07-31 23:37 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2014-07-31 23:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2014-07-31 23:37 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2014-07-31 23:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2014-07-31 23:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2014-07-31 23:37 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2014-07-31 23:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2014-07-31 23:37 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2014-07-31 23:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2014-07-31 23:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2014-07-31 23:37 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2014-07-31 23:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2014-07-31 23:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2014-07-31 23:37 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2014-07-31 23:37 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2014-07-31 23:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2014-07-31 23:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2014-07-31 23:37 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2014-07-31 23:37 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2014-07-31 23:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2014-07-31 23:37 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2014-07-31 23:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2014-07-31 23:37 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2014-07-31 23:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2014-07-31 23:37 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2014-07-31 23:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2014-07-31 23:37 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2014-07-31 23:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2014-07-31 23:37 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2014-07-31 23:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2014-07-31 23:37 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2014-07-31 23:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2014-07-31 23:37 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2014-07-31 23:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2014-07-31 23:37 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2014-07-31 23:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2014-07-31 23:37 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2014-07-31 23:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA

2014-07-31 22:07 - 2014-08-01 00:52 - 00000000 ____D () C:\Program Files (x86)\SpeedFan

2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo

2014-07-31 21:24 - 2014-08-01 12:33 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-07-31 21:06 - 2014-07-31 21:07 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe

2014-07-31 20:19 - 2014-07-31 21:40 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe

2014-07-31 19:58 - 2014-06-22 19:24 - 00018944 _____ () C:\Users\Malin\Desktop\Picture Picker.exe

2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip

2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d

2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 19:03 - 2013-11-05 23:18 - 00024972 _____ () C:\Users\Malin\Desktop\Picture Sorter 0.9.zip

2014-07-31 18:47 - 2014-07-31 18:50 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)

2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2014-07-31 17:34 - 2014-08-01 01:00 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe

2014-07-31 17:23 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft

2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe

2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe

2014-07-31 16:48 - 2014-08-01 12:54 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype

2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype

2014-07-31 16:47 - 2014-07-31 16:48 - 00000000 ____D () C:\ProgramData\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe

2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll

2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial

2014-07-31 16:39 - 2014-07-31 18:22 - 00000000 ___RD () C:\Users\Malin\SkyDrive

2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira

2014-07-31 16:00 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-31 16:00 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-31 15:58 - 2014-07-31 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\ProgramData\Avira

2014-07-31 15:58 - 2014-07-31 16:00 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe

2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-31 15:53 - 2014-08-01 01:00 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify

2014-07-31 15:53 - 2014-07-31 16:10 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify

2014-07-31 15:41 - 2014-08-01 12:54 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-31 15:41 - 2014-08-01 12:52 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-31 15:41 - 2014-08-01 12:46 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-31 15:40 - 2014-08-01 12:38 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002

2014-07-31 15:40 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment

2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0

2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia

2014-07-31 15:36 - 2014-07-31 21:37 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi

2014-07-31 15:36 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old

2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream

2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-07-31 15:34 - 2014-07-31 16:39 - 00000000 ____D () C:\Users\Malin

2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-01 12:54 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Skype

2014-08-01 12:54 - 2014-07-31 15:41 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-01 12:53 - 2014-08-01 12:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Packages

2014-08-01 12:53 - 2014-08-01 12:08 - 00014945 _____ () C:\Users\Malin\Desktop\FRST.txt

2014-08-01 12:53 - 2014-08-01 12:08 - 00000000 ____D () C:\FRST

2014-08-01 12:52 - 2014-07-31 15:41 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-01 12:52 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-01 12:51 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files (x86)\McAfee

2014-08-01 12:51 - 2013-11-05 06:53 - 00293064 _____ () C:\Windows\PFRO.log

2014-08-01 12:51 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-08-01 12:46 - 2014-07-31 15:41 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-01 12:44 - 2014-05-08 11:55 - 00985899 _____ () C:\Windows\WindowsUpdate.log

2014-08-01 12:39 - 2014-08-01 12:09 - 00019568 _____ () C:\Users\Malin\Desktop\Addition.txt

