Trojaner-Board - Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht (https://www.trojaner-board.de/162549-staendige-werbung-trotz-adblock-inernet-explorer-springt-werbungsseiten-geoeffnet-filepony.html)

Friedrich290

07.01.2015 18:38

Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht

Hallo alle miteinander,
seit einigen Tagen öffnen sich bei meinem Laptop, mit Windows 8.1, nur noch kleine Werbefenster trotz Add-Block, außerdem versuchen sich Progamme wie Health Alert und PC Speed up PC Beschleuniger zu installieren. Ich hatte zuerst eine Test-Version von Mc-Afee auf dem Laptop, dieser zeigte mir keine Viren oder ähnliches an. Diesen habe ich deinstalliert.
Danach scannte der Windows 8.1 Virenscanner und fand Viren etc. Daher installierte ich die kostenlose Version von Aviara und fand folgendes : Exportierte Ereignisse:

07.01.2015 18:10 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 18:10 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.240

07.01.2015 18:10 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 18:09 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 18:09 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 18:06 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1194
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0

07.01.2015 18:06 [System-Scanner] Malware gefunden
Die Datei
'C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XY3RUFZI\adobe
_flash_setup[1].exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/InstallCore.A.338'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 18:04 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XY3RUFZI\adobe
_flash_setup[1].exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/InstallCore.A.338' [adware]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

07.01.2015 14:19 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 694064
Anzahl Verzeichnisse: 36549
Anzahl Malware: 0
Anzahl Warnungen: 1

07.01.2015 14:17 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer 1906DANIEL (192.168.1.3)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://80.157.150.24/update" aktualisiert:
aevdf.dat 8.11.199.240
xbv00189.vdf 8.11.199.228
xbv00190.vdf 8.11.199.234
xbv00191.vdf 8.11.199.240
local000.vdf
repair.rdf 1.0.3.60

07.01.2015 14:16 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.

07.01.2015 13:15 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 5965
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0

07.01.2015 12:41 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 12:41 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.222

07.01.2015 12:40 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 12:39 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 12:39 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 11:50 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 77741
Anzahl Verzeichnisse: 1707
Anzahl Malware: 0
Anzahl Warnungen: 0

07.01.2015 11:26 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 11:26 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.222

07.01.2015 11:26 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 11:26 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 11:26 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 10:16 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 665637
Anzahl Verzeichnisse: 36336
Anzahl Malware: 0
Anzahl Warnungen: 1

07.01.2015 09:59 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 691151
Anzahl Verzeichnisse: 36530
Anzahl Malware: 0
Anzahl Warnungen: 1

07.01.2015 08:17 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer 1906DANIEL (192.168.1.3)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://217.89.105.227/update" aktualisiert:
aevdf.dat 8.11.199.222
xbv00183.vdf 8.11.199.200
xbv00184.vdf 8.11.199.202
xbv00185.vdf 8.11.199.206
xbv00186.vdf 8.11.199.210
xbv00187.vdf 8.11.199.216
xbv00188.vdf 8.11.199.222
local001.vdf
repair.rdf 1.0.3.58

07.01.2015 08:16 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.

07.01.2015 08:16 [Planer] Auftrag gestartet
Auftrag "ReSystemScan"
wurde erfolgreich gestartet.

07.01.2015 08:12 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 0
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0

07.01.2015 08:12 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 08:12 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.198

07.01.2015 08:11 [Planer] Auftrag gestartet
Auftrag "Repair-Scanjob"
wurde erfolgreich gestartet.

07.01.2015 08:11 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 08:10 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 08:10 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 08:09 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 691815
Anzahl Verzeichnisse: 36549
Anzahl Malware: 21
Anzahl Warnungen: 7

07.01.2015 08:09 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Acer\9cb62408-6337-4aaf-b847-df6a2f9c2d24.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '15ea2b77.qua'
verschoben!

07.01.2015 08:09 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\3cf63721-349a-4f96-9b7b-da87ca28b1ba.
dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '3a1c6399.qua'
verschoben!

07.01.2015 08:09 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\AGEIA
Technologies\50d95618-42c8-4c13-9aab-8e16f3d54f12.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '18bc359b.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.1953768.43'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1175
Anzahl Verzeichnisse: 0
Anzahl Malware: 2
Anzahl Warnungen: 0

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4a0e66d7.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '53674929.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\Uninstall.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.103912'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '2c221582.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\886e073d-15cb-4118-b4b8-6946586949e1.
dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '6a651108.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\All Users\RandomPrriCCe\DFVI77nzx5mHE8.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '181a3a66.qua'
verschoben!

07.01.2015 08:07 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1175
Anzahl Verzeichnisse: 0
Anzahl Malware: 3
Anzahl Warnungen: 0

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4a45608d.qua'
verschoben!

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.1953768.43'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '52d24f2b.qua'
verschoben!

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\All Users\RobouSiaver\KhxvIlVvzyR0pN.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\All Users\SaverExtensiOn\8N25NUrrXZ52P2.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\FVXLLYPI.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.1953768.43'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '420b7390.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\YDYXQG.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '499d25b8.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\XSHNPL.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '388b0fb8.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\Downloads\adobe_flash_setup.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/InstallCore.A.338'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '38d1799d.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\Downloads\FLVPlayer-Chrome.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/Yontoo.76224.34'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '51cd7b40.qua'
verschoben!

07.01.2015 08:03 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:03 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.1953768.43'
[adware] gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 07:27 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\3cf63721-349a-4f96-9b7b-da87ca28b1ba.
dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 07:26 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\3cf63721-349a-4f96-9b7b-da87ca28b1ba.
dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:15 [Updater] Update erfolgreich durchgeführt
Update auf Computer 1906DANIEL (192.168.1.6) von "hxxp://217.89.105.217/update"
wurde erfolgreich durchgeführt.
Es sind keine neuen Engine/VDF Dateien verfügbar.

06.01.2015 23:15 [Planer] Auftrag gestartet
Auftrag "AVImmediateUpdateJobEx"
wurde erfolgreich gestartet.

06.01.2015 23:14 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 2496
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0

06.01.2015 23:12 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde abgebrochen!].
Anzahl Dateien: 142586
Anzahl Verzeichnisse: 3356
Anzahl Malware: 0
Anzahl Warnungen: 1

06.01.2015 23:07 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1153
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0

06.01.2015 23:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '52a7c9e9.qua'
verschoben!

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1159
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0

06.01.2015 23:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50bec2a6.qua'
verschoben!

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:06 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:05 [Planer] Auftrag gestartet
Auftrag "ReSystemScan"
wurde erfolgreich gestartet.

06.01.2015 23:03 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1b51ba1b.qua'
verschoben!

06.01.2015 23:03 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 2840
Anzahl Verzeichnisse: 0
Anzahl Malware: 2
Anzahl Warnungen: 0

06.01.2015 23:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:01 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

06.01.2015 23:01 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.198

06.01.2015 23:00 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

06.01.2015 22:59 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

06.01.2015 22:59 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

06.01.2015 22:59 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 3217
Anzahl Verzeichnisse: 0
Anzahl Malware: 13
Anzahl Warnungen: 3

06.01.2015 22:59 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 2733
Anzahl Verzeichnisse: 0
Anzahl Malware: 4
Anzahl Warnungen: 2

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0c79b5f5.qua'
verschoben!
Der Registrierungseintrag
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{320d5d8e-64be-4f8f-8ce6-d7e4ff769664}> wurde erfolgreich
repariert.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1555f4d0.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '506a8dc8.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.dll'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.566272.136' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5fadbd34.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1c52f02b.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '2fee84c7.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec
V10-bho64.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '43cbc6fe.qua'
verschoben!
Der Registrierungseintrag
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{11111111-1111-1111-1111-110611901165}> wurde erfolgreich
repariert.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho64.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0a5cfc1e.qua'
verschoben!

06.01.2015 22:57 [System-Scanner] Malware gefunden
Die Datei 'c:\Program Files (x86)\DeltaFix\DeltaFix.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

06.01.2015 22:57 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\FLVPlayer\FLVPlayer.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/Yontoo.389888'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

06.01.2015 22:57 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Der Registrierungseintrag
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{11111111-1111-1111-1111-110611331115}> wurde erfolgreich
repariert.

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.dll'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.566272.136' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec
V10-bho.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:55 [Planer] Auftrag gestartet
Auftrag "scan_after_installation"
wurde erfolgreich gestartet.