2014-08-01 12:38 - 2014-07-31 15:40 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3658371529-1683618370-1771377991-1002

2014-08-01 12:35 - 2014-08-01 12:35 - 00001054 _____ () C:\Users\Malin\Desktop\JRT.txt

2014-08-01 12:33 - 2014-07-31 21:24 - 00000000 ____D () C:\Users\Malin\Desktop\Spiele

2014-08-01 12:31 - 2014-08-01 12:31 - 00000000 ____D () C:\Windows\ERUNT

2014-08-01 12:31 - 2014-05-08 21:42 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2014-08-01 12:31 - 2014-05-08 21:42 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2014-08-01 12:31 - 2013-11-05 06:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-01 12:30 - 2014-08-01 12:30 - 01016261 _____ (Thisisu) C:\Users\Malin\Desktop\JRT.exe

2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\ProgramData\McAfee

2014-08-01 12:28 - 2013-11-05 07:12 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2014-08-01 12:25 - 2014-08-01 12:24 - 00000000 ____D () C:\AdwCleaner

2014-08-01 12:22 - 2014-08-01 12:22 - 01361309 _____ () C:\Users\Malin\Desktop\adwcleaner_3.302.exe

2014-08-01 12:15 - 2014-08-01 10:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-08-01 12:15 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Battle.net

2014-08-01 12:06 - 2014-08-01 12:06 - 02094080 _____ (Farbar) C:\Users\Malin\Desktop\FRST64.exe

2014-08-01 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-08-01 11:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF

2014-08-01 10:51 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Battle.net

2014-08-01 10:17 - 2014-08-01 10:17 - 00001492 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftAccount- und Rechnungssupport.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001469 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftTechnischer Kundendienst.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00001288 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of WarcraftWorld of Warcraft.lnk

2014-08-01 10:17 - 2014-08-01 10:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\Users\Malin\AppData\Local\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2014-08-01 10:13 - 2014-08-01 10:12 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk

2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-08-01 10:13 - 2014-08-01 10:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-08-01 10:10 - 2014-08-01 10:10 - 02942368 _____ (Blizzard Entertainment) C:\Users\Malin\Downloads\World-of-Warcraft-Setup-deDE.exe

2014-08-01 10:10 - 2014-08-01 10:10 - 00000000 ____D () C:\ProgramData\Battle.net

2014-08-01 01:40 - 2014-08-01 01:40 - 00060150 _____ () C:\Users\Malin\Documents\AVSCAN-20140801-003722-5B1E6711.LOG

2014-08-01 01:18 - 2014-08-01 01:18 - 00000039 _____ () C:\Users\Malin\Desktop\Virus.txt

2014-08-01 01:14 - 2014-08-01 01:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-01 01:14 - 2014-08-01 01:14 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-01 01:14 - 2014-08-01 01:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-01 01:12 - 2014-08-01 01:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Malin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-01 01:00 - 2014-07-31 17:34 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-08-01 01:00 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Spotify

2014-08-01 00:55 - 2014-08-01 00:55 - 00000000 ____D () C:\Users\Malin\AppData\Local\daedalic entertainment

2014-08-01 00:52 - 2014-07-31 22:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan

2014-07-31 23:37 - 2014-07-31 23:37 - 00010009 _____ () C:\Windows\DirectX.log

2014-07-31 22:20 - 2014-07-31 22:20 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\NVIDIA

2014-07-31 22:20 - 2014-07-31 17:23 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\.minecraft

2014-07-31 22:13 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-07-31 22:07 - 2014-07-31 22:07 - 02143832 _____ () C:\Users\Malin\Downloads\instsf449.exe

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00001027 _____ () C:\Users\Malin\Desktop\SpeedFan.lnk

2014-07-31 22:07 - 2014-07-31 22:07 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo

2014-07-31 21:40 - 2014-07-31 20:19 - 00000000 ____D () C:\Users\Malin\Desktop\Zeug

2014-07-31 21:37 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\AppData\Local\clear.fi

2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Acer

2014-07-31 21:37 - 2013-11-05 07:11 - 00000000 ____D () C:\Program Files (x86)\Acer

2014-07-31 21:36 - 2013-11-05 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2014-07-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-07-31 21:20 - 2014-07-31 21:20 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-07-31 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-07-31 21:20 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default

2014-07-31 21:11 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-31 21:07 - 2014-07-31 21:06 - 168825152 _____ () C:\Users\Malin\Downloads\avira_antivirus_pro_de.exe

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Schule

2014-07-31 20:18 - 2014-07-31 20:18 - 00000000 ____D () C:\Users\Malin\Documents\Mädchengruppe

2014-07-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-07-31 19:45 - 2014-07-31 19:45 - 00005593 _____ () C:\Users\Malin\Downloads\wpkey_v1.4.7d.zip

2014-07-31 19:45 - 2014-07-31 19:45 - 00000000 ____D () C:\Users\Malin\Downloads\wpkey_v1.4.7d

2014-07-31 19:16 - 2014-07-31 19:16 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 18:50 - 2014-07-31 18:47 - 00000000 ____D () C:\Users\Malin\Desktop\Stick (1)

2014-07-31 18:46 - 2013-08-22 16:46 - 00019181 _____ () C:\Windows\setupact.log

2014-07-31 18:35 - 2014-07-31 18:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2014-07-31 18:22 - 2014-07-31 16:39 - 00000000 ___RD () C:\Users\Malin\SkyDrive

2014-07-31 17:34 - 2014-07-31 17:34 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-07-31 17:34 - 2014-07-31 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-07-31 17:33 - 2014-07-31 17:33 - 01141680 _____ () C:\Users\Malin\Downloads\SteamSetup.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-31 17:21 - 2014-07-31 17:21 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Sun

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-31 17:21 - 2014-07-31 17:21 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-31 17:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore

2014-07-31 17:19 - 2014-07-31 17:19 - 00918952 _____ (Oracle Corporation) C:\Users\Malin\Downloads\chromeinstall-7u65.exe

2014-07-31 17:19 - 2014-07-31 17:19 - 00675988 _____ () C:\Users\Malin\Desktop\Minecraft.exe

2014-07-31 16:48 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Malin\AppData\Local\Skype

2014-07-31 16:48 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-31 16:47 - 2014-07-31 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-07-31 16:46 - 2014-07-31 16:46 - 01677928 _____ (Skype Technologies S.A.) C:\Users\Malin\Downloads\SkypeSetup.exe

2014-07-31 16:46 - 2014-07-31 16:46 - 00362029 _____ () C:\Users\Malin\Downloads\sqlite3.dll

2014-07-31 16:45 - 2014-07-31 16:45 - 00000000 ____D () C:\Users\Malin\AppData\Local\Acer Aspire R7 Tutorial

2014-07-31 16:39 - 2014-07-31 15:36 - 00000000 ___RD () C:\Users\Malin\SkyDrive.old

2014-07-31 16:39 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin

2014-07-31 16:38 - 2014-07-31 16:38 - 00002129 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-07-31 16:10 - 2014-07-31 15:53 - 00000000 ____D () C:\Users\Malin\AppData\Local\Spotify

2014-07-31 16:06 - 2014-07-31 16:06 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Avira

2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\ProgramData\Avira

2014-07-31 16:00 - 2014-07-31 15:58 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-31 15:58 - 2014-07-31 15:58 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-31 15:57 - 2014-07-31 15:57 - 04431200 _____ (Avira Operations GmbH & Co. KG) C:\Users\Malin\Downloads\avira_de_av___ws2.exe

2014-07-31 15:57 - 2014-07-31 15:57 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-31 15:41 - 2014-07-31 15:41 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-31 15:41 - 2014-07-31 15:41 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Users\Malin\AppData\Local\Google

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-31 15:41 - 2014-07-31 15:41 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-31 15:41 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Deployment

2014-07-31 15:40 - 2014-07-31 15:40 - 00000000 ____D () C:\Users\Malin\AppData\Local\Apps\2.0

2014-07-31 15:38 - 2014-07-31 15:38 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Macromedia

2014-07-31 15:37 - 2014-05-08 12:51 - 00003546 _____ () C:\Windows\System32\Tasks\Norton Online Backup ARA