06.01.2015 22:55 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer 1906DANIEL (192.168.1.6)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://62.154.232.9/update" aktualisiert:
aecore.dll 8.3.4.0
aegen.dll 8.1.7.40
aeheur.dll 8.1.4.1454
aeoffice.dll 8.3.1.8
aepack.dll 8.4.0.56
aescript.dll 8.2.2.40
aeexp.dll 8.4.2.48
aeset.dat 8.3.28.4
aedroid.dll 8.4.3.6
aemobile.dll 8.1.2.0
avnetflt.sys 14.0.7.248
avlode.rdf 14.0.4.54
aevdf.dat 8.11.199.198
xbv00012.vdf 8.11.190.32
xbv00042.vdf 8.11.190.56
xbv00043.vdf 8.11.192.58
xbv00044.vdf 8.11.192.86
xbv00045.vdf 8.11.192.110
xbv00046.vdf 8.11.192.134
xbv00047.vdf 8.11.192.138
xbv00048.vdf 8.11.192.140
xbv00049.vdf 8.11.192.144
xbv00050.vdf 8.11.192.146
xbv00051.vdf 8.11.192.148
xbv00052.vdf 8.11.192.152
xbv00053.vdf 8.11.192.154
xbv00054.vdf 8.11.192.158
xbv00055.vdf 8.11.192.160
xbv00056.vdf 8.11.192.162
xbv00057.vdf 8.11.192.166
xbv00058.vdf 8.11.192.168
xbv00059.vdf 8.11.192.172
xbv00060.vdf 8.11.192.236
xbv00061.vdf 8.11.192.238
xbv00062.vdf 8.11.193.22
xbv00063.vdf 8.11.193.42
xbv00064.vdf 8.11.193.66
xbv00065.vdf 8.11.193.68
xbv00066.vdf 8.11.193.70
xbv00067.vdf 8.11.193.76
xbv00068.vdf 8.11.193.78
xbv00069.vdf 8.11.193.98
xbv00070.vdf 8.11.193.118
xbv00071.vdf 8.11.193.138
xbv00072.vdf 8.11.193.158
xbv00073.vdf 8.11.193.160
xbv00074.vdf 8.11.193.162
xbv00075.vdf 8.11.193.168
xbv00076.vdf 8.11.193.170
xbv00077.vdf 8.11.193.172
xbv00078.vdf 8.11.193.174
xbv00079.vdf 8.11.193.176
xbv00080.vdf 8.11.193.180
xbv00081.vdf 8.11.193.184
xbv00082.vdf 8.11.193.188
xbv00083.vdf 8.11.193.190
xbv00084.vdf 8.11.193.192
xbv00085.vdf 8.11.193.194
xbv00086.vdf 8.11.193.196
xbv00087.vdf 8.11.193.198
xbv00088.vdf 8.11.193.202
xbv00089.vdf 8.11.193.208
xbv00090.vdf 8.11.197.100
xbv00091.vdf 8.11.197.116
xbv00092.vdf 8.11.197.134
xbv00093.vdf 8.11.197.152
xbv00094.vdf 8.11.197.154
xbv00095.vdf 8.11.197.156
xbv00096.vdf 8.11.197.158
xbv00097.vdf 8.11.197.160
xbv00098.vdf 8.11.197.162
xbv00099.vdf 8.11.197.164
xbv00100.vdf 8.11.197.166
xbv00101.vdf 8.11.197.170
xbv00102.vdf 8.11.197.172
xbv00103.vdf 8.11.197.174
xbv00104.vdf 8.11.197.190
xbv00105.vdf 8.11.197.204
xbv00106.vdf 8.11.197.218
xbv00107.vdf 8.11.197.232
xbv00108.vdf 8.11.197.248
xbv00109.vdf 8.11.198.6
xbv00110.vdf 8.11.198.20
xbv00111.vdf 8.11.198.36
xbv00112.vdf 8.11.198.38
xbv00113.vdf 8.11.198.40
xbv00114.vdf 8.11.198.54
xbv00115.vdf 8.11.198.56
xbv00116.vdf 8.11.198.70
xbv00117.vdf 8.11.198.88
xbv00118.vdf 8.11.198.100
xbv00119.vdf 8.11.198.112
xbv00120.vdf 8.11.198.114
xbv00121.vdf 8.11.198.126
xbv00122.vdf 8.11.198.138
xbv00123.vdf 8.11.198.150
xbv00124.vdf 8.11.198.162
xbv00125.vdf 8.11.198.176
xbv00126.vdf 8.11.198.178
xbv00127.vdf 8.11.198.180
xbv00128.vdf 8.11.198.182
xbv00129.vdf 8.11.198.184
xbv00130.vdf 8.11.198.186
xbv00131.vdf 8.11.198.188
xbv00132.vdf 8.11.198.192
xbv00133.vdf 8.11.198.194
xbv00134.vdf 8.11.198.198
xbv00135.vdf 8.11.198.210
xbv00136.vdf 8.11.198.220
xbv00137.vdf 8.11.198.230
xbv00138.vdf 8.11.198.240
xbv00139.vdf 8.11.198.242
xbv00140.vdf 8.11.198.252
xbv00141.vdf 8.11.199.6
xbv00142.vdf 8.11.199.16
xbv00143.vdf 8.11.199.28
xbv00144.vdf 8.11.199.38
xbv00145.vdf 8.11.199.40
xbv00146.vdf 8.11.199.42
xbv00147.vdf 8.11.199.44
xbv00148.vdf 8.11.199.46
xbv00149.vdf 8.11.199.48
xbv00150.vdf 8.11.199.58
xbv00151.vdf 8.11.199.66
xbv00152.vdf 8.11.199.74
xbv00153.vdf 8.11.199.82
xbv00154.vdf 8.11.199.90
xbv00155.vdf 8.11.199.92
xbv00156.vdf 8.11.199.94
xbv00157.vdf 8.11.199.102
xbv00158.vdf 8.11.199.110
xbv00159.vdf 8.11.199.118
xbv00160.vdf 8.11.199.126
xbv00161.vdf 8.11.199.128
xbv00162.vdf 8.11.199.130
xbv00163.vdf 8.11.199.132
xbv00164.vdf 8.11.199.134
xbv00165.vdf 8.11.199.136
xbv00166.vdf 8.11.199.138
xbv00167.vdf 8.11.199.142
xbv00168.vdf 8.11.199.144
xbv00169.vdf 8.11.199.146
xbv00170.vdf 8.11.199.148
xbv00171.vdf 8.11.199.158
xbv00172.vdf 8.11.199.164
xbv00173.vdf 8.11.199.172
xbv00174.vdf 8.11.199.178
xbv00175.vdf 8.11.199.180
xbv00176.vdf 8.11.199.182
xbv00177.vdf 8.11.199.184
xbv00178.vdf 8.11.199.186
xbv00179.vdf 8.11.199.188
xbv00180.vdf 8.11.199.192
xbv00181.vdf 8.11.199.196
xbv00182.vdf 8.11.199.198
xbv00183.vdf 8.11.197.100
xbv00184.vdf 8.11.197.100
xbv00185.vdf 8.11.197.100
xbv00186.vdf 8.11.197.100
xbv00187.vdf 8.11.197.100
xbv00188.vdf 8.11.197.100
xbv00189.vdf 8.11.197.100
xbv00190.vdf 8.11.197.100
xbv00191.vdf 8.11.197.100
xbv00192.vdf 8.11.197.100
xbv00193.vdf 8.11.197.100
xbv00194.vdf 8.11.197.100
xbv00195.vdf 8.11.197.100
xbv00196.vdf 8.11.197.100
xbv00197.vdf 8.11.197.100
xbv00198.vdf 8.11.197.100
xbv00199.vdf 8.11.197.100
xbv00200.vdf 8.11.197.100
xbv00201.vdf 8.11.197.100
xbv00202.vdf 8.11.197.100
xbv00203.vdf 8.11.197.100
xbv00204.vdf 8.11.197.100
xbv00205.vdf 8.11.197.100
xbv00206.vdf 8.11.197.100
xbv00207.vdf 8.11.197.100
xbv00208.vdf 8.11.197.100
xbv00209.vdf 8.11.197.100
xbv00210.vdf 8.11.197.100
xbv00211.vdf 8.11.197.100
xbv00212.vdf 8.11.197.100
xbv00213.vdf 8.11.197.100
xbv00214.vdf 8.11.197.100
xbv00215.vdf 8.11.197.100
xbv00216.vdf 8.11.197.100
xbv00217.vdf 8.11.197.100
xbv00218.vdf 8.11.197.100
xbv00219.vdf 8.11.197.100
xbv00220.vdf 8.11.197.100
xbv00221.vdf 8.11.197.100
xbv00222.vdf 8.11.197.100
xbv00223.vdf 8.11.197.100
xbv00224.vdf 8.11.197.100
xbv00225.vdf 8.11.197.100
xbv00226.vdf 8.11.197.100
xbv00227.vdf 8.11.197.100
xbv00228.vdf 8.11.197.100
xbv00229.vdf 8.11.197.100
xbv00230.vdf 8.11.197.100
xbv00231.vdf 8.11.197.100
xbv00232.vdf 8.11.197.100
xbv00233.vdf 8.11.197.100
xbv00234.vdf 8.11.197.100
xbv00235.vdf 8.11.197.100
xbv00236.vdf 8.11.197.100
xbv00237.vdf 8.11.197.100
xbv00238.vdf 8.11.197.100
xbv00239.vdf 8.11.197.100
xbv00240.vdf 8.11.197.100
xbv00241.vdf 8.11.197.100
xbv00242.vdf 8.11.197.100
xbv00243.vdf 8.11.197.100
xbv00244.vdf 8.11.197.100
xbv00245.vdf 8.11.197.100
xbv00246.vdf 8.11.197.100
xbv00247.vdf 8.11.197.100
xbv00248.vdf 8.11.197.100
xbv00249.vdf 8.11.197.100
xbv00250.vdf 8.11.197.100
xbv00251.vdf 8.11.197.100
xbv00252.vdf 8.11.197.100
xbv00253.vdf 8.11.197.100
xbv00254.vdf 8.11.197.100
xbv00255.vdf 8.11.197.100
local000.vdf
webcat0.dat
webcat1.dat
webcat2.dat
webcat3.dat
webcat4.dat
repair.rdf 1.0.3.56

06.01.2015 22:53 [Planer] Auftrag gestartet
Auftrag "update_after_installation"
wurde erfolgreich gestartet.

06.01.2015 22:53 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

06.01.2015 22:53 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

06.01.2015 22:53 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.26.16
VDF Version: 8.11.187.50

Wie in eurer Anleitung geschrieben wollte ich den defogger herunterladen aber jedesmal springt der Windows Explorer auf eine Werbeseite.

Ich hoffe ihr könnt mit meiner Beschreibung des Problems etwas anfangen und könnt mir bei der Behebung helfen, denn ich hab absolut keine Ahnung von sowas.

Vielen Dank !

schrauber

07.01.2015 18:43

Hi,

Firefox oder Chrome installiert?
Dann darüber die Tools laden. Ansonsten Tabs schliessen und versuchen zu laden.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Friedrich290

07.01.2015 20:01

Ich habe den Windows Internetexplorer und den Mozilla Firefox bei beiden wechselt ständig die Seite und gibt ständig Werbung. Den
"ADDITION" muß noch gesendet werden, aber das Posten mit Code-Tags klappt nicht so richtig. Der Fehler sind zu viele Zeichen erschein.