2014-07-31 15:36 - 2014-07-31 15:36 - 00000000 ____D () C:\Users\Malin\PicStream

2014-07-31 15:36 - 2014-05-08 12:51 - 00000000 ____D () C:\ProgramData\Norton

2014-07-31 15:36 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-07-31 15:35 - 2014-07-31 15:35 - 00001280 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Atheros

2014-07-31 15:35 - 2014-07-31 15:35 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-07-31 15:35 - 2013-11-05 06:49 - 00000000 ___HD () C:\OEM

2014-07-31 15:34 - 2014-07-31 15:34 - 00001458 _____ () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-31 15:34 - 2014-07-31 15:34 - 00000020 ___SH () C:\Users\Malin\ntuser.ini

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Vorlagen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Startmenü

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Netzwerkumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Lokale Einstellungen

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Eigene Dateien

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Druckumgebung

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Musik

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Documents\Eigene Bilder

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Verlauf

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\AppData\Local\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 _SHDL () C:\Users\Malin\Anwendungsdaten

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Roaming\Adobe

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Users\Malin\AppData\Local\VirtualStore

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-07-31 15:34 - 2014-07-31 15:34 - 00000000 ____D () C:\Program Files\Accessory Store

2014-07-31 15:34 - 2013-11-05 06:53 - 00000000 ____D () C:\Windows\Panther

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-07-31 15:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-07-23 13:29 - 2014-07-31 16:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-23 13:29 - 2014-07-31 16:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
 

Some content of TEMP:

====================

C:\Users\Malin\AppData\Local\Temp\AcerPortalSetup.exe

C:\Users\Malin\AppData\Local\Temp\avgnt.exe

C:\Users\Malin\AppData\Local\Temp\oct3404.tmp.exe

C:\Users\Malin\AppData\Local\Temp\Quarantine.exe

C:\Users\Malin\AppData\Local\Temp\sfamcc00001.dll

C:\Users\Malin\AppData\Local\Temp\sfextra.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-11-05 06:53
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition Log

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02

Ran by Malin at 2014-08-01 12:55:01

Running from C:\Users\Malin\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)

Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)

Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)

Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)

Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3104.6 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)

Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)

Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.103.2020.206 - Alps Electric)

Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)

Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)

eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)

Edna & Harvey: The Breakout (HKLM-x32\...\Steam App 255320) (Version:  - Daedalic Entertainment)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)

Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden

Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)

Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden

Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden

Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)

Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden

Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden

Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden

Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden

Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)

Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden

NVIDIA Optimus 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden

NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden

Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)

Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)

Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )

Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden

Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

31-07-2014 15:20:57 Installed Java 7 Update 65
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {026823A1-1A66-4BE5-955E-591BCE739E02} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()

Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {26E42D64-F67B-4B9B-B6E7-C6DD2E26CD16} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3672130C-D4B8-4C98-B810-F5632E396E69} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)

Task: {37487533-7D77-4987-A748-5BBB617CF9DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {52153B8A-1B81-4084-BDC5-2129EB67E7BE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {B7C588E8-B875-465D-B829-6436E8B39508} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()

Task: {BB2C5934-822D-41DC-9B53-81F9A214D4A0} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)

Task: {C3086504-AF6D-4B66-9A1E-3754A357FF34} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {FFDAB2EC-6995-4836-BF94-26607656D9A1} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-05-08 12:13 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2013-07-08 18:53 - 2013-07-08 18:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll

2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

2014-07-24 11:50 - 2014-07-24 11:50 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll

2014-07-24 11:49 - 2014-07-24 11:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-07-31 16:01 - 2014-07-24 11:50 - 00049744 _____ () C:\Users\Malin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-05-08 12:10 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Malin\SkyDrive:ms-properties

AlternateDataStreams: C:\Users\Malin\SkyDrive.old:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: Bluetooth USB Module

Description: Bluetooth USB Module

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Qualcomm Atheros Communications

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============

Error: (08/01/2014 00:52:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee AP Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (08/01/2014 00:52:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Percentage of memory in use: 19%

Total physical RAM: 8072.27 MB

Available physical RAM: 6496.46 MB

Total Pagefile: 9992.27 MB

Available Pagefile: 8380.42 MB

Total Virtual: 131072 MB

Available Virtual: 131071.84 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:447.95 GB) (Free:347.58 GB) NTFS

Drive d: (Transcend) (Removable) (Total:29.89 GB) (Free:29.89 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 466 GB) (Disk ID: FF407FDD)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 1 (Size: 30 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Schritt 1
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

:filefind *pokki* :folderfind *pokki* :regfind pokki
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Bitte poste mit deiner nächsten Antwort

die Logdatei von SystemLook,
die Logdatei von ESET,
die Logdatei von SecurityCheck.

Code:

SystemLook 30.07.11 by jpshortstuff

Log created at 14:28 on 01/08/2014 by Malin

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*pokki*"

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\libPokki.dll.xBAD        --a---- 49322496 bytes        [05:28 01/11/2013]        [05:28 01/11/2013] 1AFC76312592AD802C4484221DF8B4A7

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe.xBAD        --a---- 8252744 bytes        [05:31 01/11/2013]        [05:31 01/11/2013] D3F53C3FCBA03E557424B48A32481980

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\lib\ga_pokki.js.xBAD        --a---- 16992 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] 9ABCE86031C6B027737B063D78AE0E37

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\lib\ga_timer_pokki.js.xBAD        --a---- 5327 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] D4DA2A94BC0F30681059960CAFFBED94

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\platform\templates\pokkiApp.handlebars.xBAD        --a---- 511 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] 9FBCA64AA76DF50BE494A33C3EBC8E18

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\sysapps\notifications\assets\scripts\platform\views\pokkiApp.js.xBAD        --a---- 4298 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] 7EA0ADF2F5A6E2CFEFED8C097A20856D

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\installed_pokkies.db.xBAD        --a---- 5120 bytes        [13:37 31/07/2014]        [10:30 01/08/2014] F8E1C93184E91DAD642D91A1DE4A61FF

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\03d432a7e610c3e908213e7689d4342ce2111caf\22edb75f32d670f6018f709bead35b5a28159d5f\assets\js\GAPokki.js.xBAD        --a---- 16931 bytes        [13:34 31/07/2014]        [23:22 31/07/2013] B78B826BF5E2D7B204FE3105BC0752CB

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\f22abfeae27a67446927d078890381efc546d3e1\2e32e2179c83d1229009ec647e946c62b15ac234\js\pokkistore.js.xBAD        --a---- 243 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] AF6561E2F3ED3D09A3C339BF9B7F559B

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\f22abfeae27a67446927d078890381efc546d3e1\2e32e2179c83d1229009ec647e946c62b15ac234\js\lib\pokkiHelper.js.xBAD        --a---- 6470 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] 82C56D3875D29FAF35867873F0761526

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies\f22abfeae27a67446927d078890381efc546d3e1\2e32e2179c83d1229009ec647e946c62b15ac234\js\lib\pokkiHostedFramework-2.0.0.min.js.xBAD        --a---- 7827 bytes        [01:54 07/09/2013]        [01:54 07/09/2013] 46E260B16634EB3602C115C2FFCF858B

C:\Users\Default\AppData\Local\Pokki\Engine\libPokki.dll        --a---- 49322496 bytes        [10:51 08/05/2014]        [22:58 07/08/2013] CB89BF9013A72954AB046C6B08B9DB18

C:\Users\Default\AppData\Local\Pokki\Engine\pokki.exe        --a---- 8198984 bytes        [10:51 08/05/2014]        [23:00 07/08/2013] 30617D8109C6E041B3E32C2BB9E297DC

C:\Users\Default\AppData\Local\Pokki\Pokkies\03d432a7e610c3e908213e7689d4342ce2111caf\assets\js\GAPokki.js        --a---- 16931 bytes        [10:51 08/05/2014]        [23:22 31/07/2013] B78B826BF5E2D7B204FE3105BC0752CB

C:\Users\Malin\AppData\Local\Temp\Pokki-2014-07-31.log        --a---- 121682 bytes        [13:35 31/07/2014]        [20:48 31/07/2014] 7C674BE9E3A2A5B9A4D97E735E4F7483