Teil 1

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015

Ran by Daniel (administrator) on 1906DANIEL on 07-01-2015 19:41:46

Running from C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\VOJP8WLO

Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe

(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)

HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-24] (APN)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [se] => C:\Users\Daniel\AppData\Roaming\SkypEmoticons\SE.exe [5679008 2014-12-26] (SkypEmoticons)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe [7843656 2015-01-01] (Pokki)

AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [245056 2014-12-24] (Client Connect LTD)

AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [215360 2014-12-24] (Client Connect LTD)

ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=

HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1420203667&from=ild&uid=WDCXWD10JPVX-22JC3T0_WD-WX41E44ASND6ASND6

SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325580&octid=EB_ORIGINAL_CTID&ISID=M1203C8AE-B98E-4E51-BBEA-935C477E11C9&SearchSource=58&CUI=&UM=2&UP=SP6D09FA68-040B-4BB4-AD0E-11C7FBEF9CAE&q={searchTerms}&SSPV=

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325580&octid=EB_ORIGINAL_CTID&ISID=M1203C8AE-B98E-4E51-BBEA-935C477E11C9&SearchSource=58&CUI=&UM=2&UP=SP6D09FA68-040B-4BB4-AD0E-11C7FBEF9CAE&q={searchTerms}&SSPV=

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = 

BHO: Unisales -> {320d5d8e-64be-4f8f-8ce6-d7e4ff769664} -> C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.x64.dll ()

BHO: unisAlEEs -> {4e07f42f-24d4-4ca3-b699-21d57d5d545d} -> C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.x64.dll ()

BHO: YouettubeAAdBillocke -> {795e9ca3-404a-4c02-a5f5-711739613c13} -> C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.x64.dll ()

BHO: RandomPrriCCe -> {b3cda001-95f1-4b0a-8f60-aadbe91ddc99} -> C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.x64.dll ()

BHO: OptuOn -> {b7f8acb8-6040-49fb-bf3f-71061157540c} -> C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.x64.dll ()

BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll ()

BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll ()

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: RandomPrriCCe -> {b3cda001-95f1-4b0a-8f60-aadbe91ddc99} -> C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.dll ()

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine,S: WebSearch

FF DefaultSearchUrl: hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=

FF SearchEngineOrder.1: WebSearch

FF SearchEngineOrder.1,S: WebSearch

FF SelectedSearchEngine: Trovi search

FF SelectedSearchEngine,S: WebSearch

FF Homepage: about:home

FF Keyword.URL: hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\avira-safesearch.xml

FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\trovi-search.xml

FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\WebSearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml

FF Extension: Unisales - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\3@3AcA.com [2014-12-26]

FF Extension: TheHDvid-Codec V10 - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com [2015-01-02]

FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]

FF Extension: ExstraCoooupON - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\81X@T7ZC6I.edu [2015-01-02]

FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]

FF Extension: YouettubeAAdBillocke - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\APueTDX@U.com [2014-12-26]

FF Extension: MMInimumPRiCEa - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\FUAujg@j.net [2015-01-05]

FF Extension: uonaisaeles - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\LTA@q.net [2014-12-26]

FF Extension: CinemaP-1.9cV02.01 - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\OIBMBKA115048682@HYKFIU97176590.com [2015-01-06]

FF Extension: Avira SafeSearch - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\safesearch@avira.com [2015-01-06]

FF Extension: SparPilot - Gutscheine &amp; mehr... - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\sparpilot@sparpilot.com [2014-12-30]

FF Extension: WEB.DE MailCheck - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\toolbar@web.de [2015-01-02]

FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]

FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]

FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\faststartff@gmail.com

FF HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Firefox\Extensions: [{91EE2399-1C05-90A0-1098-8D7EFA157C7A}] - C:\Program Files (x86)\ver7BetterMarkIt\184.xpi
 

Chrome: 

=======

CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf [2015-01-02]

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]

CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-11-24]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-11-24]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-24] (APN LLC.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)

R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3323200 2014-12-24] (Client Connect LTD)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2014-12-24] (WildTangent)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)

R2 Orbiter; C:/Program Files (x86)/ORBTR/orbiter.dll [492496 2014-12-26] (Client Connect LTD)

R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()

R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)

R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)

R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

R2 webinstrNewH; C:\Windows\system32\Drivers\webinstrNewH.sys [106456 2015-01-02] (Corsica)

R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-07 19:41 - 2015-01-07 19:41 - 00000000 ____D () C:\FRST

2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe

2015-01-07 18:18 - 2015-01-07 18:18 - 00108352 _____ () C:\Users\Daniel\Desktop\avira-Fund.txt

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log

2015-01-07 18:10 - 2015-01-07 18:10 - 00001506 _____ () C:\Windows\PFRO.log

2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe

2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira

2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe

2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-06 21:49 - 2015-01-07 08:11 - 00000000 ____D () C:\ProgramData\RobouSiaver

2015-01-06 21:49 - 2015-01-07 08:11 - 00000000 ____D () C:\ProgramData\RandomPrriCCe

2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe

2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk

2015-01-06 10:23 - 2015-01-07 18:24 - 02096035 _____ () C:\Windows\WindowsUpdate.log

2015-01-02 20:27 - 2015-01-07 08:11 - 00000000 ____D () C:\ProgramData\SaverExtensiOn

2015-01-02 20:27 - 2015-01-06 21:50 - 00000000 ____D () C:\ProgramData\1f0001b3a6cbf8f5

2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe

2015-01-02 15:05 - 2015-01-02 15:06 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher

2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher

2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime

2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game

2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi

2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe

2015-01-02 14:25 - 2015-01-06 20:52 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test

2015-01-02 14:03 - 2015-01-07 18:10 - 00003142 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job

2015-01-02 14:03 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job

2015-01-02 14:03 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job

2015-01-02 14:03 - 2015-01-07 18:10 - 00001364 _____ () C:\Windows\Tasks\YDYXQG.job

2015-01-02 14:03 - 2015-01-02 14:03 - 00006146 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1

2015-01-02 14:03 - 2015-01-02 14:03 - 00005468 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5

2015-01-02 14:03 - 2015-01-02 14:03 - 00004376 _____ () C:\Windows\System32\Tasks\YDYXQG

2015-01-02 14:02 - 2015-01-07 18:10 - 00005536 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job

2015-01-02 14:02 - 2015-01-07 18:10 - 00005200 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job

2015-01-02 14:02 - 2015-01-07 18:10 - 00004176 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job

2015-01-02 14:02 - 2015-01-07 18:10 - 00004176 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job

2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c

2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\CinemaP-1.9cV02.01

2015-01-02 14:02 - 2015-01-04 11:42 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrossBrowser

2015-01-02 14:02 - 2015-01-02 14:02 - 00008540 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6

2015-01-02 14:02 - 2015-01-02 14:02 - 00008204 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7

2015-01-02 14:02 - 2015-01-02 14:02 - 00007180 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4

2015-01-02 14:02 - 2015-01-02 14:02 - 00007180 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3

2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin

2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNewH_01009.Wdf

2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AskPartnerNetwork

2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork

2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\ProgramData\APN

2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork

2015-01-02 14:00 - 2015-01-02 13:59 - 00106456 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNewH.sys

2015-01-02 13:59 - 2015-01-07 18:10 - 00005536 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00005200 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00004512 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00003142 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00001366 _____ () C:\Windows\Tasks\KYBEFZU.job

2015-01-02 13:59 - 2015-01-07 18:10 - 00001364 _____ () C:\Windows\Tasks\XSHNPL.job

2015-01-02 13:59 - 2015-01-07 17:49 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft

2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7

2015-01-02 13:59 - 2015-01-02 13:59 - 00008540 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6

2015-01-02 13:59 - 2015-01-02 13:59 - 00008204 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7

2015-01-02 13:59 - 2015-01-02 13:59 - 00007516 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4

2015-01-02 13:59 - 2015-01-02 13:59 - 00006146 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1

2015-01-02 13:59 - 2015-01-02 13:59 - 00005468 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5

2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\XSHNPL

2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\KYBEFZU

2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java

2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Local\globalUpdate

2015-01-02 13:58 - 2015-01-06 22:57 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVPlayer

2015-01-02 13:58 - 2015-01-02 13:59 - 00607216 _____ () C:\Users\Daniel\Downloads\Setup.exe

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe

2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android

2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk

2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______

2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___

2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689

2014-12-30 23:24 - 2014-12-30 23:27 - 01045496 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall.exe

2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software

2014-12-27 20:25 - 2015-01-07 16:44 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2

2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk

2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2

2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2

2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe

2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe

2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys

2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys

2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys

2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll

2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll

2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll

2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll

2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll

2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe

2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll

2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls

2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll

2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll

2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll

2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll

2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll

2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll

2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll

2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll

2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll

2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll

2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll

2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-12-26 19:09 - 2014-12-26 19:09 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\EZDownloader

2014-12-26 19:08 - 2014-12-26 19:08 - 00000000 ____D () C:\Windows\SysWOW64\X86

2014-12-26 19:08 - 2014-12-26 19:08 - 00000000 ____D () C:\Windows\SysWOW64\AMD64

2014-12-26 19:08 - 2014-12-26 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader

2014-12-26 19:07 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\OptuOn

2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\Users\Daniel\AppData\Local\SearchProtect

2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg

2014-12-26 19:06 - 2015-01-03 21:55 - 00000000 ____D () C:\Program Files (x86)\ORBTR

2014-12-26 19:06 - 2014-12-30 15:41 - 00000000 ____D () C:\Program Files (x86)\SearchProtect

2014-12-26 19:03 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\Unisales

2014-12-26 19:03 - 2014-12-26 19:03 - 00000000 ____D () C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa

2014-12-26 19:02 - 2014-12-26 19:08 - 00000000 ____D () C:\Program Files (x86)\EZDownloader

2014-12-26 19:02 - 2014-12-26 19:02 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\SkypEmoticons

2014-12-26 19:02 - 2014-12-26 19:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkypEmoticons

2014-12-26 19:01 - 2015-01-06 22:57 - 00000000 ____D () C:\Program Files (x86)\DeltaFix

2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth

2014-12-26 19:00 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke

2014-12-26 19:00 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\2233787286284925173

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles

2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia

2014-12-25 20:54 - 2015-01-07 18:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe

2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben

2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla

2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla

2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe

2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype

2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype

2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe

2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url

2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:49 - 2015-01-07 18:11 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe

2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA

2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games

2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk

2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015

2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015

2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList

2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial

2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki

2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware

2014-12-24 21:03 - 2015-01-03 16:55 - 00002335 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk

2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk

2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks

2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk

2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4

2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater

2014-12-24 20:15 - 2014-12-24 20:15 - 01174352 _____ () C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe

2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk

2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk

2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll

2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll

2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google

2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll

2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll

2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll

2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll

2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll

2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll

2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe

2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll

2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll

2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys

2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll

2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll

2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll

2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-12-24 19:38 - 2015-01-07 14:08 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList

2014-12-24 19:33 - 2015-01-07 18:36 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002

2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk

2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM

2014-12-24 19:28 - 2015-01-07 18:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps

2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks

2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud

2014-12-24 19:28 - 2014-12-24 19:28 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk

2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent

2014-12-24 19:27 - 2015-01-07 18:11 - 00000000 ____D () C:\Users\Daniel\OneDrive

2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk

2014-12-24 19:26 - 2015-01-06 14:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi

2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream

2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK

2014-12-24 19:12 - 2014-12-24 19:12 - 00002625 _____ () C:\Users\Public\Desktop\eBay.lnk

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-12-24 19:11 - 2015-01-02 14:01 - 00001682 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages

2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore

2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk

2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store

2014-12-24 19:10 - 2015-01-07 08:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Pokki

2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel

2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten

2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-07 19:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru

2015-01-07 18:24 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2015-01-07 18:24 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2015-01-07 18:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-07 18:10 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-07 11:54 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-01-07 08:09 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2015-01-07 08:09 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator

2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports

2015-01-06 14:58 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2015-01-04 11:47 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF

2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache

2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup

2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default

2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer

2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore

2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games

2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM

2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM
 

Some content of TEMP:

====================

C:\Users\Daniel\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-07 07:25
 

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber

08.01.2015 07:18

Einfach das Log aufteilen und mehrere Posts benutzen :)

Friedrich290

08.01.2015 10:32

Hallo,

anbei das "Addition".

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015

Ran by Daniel at 2015-01-07 19:42:38

Running from C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\VOJP8WLO

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.05.2003 - Acer Incorporated)

abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)

abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)

abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.06.2001.3 - Acer Incorporated)

abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.01.2005.1 - Acer Incorporated)

Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)

Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)

Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8107 - Acer Incorporated)

Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.03.2002 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8105 - Acer Incorporated)

Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)

Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)

Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)

Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)

Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden

AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.03.2001.0 - Acer Incorporated)

Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{8DCCC556-265B-478A-8B32-C12DA988BA74}) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)

CHIP Updater (HKLM-x32\...\CHIP Updater_is1) (Version: 2.39 - Abelssoft)

CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)

CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)

eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)

Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.5.2 - SCS Software)

EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ATTENTION

Farm to Fork Collector's Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden

Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)

Game Explorer Categories - genres (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 11.0.0.7 - WildTangent, Inc.)

Game Explorer Categories - main (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 11.0.0.7 - WildTangent, Inc.)

Governor of Poker 2 Premium Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)

Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Jewel Match 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden

King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden

Landwirtschafts Simulator 15 (HKLM-x32\...\FarmingSimulator2015DE_is1) (Version: 1.2.0.0 - GIANTS Software)

LUXOR Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)

Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)

NVIDIA Grafiktreiber 332.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.35 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)

NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation)

Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.59 - WildTangent) Hidden

Pokki (HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Pokki) (Version: 0.269.5.367 - Pokki) <==== ATTENTION!

Pokki Start Menu (HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Pokki) (Version: 0.269.2.471 - Pokki)

Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21247 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.25.108.2014 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7203 - Realtek Semiconductor Corp.)

Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1500}) (Version: 12.21.0.114 - APN, LLC) <==== ATTENTION

Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.19.11.45 - Client Connect LTD) <==== ATTENTION

SkypEmoticons (HKLM-x32\...\SkypEmoticons_is1) (Version:  - ) <==== ATTENTION

Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.51 - WildTangent) Hidden

Train Simulator 2015 (HKLM-x32\...\Steam App 24010) (Version:  - RailSimulator.com)

Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden

UberRevel (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}) (Version:  - PortTartan) <==== ATTENTION

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (x32 Version: 4.0.11.13 - WildTangent) Hidden

Zuma's Revenge (x32 Version: 2.2.0.97 - WildTangent) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-223822767-1807346583-171944255-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {005282E6-5CC6-4BF7-98C5-90CBAB18AF32} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION

Task: {04FDA3B4-190A-49C6-9F22-60ECBB7D186E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)

Task: {060D00F5-1B11-4D47-A241-1B2AB75C46DB} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)

Task: {09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION

Task: {23D62AD5-820A-4D13-89EB-DEC1CFFB8180} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-27] (Microsoft Corporation)

Task: {25310ADF-62CC-4A98-85E2-575BEB37296A} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2014-11-19] (Acer)

Task: {2778DC1C-DF9B-44AA-AD01-974499DAB3EC} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-06-12] (Acer Incorporated)

Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()

Task: {2CDB4F58-A85B-44BA-8169-B17F48E4A352} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION

Task: {3D579731-9F71-434C-A882-4C8FFDB72088} - System32\Tasks\YDYXQG => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION

Task: {454BA2C3-F94E-44A5-8F7E-8A563168E5A2} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION

Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()

Task: {46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39} - System32\Tasks\XSHNPL => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION

Task: {46D85616-C991-4614-8EAE-F85312D2598B} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-06-10] (Acer Incorporate)

Task: {64B46CB1-7ED1-4E5E-A643-CDC49CF7DEDC} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)

Task: {7322D2DA-6C4A-4CDE-9632-076A5631BA28} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: {73D1D1E0-573E-4AFB-9EF2-26758087333A} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION

Task: {77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION

Task: {7A635968-AEB1-476F-9CE0-C3010E47BAC9} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)

Task: {9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B} - System32\Tasks\KYBEFZU => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION

Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)

Task: {C7645734-8799-4C04-95FA-0FAF3E89B85F} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe [2014-12-04] (CHIP)

Task: {CE01B344-EB87-4532-A1F4-E725F78EB745} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION

Task: {CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: {D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION

Task: {D2C85179-59A4-4810-8DC7-58FE0ECD23AA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated)

Task: {D8B8C766-27EB-45EC-8EE9-48E488196B62} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION

Task: {E744ED2B-A072-4D77-99F5-E32DBFB79ACF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\KYBEFZU.job => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION

Task: C:\Windows\Tasks\XSHNPL.job => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION

Task: C:\Windows\Tasks\YDYXQG.job => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION
 

==================== Loaded Modules (whitelisted) =============
 

2014-07-25 22:23 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

2014-08-30 14:58 - 2014-01-08 01:48 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-08-30 15:01 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2015-01-06 21:49 - 2015-01-06 21:49 - 00566272 _____ () C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Daniel\OneDrive:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-223822767-1807346583-171944255-500 - Administrator - Disabled)

Daniel (S-1-5-21-223822767-1807346583-171944255-1002 - Administrator - Enabled) => C:\Users\Daniel

Gast (S-1-5-21-223822767-1807346583-171944255-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-223822767-1807346583-171944255-1004 - Limited - Enabled)

UpdatusUser (S-1-5-21-223822767-1807346583-171944255-1001 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/07/2015 06:17:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d

Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001425

ID des fehlerhaften Prozesses: 0xd28

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3

Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
 

Error: (01/07/2015 06:12:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AcerPortal.exe, Version: 3.0.3.2000, Zeitstempel: 0x546c82a9

Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.3.9600.17331, Zeitstempel: 0x54023318

Ausnahmecode: 0xc0000005

Fehleroffset: 0x001bf5f0

ID des fehlerhaften Prozesses: 0x80c

Startzeit der fehlerhaften Anwendung: 0xAcerPortal.exe0

Pfad der fehlerhaften Anwendung: AcerPortal.exe1

Pfad des fehlerhaften Moduls: AcerPortal.exe2

Berichtskennung: AcerPortal.exe3

Vollständiger Name des fehlerhaften Pakets: AcerPortal.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcerPortal.exe5
 

Error: (01/07/2015 05:45:37 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: InfamousHeroesEntry.exe, Version: 0.0.0.0, Zeitstempel: 0x5416e479

Name des fehlerhaften Moduls: InfamousHeroesEntry.exe, Version: 0.0.0.0, Zeitstempel: 0x5416e479

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00161ed0

ID des fehlerhaften Prozesses: 0xac0

Startzeit der fehlerhaften Anwendung: 0xInfamousHeroesEntry.exe0

Pfad der fehlerhaften Anwendung: InfamousHeroesEntry.exe1

Pfad des fehlerhaften Moduls: InfamousHeroesEntry.exe2

Berichtskennung: InfamousHeroesEntry.exe3

Vollständiger Name des fehlerhaften Pakets: InfamousHeroesEntry.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: InfamousHeroesEntry.exe5
 

Error: (01/07/2015 05:45:37 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: InfamousHeroesEntry.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00BA1ED0

Stapel:
 

Error: (01/07/2015 05:42:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: InfamousHeroesEntry.exe, Version: 0.0.0.0, Zeitstempel: 0x5416e479

Name des fehlerhaften Moduls: combase.dll, Version: 6.3.9600.17031, Zeitstempel: 0x53086d7c

Ausnahmecode: 0xc000027b

Fehleroffset: 0x000fb1d7

ID des fehlerhaften Prozesses: 0x1e14

Startzeit der fehlerhaften Anwendung: 0xInfamousHeroesEntry.exe0

Pfad der fehlerhaften Anwendung: InfamousHeroesEntry.exe1

Pfad des fehlerhaften Moduls: InfamousHeroesEntry.exe2

Berichtskennung: InfamousHeroesEntry.exe3

Vollständiger Name des fehlerhaften Pakets: InfamousHeroesEntry.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: InfamousHeroesEntry.exe5
 

Error: (01/07/2015 05:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: BackgroundAgent.exe, Version: 1.0.1.6, Zeitstempel: 0x546963f7

Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00056b1d

ID des fehlerhaften Prozesses: 0x568

Startzeit der fehlerhaften Anwendung: 0xBackgroundAgent.exe0

Pfad der fehlerhaften Anwendung: BackgroundAgent.exe1

Pfad des fehlerhaften Moduls: BackgroundAgent.exe2

Berichtskennung: BackgroundAgent.exe3

Vollständiger Name des fehlerhaften Pakets: BackgroundAgent.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: BackgroundAgent.exe5
 

Error: (01/07/2015 04:56:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AcerPortal.exe, Version: 3.0.3.2000, Zeitstempel: 0x546c82a9

Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.3.9600.17331, Zeitstempel: 0x54023318

Ausnahmecode: 0xc0000005

Fehleroffset: 0x001bf5f0

ID des fehlerhaften Prozesses: 0x1440

Startzeit der fehlerhaften Anwendung: 0xAcerPortal.exe0

Pfad der fehlerhaften Anwendung: AcerPortal.exe1

Pfad des fehlerhaften Moduls: AcerPortal.exe2

Berichtskennung: AcerPortal.exe3

Vollständiger Name des fehlerhaften Pakets: AcerPortal.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcerPortal.exe5
 

Error: (01/07/2015 00:42:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AcerPortal.exe, Version: 3.0.3.2000, Zeitstempel: 0x546c82a9

Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.3.9600.17331, Zeitstempel: 0x54023318

Ausnahmecode: 0xc0000005

Fehleroffset: 0x001bf5f0

ID des fehlerhaften Prozesses: 0x16b0

Startzeit der fehlerhaften Anwendung: 0xAcerPortal.exe0

Pfad der fehlerhaften Anwendung: AcerPortal.exe1

Pfad des fehlerhaften Moduls: AcerPortal.exe2

Berichtskennung: AcerPortal.exe3

Vollständiger Name des fehlerhaften Pakets: AcerPortal.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcerPortal.exe5
 

Error: (01/07/2015 11:21:19 AM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost (4196) Instance: Versuch, Datei "C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 

Error: (01/07/2015 11:21:09 AM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost (4196) Instance: Versuch, Datei "C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
 

System errors:

=============

Error: (01/07/2015 06:11:01 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (01/07/2015 06:11:01 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (01/07/2015 06:11:01 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (01/07/2015 06:11:00 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (01/07/2015 06:11:00 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (01/07/2015 06:11:00 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (01/07/2015 06:10:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.
 

Error: (01/07/2015 05:41:28 PM) (Source: NetBT) (EventID: 4321) (User: )

Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.1.3

registriert werden. Der Computer mit IP-Adresse 192.168.1.2 hat nicht

zugelassen, dass dieser Computer diesen Namen verwendet.
 

Error: (01/07/2015 04:51:25 PM) (Source: DCOM) (EventID: 10010) (User: 1906DANIEL)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (01/07/2015 04:51:25 PM) (Source: DCOM) (EventID: 10010) (User: 1906DANIEL)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
 

Microsoft Office Sessions:

=========================

Error: (01/07/2015 06:17:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe34.0.5.54435475dd5dmozalloc.dll34.0.5.54435475d6648000000300001425d2801d02a9dcc9ee6eeC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll19e0c0a6-9691-11e4-826b-f8a963e7625c
 

Error: (01/07/2015 06:12:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: AcerPortal.exe3.0.3.2000546c82a9SHELL32.dll6.3.9600.1733154023318c0000005001bf5f080c01d02a9d1feb579dC:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exeC:\Windows\SYSTEM32\SHELL32.dll5ef1c451-9690-11e4-826b-f8a963e7625c
 

Error: (01/07/2015 05:45:37 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: InfamousHeroesEntry.exe0.0.0.05416e479InfamousHeroesEntry.exe0.0.0.05416e479c000000500161ed0ac001d02a99472f600dC:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exeC:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exe9ac2bbb9-968c-11e4-826a-f8a963e7625cGAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtjApp
 

Error: (01/07/2015 05:45:37 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: InfamousHeroesEntry.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00BA1ED0

Stapel:
 

Error: (01/07/2015 05:42:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: InfamousHeroesEntry.exe0.0.0.05416e479combase.dll6.3.9600.1703153086d7cc000027b000fb1d71e1401d02a989d0ff00aC:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exeC:\Windows\SYSTEM32\combase.dll29934c95-968c-11e4-826a-f8a963e7625cGAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtjApp
 

Error: (01/07/2015 05:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: BackgroundAgent.exe1.0.1.6546963f7MSVCR90.dll9.0.30729.838751ea24a5c000000500056b1d56801d02a924be2e1c0C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exeC:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll275df671-9687-11e4-826a-f8a963e7625c
 

Error: (01/07/2015 04:56:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: AcerPortal.exe3.0.3.2000546c82a9SHELL32.dll6.3.9600.1733154023318c0000005001bf5f0144001d02a92843ddc02C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exeC:\Windows\SYSTEM32\SHELL32.dllc35a02e7-9685-11e4-826a-f8a963e7625c
 

Error: (01/07/2015 00:42:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: AcerPortal.exe3.0.3.2000546c82a9SHELL32.dll6.3.9600.1733154023318c0000005001bf5f016b001d02a6f0096f104C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exeC:\Windows\SYSTEM32\SHELL32.dll3f8a209f-9662-11e4-826a-f8a963e7625c
 

Error: (01/07/2015 11:21:19 AM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost4196Instance: C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 

Error: (01/07/2015 11:21:09 AM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost4196Instance: C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz

Percentage of memory in use: 32%

Total physical RAM: 8115.27 MB

Available physical RAM: 5450.68 MB

Total Pagefile: 9395.27 MB

Available Pagefile: 6431.85 MB

Total Virtual: 131072 MB

Available Virtual: 131071.79 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:914.95 GB) (Free:861.22 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 42A7C44F)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Ich habe den Beitrag von Merle mit meinen verwechselt und den Revo Unistaller heruntergeladen. Aber den Scan mit Combofix funktionierte nicht. Brauchst du den Scan von Farbar's Recovery Scan Tool von heute ?

schrauber

08.01.2015 11:30

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

EZDownloader

Pokki

Search App by Ask

Search Protect

SkypEmoticons

UberRevel
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Friedrich290

08.01.2015 15:13

Hallo,
der Laptop scheint jetzt sauber zu sein. anbei die erste Datei:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 08.01.2015

Suchlauf-Zeit: 13:06:00

Logdatei: MBAm.txt

Administrator: Ja
 

Version: 2.00.4.1028

Malware Datenbank: v2015.01.08.09

Rootkit Datenbank: v2015.01.07.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 8.1

CPU: x64

Dateisystem: NTFS

Benutzer: Daniel
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 378903

Verstrichene Zeit: 18 Min, 34 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 1

PUP.Optional.Multiplug, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, 5200, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4]
 

Module: 0

(Keine schädliche Elemente erkannt)
 

Registrierungsschlüssel: 50

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{320d5d8e-64be-4f8f-8ce6-d7e4ff769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\., In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\..9, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\., In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\..9, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}\INPROCSERVER32, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{795e9ca3-404a-4c02-a5f5-711739613c13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{795E9CA3-404A-4C02-A5F5-711739613C13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{795E9CA3-404A-4C02-A5F5-711739613C13}, Löschen bei Neustart, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{795E9CA3-404A-4C02-A5F5-711739613C13}, Löschen bei Neustart, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{795E9CA3-404A-4C02-A5F5-711739613C13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{795E9CA3-404A-4C02-A5F5-711739613C13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{795E9CA3-404A-4C02-A5F5-711739613C13}\INPROCSERVER32, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{4e07f42f-24d4-4ca3-b699-21d57d5d545d}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, Löschen bei Neustart, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, Löschen bei Neustart, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}\INPROCSERVER32, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{b7f8acb8-6040-49fb-bf3f-71061157540c}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\OptOn.OptOn, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\OptOn.OptOn.9, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OptOn.OptOn, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OptOn.OptOn.9, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, Löschen bei Neustart, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, Löschen bei Neustart, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{B7F8ACB8-6040-49FB-BF3F-71061157540C}\INPROCSERVER32, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, In Quarantäne, [6d8ccf253a4ffb3bb35fa83e0ef69f61], 

PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, In Quarantäne, [d128797bd2b72d098a87bf27ff05946c], 

PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV02.01, In Quarantäne, [699003f12b5e38fe7358f18a08fb19e7], 

PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV02.01-nv, In Quarantäne, [42b78173fc8dc2743f8cf982e023e41c], 

PUP.Optional.HDVid.A, HKLM\SOFTWARE\WOW6432NODE\TheHDvid-Codec V10, In Quarantäne, [00f9a351b3d646f09f63ff852cd7936d], 

PUP.Optional.HDVid.A, HKLM\SOFTWARE\WOW6432NODE\TheHDvid-Codec V10-nv, In Quarantäne, [5e9b7b79a0e9ef471be72d578f74b749], 

PUP.Optional.Cinema.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.9cV02.01-nv, Löschen bei Neustart, [23d6c62ef099dc5ae2ea3e3de3207f81], 

PUP.Optional.Cinema.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CinemaP-1.9cV02.01, Löschen bei Neustart, [49b01ed6bacf979f9934afcc09fa34cc], 

PUP.Optional.HDVid.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TheHDvid-Codec V10, Löschen bei Neustart, [53a68e66cfbac96dcc388202cf34dd23], 

PUP.Optional.CrossRider.A, HKU\S-1-5-21-223822767-1807346583-171944255-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Löschen bei Neustart, [eb0e61930d7c1521915268104eb50ff1], 

PUP.Optional.Cinema.A, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.9cV02.01-nv, Löschen bei Neustart, [99609e564643eb4b7359542747bc758b], 

PUP.Optional.Cinema.A, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CinemaP-1.9cV02.01, Löschen bei Neustart, [956406eea4e5ee482ca12457996a57a9], 

PUP.Optional.HDVid.A, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TheHDvid-Codec V10, Löschen bei Neustart, [e1187183acddd85ed62e4f358182ff01], 
 

Registrierungswerte: 0

(Keine schädliche Elemente erkannt)
 

Registrierungsdaten: 0

(Keine schädliche Elemente erkannt)
 

Ordner: 28

PUP.Optional.HDVid.A, C:\Users\Daniel\AppData\LocalLow\TheHDvid-Codec V10, In Quarantäne, [40b94ba952371d199a3681caa063de22], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults\preferences, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale\en-US, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\defaults, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\defaults\preferences, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\userCode, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\locale, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\locale\en-US, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
 