C:\Users\Malin\AppData\Local\Temp\Pokki-2014-08-01.log        --a---- 24650 bytes        [23:54 31/07/2014]        [10:51 01/08/2014] 0525790D2934208CD6BDE16C52DF253B

C:\Windows\Prefetch\POKKI.EXE-89D06908.pf        --a---- 280884 bytes        [13:37 31/07/2014]        [10:30 01/08/2014] 43CD3CCE5AB844DF5AABCEFA9081B102

C:\Windows\Prefetch\POKKI.EXE-89D0690B.pf        --a---- 68606 bytes        [10:30 01/08/2014]        [10:30 01/08/2014] D30CE78CE0BC936ED93C0301E5F56449

C:\Windows\Prefetch\POKKI.EXE-89D0690F.pf        --a---- 43248 bytes        [14:44 31/07/2014]        [00:10 01/08/2014] 1B19B526724915AF00545BEEE9DA8F28
 

========== folderfind ==========
 

Searching for "*pokki*"

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki        d------        [10:50 01/08/2014]

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Pokkies        d------        [10:50 01/08/2014]

C:\FRST\Quarantine\C\Users\Malin\AppData\Local\Pokki\Engine\frames\frame\websheet-control-close.png\Pokkies        d------        [13:34 31/07/2014]

C:\FRST\Quarantine\C\Users\Public\Pokki        d------        [13:37 31/07/2014]

C:\Users\Default\AppData\Local\Pokki        d------        [10:51 08/05/2014]

C:\Users\Default\AppData\Local\Pokki\Pokkies        d------        [10:51 08/05/2014]
 

========== regfind ==========
 

Searching for "pokki"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\UFH\SHC]

"23"="C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe  /OPENf22abfeae27a67446927d078890381efc546d3e1"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"DisplayName"="Pokki"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"DisplayIcon"="%LOCALAPPDATA%\Pokki\Uninstall.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"Publisher"="Pokki"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"URLInfoAbout"="hxxp://www.pokki.com"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"UninstallString"="%LOCALAPPDATA%\Pokki\Uninstall.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

"DisplayIcon"="%LOCALAPPDATA%\Pokki\IconCache\persistent\Acer Games.ico"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

"Publisher"="Pokki"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

"UninstallString"=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" /UNINSTALL03d432a7e610c3e908213e7689d4342ce2111caf"

[HKEY_CURRENT_USER\Software\Pokki]

[HKEY_CURRENT_USER\Software\Pokki]

"InstallDir"="%LOCALAPPDATA%\Pokki"

[HKEY_CURRENT_USER\Software\Classes\pokki]

[HKEY_CURRENT_USER\Software\Classes\pokki]

@="URL:Pokki Protocol"

[HKEY_CURRENT_USER\Software\Classes\pokki\shell\open\command]

@=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\ARP]

"0"="S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall Pokki_03d432a7e610c3e908213e7689d4342ce2111caf "%LOCALAPPDATA%\Pokki\Engine\pokki.exe" /UNINSTALL03d432a7e610c3e908213e7689d4342ce2111caf"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\UFH\SHC]

"23"="C:\Users\Malin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk C:\Users\Malin\AppData\Local\Pokki\Engine\pokki.exe  /OPENf22abfeae27a67446927d078890381efc546d3e1"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"DisplayName"="Pokki"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"DisplayIcon"="%LOCALAPPDATA%\Pokki\Uninstall.exe"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"Publisher"="Pokki"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"URLInfoAbout"="hxxp://www.pokki.com"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki]

"UninstallString"="%LOCALAPPDATA%\Pokki\Uninstall.exe"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

"DisplayIcon"="%LOCALAPPDATA%\Pokki\IconCache\persistent\Acer Games.ico"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

"Publisher"="Pokki"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf]

"UninstallString"=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" /UNINSTALL03d432a7e610c3e908213e7689d4342ce2111caf"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Pokki]

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Pokki]

"InstallDir"="%LOCALAPPDATA%\Pokki"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Classes\pokki]

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Classes\pokki]

@="URL:Pokki Protocol"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002\Software\Classes\pokki\shell\open\command]

@=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" %1"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002_Classes\pokki]

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002_Classes\pokki]