Dateien: 249

PUP.Optional.Multiplug, C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.x64.dll, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4], 

PUP.Optional.Multiplug, C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.x64.dll, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 

PUP.Optional.Multiplug, C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.x64.dll, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 

PUP.Optional.Multiplug, C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.x64.dll, In Quarantäne, [f207db19f594a6901525d50852b0be42], 

PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-64.exe, In Quarantäne, [17e2c430127789adb0eabe0124e14bb5], 

PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\utils.exe, In Quarantäne, [6891ae46ea9f5fd795ced47815eb9d63], 

PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RM0K7HI.dll, In Quarantäne, [77820fe50b7e1125a8268726df22926e], 

PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RPU4APW.exe, In Quarantäne, [fdfce212bdccb086a12d46675ea36a96], 

PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RSC6TE4.exe, In Quarantäne, [5c9df5ffb8d19e98f5d95a53c9380bf5], 

PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RX9YZ1P.dll_1419950450736, In Quarantäne, [14e5dc188efb0c2a5e705855c63baa56], 

PUP.Optional.SearchProtect.A, C:\Users\Daniel\AppData\Local\Temp\nsl2F31.tmp\SPTool.dll, In Quarantäne, [e81131c39dec8ea8b31b7d307e83639d], 

PUP.Optional.SoftPulse, C:\Users\Daniel\Downloads\Setup.exe, In Quarantäne, [a356975d4e3b94a2a7c337cd7c86cb35], 

PUP.Optional.Giga, C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall.exe, In Quarantäne, [5f9a6e86f990c571a5ff5b1e3cc9bd43], 

PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\VCLdr64.dll, Löschen bei Neustart, [6c8dd2227a0f43f38e400ba291707a86], 

PUP.Optional.SearchProtect.A, C:\Windows\apppatch\nbin\VC32Loader.dll, In Quarantäne, [05f46b89f7923501e0ee37768180639d], 

PUP.Optional.WebInstrNew.A, C:\Windows\System32\drivers\Msft_Kernel_webinstrNewH_01009.Wdf, In Quarantäne, [54a5837187029b9b0d040068a2617c84], 

PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, In Quarantäne, [28d1856f2b5eaa8c01141fc7ee1620e0], 

PUP.Optional.HDVid.A, C:\Users\Daniel\AppData\LocalLow\TheHDvid-Codec V10\DTFProxyToServerSect_bf34e9160052c013241470f6cdde3bdb00063315_p6676.dat, In Quarantäne, [40b94ba952371d199a3681caa063de22], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome.manifest, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\install.rdf, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\45f27d3a42f9f216b37f9da873a3f185.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\6a0279488b82574dda7dcacabe41afc9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\720e981deeaaa2f6f4bd7f4148a2aab6.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\7eecbd99bfcf117b69c4d05c4e3d845a.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\8a349ec2666c5ca69d6930fe9cfa4f03.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\background.html, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\bfc4f43035ef3163142ba94108c2a84a.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\browser.xul, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\dialog.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\options.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\options.xul, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\search_dialog.xul, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\11f5e980396e51b75ddb277fc345029d.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\1ececf1363fb476c12c8551488ec8d00.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\33d3b528a8112b532399604d419f84a8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\3a51d51c00b75232b8c278e2397d6303.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\50ba9c8532a5de54e08a0e9e6c51bab3.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\51c3775e40fdad33db912dbb139c3b69.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\5fea9bb084ac00ca455cfa24e0fa200e.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\693710036dc8a3b30fc50041fb31216a.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\72e7f684a0a0c048eba89dd4528c5933.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\9d4c3bb73d35037d756e7b4556142057.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\a746d3d597d041d449cf657b15bb96ce.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\d6b145166fda53b450afaa46e78fb066.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\e46ef22ca915a1158ea709b18db8f969.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\efb59c4236d5d483544c2dce4c0537df.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\f60ca31408128e9ef2e0f172c15da0e8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\fe108b41f66bdd515adfbe96ddcbb3b5.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\5ae6159028b3f5a9925e0f22a4b27d78.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\048318c7efe3ffa1ad57061bc9d719f8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\18406edbecfd9e0a224e194fc2cb32b6.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\185fcaf33682e5b639e0b82532030dc1.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\1fcb67101ffab596113e6fe407dfe8bf.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\200a3ffa41bf2f8aa9678c393ef66929.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\26ee0311c546ea50605cb50dd5e88e25.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\2958a1e82b43c5797cc21d9bfd459ec8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\2db207930176c1ad6ab98c747bfc82be.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\3d818361e0c1c4de1b85cc4900cc01a6.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\4dc70b438d7319819c592f35a522a5f9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\608aae36a8ba40618eb09068d0ddbff2.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\71a4e23833c20c1122a6446be6d0d371.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\7cb87d7e76a553b25c08b55536556dfc.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\92692b4c655b0d003a7142003796beff.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\b241f2e30d65a7809c9b0f3af586397b.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\b79582d07a5fa1081e6ac10d586d6336.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\c4b6c14ae956520cd61dbfa2f0620401.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\dae5449b33ec25ebf25d453a9ac70370.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\f5e0062bbde8251a18d0520452caa7d9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\installer.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults\preferences\prefs.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\manifest.xml, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins.json, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\102.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\13.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\14.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\16.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\17.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\180.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\184.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\195.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\220.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\221.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\223.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\230.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\233.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\234.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\242.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\246.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\253.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\262.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\263.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\273.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\281.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\301.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\337.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\339.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\345.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\354.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\4.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\47.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\64.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\7.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\78.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\91.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\93.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode\background.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode\extension.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale\en-US\translations.dtd, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button1.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button2.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button3.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button4.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button5.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\crossrider_statusbar.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon128.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon16.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon24.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon48.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\panelarrow-up.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\popup.html, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\skin.css, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\update.css, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome.manifest, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\install.rdf, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\085db06501d9955ffd48c6681a3c1df9.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\4628f4593b2fb3a09bd0abc38c208ade.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\71b6cc40e6b589c8792a0158dbf12835.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\8fbedf8b678dec148eb5c0cd93213dd3.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\background.html, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\browser.xul, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\c732941ec3d0c9a4f1991fa139a893e5.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\d571ad79618298a1043a86245a60a538.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\dialog.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\options.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\options.xul, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\search_dialog.xul, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\6a1568a4f35c82de1b7762ead2783e0c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\2054e57c1279da8f6fb6e599ef15fbdb.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\395a40f79af4913d457407d35420614c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\51921759e0d465ff677317304c1e898c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\51dfd897395622fc7136a41d5aa1efe2.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\59533cfe112767782deb2a36c6227120.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\60b00eae643d6289c368000d287130d5.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\63a49e82b1c418a9c3f708cba260d781.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\640905db9046044d2f9e24fbd10bcaa8.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\6b0207b0d4d13ba9a37aef821b7c232e.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\8318b1d0d578a66b1c041231af36d2d8.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\9837430570881749a7590be8b96fe13c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\a6a8f20ac8c44e0bc6231243cf1909ec.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\b076afb243f85b0eec5e0a3a0ad8601d.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\d48950a2b286accd3abe0595d584aad0.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\f2094ebc747a74b37b1488bb3161e4e7.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\31a24e5a848ae6a4cfd113df1871eb26.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\448a1dadc3e71fe162622081fe8e6a84.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\4f8628abd5bb2b3ba752a7001b8e0e8d.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\5709d88e3be4c4114936b9b51a3a109e.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\6107c53f358d8c13b6c5cace1e11279a.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\618676157e21dab4747a10c2f55375e1.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\637a7368697214c1c2d8858ba49c8b78.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\67e93a1ea854f1164a03ecd12d2ffcb2.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\6bb8ffa10b2b2a484d914ad1f2adff69.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\74895f179956e690c5a38380f459d58c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\7e123787f00bec121ef4edfd354070ba.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\b23084a85a9be1ca57aa22445ec5e43e.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\b5b5030280b91b0f4842d2a52e4c8cbd.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\b62039dc9f4782e49f6ccce36b748366.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\ba97d07e90b35166f7b059028db7f941.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\c7de9556040782f36a6499fae81bb815.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\e3bb3bcfb9de6bd3d85df96d65f9e40b.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\e740475822d71581a0af6c941cbabb35.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\e86e3f99a8d6467956772d69b83280bb.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\eb9537b993ba48edb51e7fcdab487a49.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\installer.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\defaults\preferences\prefs.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\manifest.xml, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins.json, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\223.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1000020.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1000025.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1000030.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\102.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\104.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\123.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\13.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\14.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\16.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\17.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\177.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\178.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\179.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\180.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\182.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\183.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\195.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\207.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\21.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\22.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\220.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\221.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\226.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\234.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\246.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\253.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\262.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\263.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\273.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\28.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\281.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\301.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\345.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\354.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\4.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\47.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\64.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\7.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\72.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\78.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\9.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\91.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\93.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\98.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\userCode\background.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\userCode\extension.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\locale\en-US\translations.dtd, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button1.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button2.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button3.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button4.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button5.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\crossrider_statusbar.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon128.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon16.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon24.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon48.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\panelarrow-up.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\popup.html, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\skin.css, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\update.css, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\background.html, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\bgNova.html, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\ce1a2eb2-1515-4c1f-964c-23c6106227dd.dll, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01.ico, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b.xpi, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.crx, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
 

Physische Sektoren: 0

(Keine schädliche Elemente erkannt)
 
 

(end)

die zweite Datei:

Code:

# AdwCleaner v4.107 - Bericht erstellt am 08/01/2015 um 12:57:27

# Aktualisiert 07/01/2015 von Xplode

# Database : 2015-01-03.1 [Live]

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Daniel - 1906DANIEL

# Gestartet von : C:\Users\Daniel\Desktop\AdwCleaner_4.107.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : CltMngSvc

Dienst Gelöscht : SPPD

Dienst Gelöscht : webinstrNewH
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\apn