@="URL:Pokki Protocol"

[HKEY_USERS\S-1-5-21-3658371529-1683618370-1771377991-1002_Classes\pokki\shell\open\command]

@=""%LOCALAPPDATA%\Pokki\Engine\pokki.exe" %1"
 

Searching for "         "

[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0]

"SerialNumber"="            W0VJY1Q2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{21C35C68-A6C5-4A75-8FFD-DB503CE6F67B}]

"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">

            <Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{18CD34B7-7AA3-42b9-A303-5A729B2FF228}">

                <Descriptor descriptorID="{ABE23B46-7F9F-495b-B4A9-87F41743727F}"/>

                <Descriptor descriptorID="{B54162A2-F67F-46dc-9ED5-F6067520EC94}"/>

                <Descriptor descriptorID="{7E0BC004-F80B-402d-A1FC-5FCDFF04DAB1}"/>

                <Descriptor descriptorID="{BE562A5F-2A80-4c28-9752-74C696E2ABAF}"/>

            </Rating>

        </Ratings>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]

"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Enabled="true" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="4.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Reso

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell.Workflow]

"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell.workflow" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" UseSharedProcess="true" ProcessIdleTimeoutSec="1209600" RunAsUser="" RunAsPassword="" AutoRestart="false"     Enabled="true" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="4.0"/>                     <Param Name="AssemblyName" Value="Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL"/>                     <Param Name="PSSessionConfigurationTypeName" Value="Microsoft.PowerShell.Workflow.PSWorkflowSessionConfiguration"/>                     <Param Name="SessionConfigurationData"                          Value="                       

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]

"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Architecture="32" Enabled="true" >                         <InitializationParameters>                             <Param Name="PSVersion" Value="4.0"/>                         </InitializationParameters>                         <Resources>                             <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                 <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_SanDisk&Prod_Cruzer&Rev_8.01#1739731D6582F127&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]

"DeviceDesc"="Cruzer          "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_SanDisk&Prod_Cruzer&Rev_8.01#1739731D6582F127&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]

"DeviceDesc"="Cruzer          "
 

-= EOF =-

Code:

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=0c8e2dcac474a64093714f0d1636fefb

# engine=19455

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-08-01 02:32:04

# local_time=2014-08-01 04:32:04 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 7325406 31784817 0 0

# scanned=135877

# found=0

# cleaned=0

# scan_time=5954

Code:

 Results of screen317's Security Check version 0.99.85  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop      

Windows Defender   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Java 7 Update 65  

 Java version out of Date! 

 Google Chrome 36.0.1985.125  
 ````````Process Check: objlist.exe by Laurent````````  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malin Desktop SecurityCheck.exe  

 Malin AppData Local Temp\RarSFX0\SecurityCheck\Objlist.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

C:\Users\Default\AppData\Local\Pokki

C:\Users\Malin\AppData\Local\Temp\Pokki*.log

DeleteKey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki

DeleteKey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf

DeleteKey: HKEY_CURRENT_USER\Software\Pokki

DeleteKey: HKEY_CURRENT_USER\Software\Classes\pokki

Reboot:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Schritt 1
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Schritt 2
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist! Ein kostenloses Anti-Viren Programm, das wir empfehlen, wäre z. B. Avast! Free Antivirus oder Microsoft Security Essentials.
MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Du kannst es zusätzlich zu deinem Anti-Viren Programm verwenden.
Update das Tool und lasse es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
AdwCleaner
Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt von der Herstellerseite auf den Desktop herunterladen. Auch dieses Programm kann parallel zu deinem Anti-Viren Programm verwendet werden.
SpywareBlaster
Eine kurze Einführung findest du Hier

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
NoScript
Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
AdblockPlus
Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
Es spart außerdem Downloadkapazität.

Performance

Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..).
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Danke für die Hilfe :) Hat alles super funktioniert.
Ich habe leider vergessen den Fixlog zu posten, bevor ich DelFix gestartet habe, ich hoffe das war jetzt nicht mehr so wichtig.

Sonst ist alles klar, danke nocheinmal für die Hilfe :)

Ich bin froh, dass wir helfen konnten :abklatsch:

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! :)

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.