Ordner Gelöscht : C:\ProgramData\RandomPrriCCe

Ordner Gelöscht : C:\ProgramData\RobouSiaver

Ordner Gelöscht : C:\ProgramData\SaverExtensiOn

Ordner Gelöscht : C:\ProgramData\1f0001b3a6cbf8f5

Ordner Gelöscht : C:\ProgramData\2233787286284925173

Ordner Gelöscht : C:\Program Files (x86)\SearchProtect

Ordner Gelöscht : C:\Program Files (x86)\DeltaFix

Ordner Gelöscht : C:\Users\Daniel\AppData\Local\Temp\apn

Ordner Gelöscht : C:\Users\Daniel\AppData\Local\globalUpdate

Ordner Gelöscht : C:\Users\Daniel\AppData\Local\SearchProtect

Ordner Gelöscht : C:\Users\Daniel\AppData\Local\CrossBrowser

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\EZDownloader

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\SkypEmoticons

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlvPlayer

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\sparpilot@sparpilot.com

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\3@3AcA.com

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\81X@T7ZC6I.edu

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\APueTDX@U.com

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\FUAujg@j.net

Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\LTA@q.net

Ordner Gelöscht : C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf

Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk

Datei Gelöscht : C:\Windows\System32\drivers\webinstrNewH.sys

Datei Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\trovi-search.xml

Datei Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\WebSearch.xml

Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml
 

***** [ Tasks ] *****
 

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-1

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-3

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-4

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-5

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-6

Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-7
 

***** [ Verknüpfungen ] *****
 

Verknüpfung Desinfiziert : C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

Verknüpfung Desinfiziert : C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

Verknüpfung Desinfiziert : C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{91EE2399-1C05-90A0-1098-8D7EFA157C7A}]

Schlüssel Gelöscht : HKCU\Software\Classes\pokki

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_.Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_.Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_.9

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335515}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905565}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336615}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906665}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335515}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905565}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336615}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906665}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}

Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BetterMarkIt

Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate

Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions

Schlüssel Gelöscht : HKLM\SOFTWARE\omiga-plusSoftware

Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect

Schlüssel Gelöscht : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll

Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17416
 
 

-\\ Mozilla Firefox v34.0.5 (x86 de)
 

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("avira.safe_search.prev_default_engine_name", "\"Trovi search\"");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "chrome://unitedtb/content/newtab/newtab-page.xhtml");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename,S", "WebSearch");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.order.1", "WebSearch");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.order.1,S", "WebSearch");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine,S", "WebSearch");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.9J2tbEbqq4ON4BsB.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.index[...]

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.a43f13f31cec74ac7ad4a18dfdaeae120gmailcom63315.63315.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22deal[...]

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22an[...]

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.__ICM_LITE__fifty_test_rules.value", "%7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%22optionweb.com%22%2C%22[...]

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%2[...]

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.crossrider.bic", "14aaaca1c695ecbecd62fdad9a25ff8e");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.MP_DISTINCT_ID", "\"14ac13d8d811f-023dafa48b49fe8-47554336-0-14ac13d8d82414\"");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_expires_at", "1421186042");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_rndsnr", "\"a10a5eac7d33e76e24ae4e845f8ac6123aae4c79\"");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_userid", "5765441970");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_utoken", "\"20f0445cfd208ca85cf4682df4e521daba92c2a7\"");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.install", "1420581244294");

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("keyword.URL", "hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=");
 

-\\ Google Chrome v
 
 

*************************
 

AdwCleaner[R0].txt - [14014 octets] - [08/01/2015 12:56:14]

AdwCleaner[S0].txt - [13728 octets] - [08/01/2015 12:57:27]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13789 octets] ##########

die dritte Datei:

Code:

# AdwCleaner v4.107 - Bericht erstellt am 08/01/2015 um 14:42:44

# Aktualisiert 07/01/2015 von Xplode

# Database : 2015-01-03.1 [Live]

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Daniel - 1906DANIEL

# Gestartet von : C:\Users\Daniel\Desktop\Bereinigung\AdwCleaner_4.107.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17416
 
 

-\\ Mozilla Firefox v34.0.5 (x86 de)
 
 

-\\ Google Chrome v
 
 

*************************
 

AdwCleaner[R0].txt - [14014 octets] - [08/01/2015 12:56:14]

AdwCleaner[R1].txt - [917 octets] - [08/01/2015 14:41:06]

AdwCleaner[S0].txt - [13922 octets] - [08/01/2015 12:57:27]

AdwCleaner[S1].txt - [839 octets] - [08/01/2015 14:42:44]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [898 octets] ##########

die vierte Datei:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.1 (12.28.2014:1)

OS: Windows 8.1 x64

Ran by Daniel on 08.01.2015 at 14:46:59,77

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644334415}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644904465}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644334415}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644904465}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644334415}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644904465}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644334415}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644904465}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted: [File] C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\searchplugins\avira-safesearch.xml

Successfully deleted: [Folder] C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\extensions\safesearch@avira.com

Successfully deleted: [Folder] C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\extensions\toolbar@web.de

Successfully deleted the following from C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\prefs.js
 

user_pref("avira.safe_search.search_was_active", "false");

user_pref("extensions.GtEu6yLUfnPvrAtb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11

user_pref("extensions.HIdrEJEgJQlQpjl3.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.WiQaIlApThhWIctY.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.bootstrappedAddons", "{\"LTA@q.net\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Daniel\\\\AppData\\\\Roaming\\\\Mozilla\

user_pref("extensions.sygxXr0twTsI248m.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.sygxXr0twTsI248m.url", "hxxp://bloggertimein.info/sync2/?q=hfZ9ofV9CShEAen0rHn8pchTB6lKDzt4okmxtNtVh7n0rjnFrTs7rjYErdkFtMFHhd9FqdwGrTgFpdaGrHkMDMlGojUMAe

user_pref("extensions.yD07LTTEhG4nkByH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 08.01.2015 at 14:49:16,14

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

die fünfte Datei:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.1 (12.28.2014:1)

OS: Windows 8.1 x64

Ran by Daniel on 08.01.2015 at 15:07:25,76

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\prefs.js
 

user_pref("extensions.GtEu6yLUfnPvrAtb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11

user_pref("extensions.HIdrEJEgJQlQpjl3.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.WiQaIlApThhWIctY.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.bootstrappedAddons", "{\"LTA@q.net\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Daniel\\\\AppData\\\\Roaming\\\\Mozilla\

user_pref("extensions.sygxXr0twTsI248m.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.yD07LTTEhG4nkByH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 08.01.2015 at 15:09:06,33

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.1 (12.28.2014:1)

OS: Windows 8.1 x64

Ran by Daniel on 08.01.2015 at 15:07:25,76

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\prefs.js
 

user_pref("extensions.GtEu6yLUfnPvrAtb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11

user_pref("extensions.HIdrEJEgJQlQpjl3.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.WiQaIlApThhWIctY.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.bootstrappedAddons", "{\"LTA@q.net\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Daniel\\\\AppData\\\\Roaming\\\\Mozilla\

user_pref("extensions.sygxXr0twTsI248m.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale

user_pref("extensions.yD07LTTEhG4nkByH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 08.01.2015 at 15:09:06,33

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Friedrich290

08.01.2015 15:16

und die FRST-Datei:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015

Ran by Daniel (administrator) on 1906DANIEL on 08-01-2015 15:14:20

Running from C:\Users\Daniel\Desktop\Bereinigung

Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe

() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe

() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe

(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)

HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cl (the data entry has 551 more characters).

ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=

HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll No File

BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll No File

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default

FF Homepage: about:home

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]

FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]

FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]

FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]

FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\toolbar@web.de [Not Found]

FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com [Not Found]

FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com [Not Found]
 

Chrome: 

=======

CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()

R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)

R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-08] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)

R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-08 14:46 - 2015-01-08 14:46 - 00000000 ____D () C:\Windows\ERUNT

2015-01-08 13:05 - 2015-01-08 14:44 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-01-08 13:05 - 2015-01-08 13:05 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-01-08 13:05 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-01-08 13:05 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-01-08 13:05 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-01-08 13:01 - 2015-01-08 15:14 - 00000000 ____D () C:\Users\Daniel\Desktop\Bereinigung

2015-01-08 12:56 - 2015-01-08 14:42 - 00000000 ____D () C:\AdwCleaner

2015-01-07 20:38 - 2015-01-07 20:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-01-07 19:41 - 2015-01-08 15:14 - 00000000 ____D () C:\FRST

2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log

2015-01-07 18:10 - 2015-01-08 14:43 - 00115210 _____ () C:\Windows\PFRO.log

2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe

2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira

2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe

2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe

2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk

2015-01-06 10:23 - 2015-01-08 14:56 - 01387402 _____ () C:\Windows\WindowsUpdate.log

2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe

2015-01-02 15:05 - 2015-01-02 15:06 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher

2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher

2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime

2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game

2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi

2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe

2015-01-02 14:25 - 2015-01-06 20:52 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test

2015-01-02 14:03 - 2015-01-08 14:43 - 00001364 _____ () C:\Windows\Tasks\YDYXQG.job

2015-01-02 14:03 - 2015-01-02 14:03 - 00004376 _____ () C:\Windows\System32\Tasks\YDYXQG

2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c

2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin

2015-01-02 13:59 - 2015-01-08 14:43 - 00001366 _____ () C:\Windows\Tasks\KYBEFZU.job

2015-01-02 13:59 - 2015-01-08 14:43 - 00001364 _____ () C:\Windows\Tasks\XSHNPL.job

2015-01-02 13:59 - 2015-01-07 17:49 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft

2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7

2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\XSHNPL

2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\KYBEFZU

2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe

2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android

2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk

2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______

2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___

2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689

2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software

2014-12-27 20:25 - 2015-01-07 22:31 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2

2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk

2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2

2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2

2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe

2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe

2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys

2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys

2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys

2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll

2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll

2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll

2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll

2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll

2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe

2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll

2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls

2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll

2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll

2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll

2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll

2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll

2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll

2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll

2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll

2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll

2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll

2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll

2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-12-26 19:07 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\OptuOn

2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg

2014-12-26 19:03 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\Unisales

2014-12-26 19:03 - 2014-12-26 19:03 - 00000000 ____D () C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa

2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth

2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke

2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles

2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia

2014-12-25 20:54 - 2015-01-08 15:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe

2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben

2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla

2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla

2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe

2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype

2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype

2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe

2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url

2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:49 - 2015-01-08 14:44 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe

2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA

2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games

2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk

2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015

2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015

2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList

2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial

2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki

2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware

2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk

2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk

2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks

2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk

2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4

2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater

2014-12-24 20:15 - 2014-12-24 20:15 - 01174352 _____ () C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe

2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk

2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk

2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll

2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll

2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google

2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll

2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll

2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll

2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll

2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll

2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll

2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe

2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll

2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll

2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys

2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll

2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll

2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll

2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-12-24 19:38 - 2015-01-08 09:58 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList

2014-12-24 19:33 - 2015-01-08 15:13 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002

2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk

2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM

2014-12-24 19:28 - 2015-01-08 15:10 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps

2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks

2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud

2014-12-24 19:28 - 2014-12-24 19:28 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk

2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent

2014-12-24 19:27 - 2015-01-08 14:44 - 00000000 ____D () C:\Users\Daniel\OneDrive

2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk

2014-12-24 19:26 - 2015-01-06 14:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi

2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream

2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-12-24 19:11 - 2015-01-08 12:57 - 00001013 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages

2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore

2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk

2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store

2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel

2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten

2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-08 15:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru

2015-01-08 14:43 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-08 14:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2015-01-08 14:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Vss

2015-01-08 13:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-01-07 18:24 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2015-01-07 18:24 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2015-01-07 18:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-07 08:09 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2015-01-07 08:09 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator

2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports

2015-01-06 14:58 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF

2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache

2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup

2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default

2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer

2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore

2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games

2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM

2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM
 

Some content of TEMP:

====================

C:\Users\Daniel\AppData\Local\Temp\avgnt.exe

C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe

C:\Users\Daniel\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-07 07:25
 

==================== End Of Log ============================

--- --- ---

Friedrich290

08.01.2015 15:44

Hallo,
das Notebook scheint jetzt sauber ? Welches Antivierenprogramm und Firewall ist nach deiner Meinung gut (kostenlos) ? Ich sende Dir meine FRST von meinem PC, er ist ziemlich langsam. Folgende Fehlermeldung hatte ich schon: Es wurde ein IP-Adresskonflikt ermittelt. Ein anderer Computer im Netzwerk hat dieselbe IP-Adresse wie dieser Computer. Zu diesem Zeitpunkt hatte ich in meine LTE-Router nur den PC und 3 Smardphones laufen. Den Fehler hatte ich in den letzten 3 Monaten 2 mal. Der PC braucht auch ziemlich beim herunterfahren, ca 90 bis 120 Sekunden.

FRST

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015

Ran by Jörn-Friedrich (administrator) on JF29 on 08-01-2015 15:37:25

Running from C:\Users\Jörn-Friedrich\Downloads

Loaded Profile: Jörn-Friedrich (Available profiles: Jörn-Friedrich)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Browser7)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(COMPANYVERS_NAME) C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

(PC Tools) C:\Program Files (x86)\ThreatFire\TFService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(PC Tools) C:\Program Files (x86)\ThreatFire\TFTray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox\firefox.exe

(Farbar) C:\Users\Jörn-Friedrich\Downloads\FRST64(1).exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [ThreatFire] => C:\Program Files (x86)\ThreatFire\TFTray.exe [378128 2010-01-14] (PC Tools)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)

HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\RunOnce: [Adobe Speed Launcher] => 1420702101

HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\MountPoints2: {d2adaa84-1e8f-11e3-9abf-8c89a59bac48} - G:\laucher.exe

HKU\S-1-5-18\...\Run: [AviraSpeedup] => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [7611640 2014-12-11] (Avira Operations GmbH & Co. KG)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk

ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk

ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

BootExecute: autocheck autochk * ᔃ］߾뿰ι

CHR HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {28D88AB1-AA93-19B9-8FCD-48FA7FA69FE5} URL = 

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=B8DABC5E-C785-46F2-A4FF-C59FF2A0BC47&ind=2014010216&n=780b5b68&psa=&st=sb&searchfor={searchTerms}

SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} URL = 

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> DefaultScope {07B92A3A-15B7-49DA-B1DC-EABAEFBEE5F9} URL = https://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {07B92A3A-15B7-49DA-B1DC-EABAEFBEE5F9} URL = https://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {49A9EC78-0083-4AA6-9FE3-0B76A933572A} URL = hxxp://rover.ebay.com/rover/1/707-1403-27640-2/4?mpre=hxxp://search.ebay.de/search/search.dll?shortcut=4&query={searchTerms}

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=B8DABC5E-C785-46F2-A4FF-C59FF2A0BC47&ind=2014010216&n=780b5b68&psa=&st=sb&searchfor={searchTerms}

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {83D23A4C-ADA1-4D5E-B1F2-49E8841CAEEE} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wiki-tab_internet_std&q={searchTerms}&br=ie10-toi

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {906BF378-A14E-4DC3-9A7D-DFEC2F12607D} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=interactivemesuche-21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {A1503A9B-A574-4D9A-BEF4-613485148BF2} URL = https://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {B8DA2ED1-CA3D-48F5-A46E-10CE29D43091} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie10-toi

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO-x32: Plus-HD-2.2 -> {11111111-1111-1111-1111-110311301136} ->  No File

BHO-x32: Boostyb.Core.BHO -> {42ad2408-abba-2408-1972-4706560e817b} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - No Name - {42ad2408-baaa-408d-b13e-4706560e817b} -  No File

Toolbar: HKLM-x32 - No Name - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} -  No File

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default

FF Homepage: about:blank

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()

FF Plugin-x32: @Allin1Convert_8h.com/Plugin -> C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (Mindspark)

FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\searchplugins\avira-safesearch.xml

FF SearchPlugin: C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\searchplugins\conduit-search.xml

FF Extension: Avira Browser Safety - C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\Extensions\abs@avira.com [2014-12-11]

FF Extension: Avira SafeSearch - C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\Extensions\safesearch@avira.com [2014-12-04]

FF Extension: Cliqz Beta - C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\Extensions\cliqz@cliqz.com.xpi [2014-09-15]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2014-04-05]

FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2014-04-05]

FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-04-05]

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-21]

FF HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF StartMenuInternet: FIREFOX.EXE - C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox\firefox.exe
 

Chrome: 

=======

CHR HomePage: Default -> www.google.com

CHR StartupUrls: Default -> "www.google.com"

CHR DefaultSearchKeyword: Default -> search.snapdo.com

CHR DefaultSearchURL: Default -> hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=0c975f8c-e63d-a644-8ea0-7138087bdbf4&searchtype=ds&q={searchTerms}&installDate=17/11/2013

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR Profile: C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Funmoods Chat) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh [2013-11-21]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-07]

CHR Extension: (Avira Browserschutz) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-09-07]

CHR Extension: (FreeHDSport TV) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkfggacklibaabdomphfdpcodjgihgon [2013-05-26]

CHR Extension: (Norton Security Toolbar) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-05-26]

CHR Extension: (Google Wallet) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-14]

CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\JRN-FR~1\AppData\Local\funmoods.crx [2012-11-17]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\JRN-FR~1\AppData\Local\funmoods.crx [2012-11-17]

CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\JRN-FR~1\AppData\Local\funmoods.crx [2012-11-17]

CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\WebCake\WebCakeLayers.crx [2013-05-25]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKLM-x32\...\Chrome\Extension: [kkfggacklibaabdomphfdpcodjgihgon] - C:\Program Files (x86)\VipBoxSportsApp.com\stv10.crx [2013-05-25]

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 Allin1Convert_8hService; C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe [88648 2014-01-02] (COMPANYVERS_NAME)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

S3 Browser7Maintenance; C:\Program Files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe [107008 2014-11-16] (Deutsche Telekom AG) [File not signed]

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH) [File not signed]

R2 ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [70928 2010-01-14] (PC Tools)

S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)

R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)

U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)

S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)

S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] () [File not signed]

R1 PSSDKLBF; C:\Windows\system32\Drivers\pssdklbf.sys [65600 2012-04-16] (microOLAP Technologies LTD)

R0 TfFsMon; C:\Windows\System32\drivers\TfFsMon.sys [65072 2010-01-14] (PC Tools)

R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2010-01-14] (PC Tools)

R0 TfSysMon; C:\Windows\System32\drivers\TfSysMon.sys [59880 2010-01-14] (PC Tools)

U3 DfSdkS; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-08 15:37 - 2015-01-08 15:37 - 00019761 _____ () C:\Users\Jörn-Friedrich\Downloads\FRST.txt

2015-01-08 15:37 - 2015-01-08 15:37 - 00000000 ____D () C:\FRST

2015-01-08 15:36 - 2015-01-08 15:36 - 02124288 _____ (Farbar) C:\Users\Jörn-Friedrich\Downloads\FRST64.exe

2015-01-08 15:36 - 2015-01-08 15:36 - 02124288 _____ (Farbar) C:\Users\Jörn-Friedrich\Downloads\FRST64(1).exe

2015-01-08 15:36 - 2015-01-08 15:36 - 00000000 ____D () C:\Users\Jörn-Friedrich\Desktop\Reinigung

2015-01-08 10:55 - 2015-01-08 11:00 - 00009221 _____ () C:\Users\Jörn-Friedrich\Desktop\Finanzierung.xlsx

2015-01-08 08:28 - 2015-01-08 08:28 - 00000056 _____ () C:\Windows\setupact.log

2015-01-08 08:28 - 2015-01-08 08:28 - 00000000 _____ () C:\Windows\setuperr.log

2015-01-07 18:14 - 2015-01-07 18:14 - 00000490 _____ () C:\Users\Jörn-Friedrich\Downloads\defogger_disable.log

2015-01-07 18:14 - 2015-01-07 18:14 - 00000000 _____ () C:\Users\Jörn-Friedrich\defogger_reenable

2015-01-07 18:11 - 2015-01-07 18:11 - 00050477 _____ () C:\Users\Jörn-Friedrich\Downloads\Defogger.exe

2015-01-05 00:12 - 2015-01-05 00:13 - 00001154 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20150105_001252.reg

2014-12-28 20:40 - 2014-12-28 20:41 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\AviraSpeedup

2014-12-28 20:39 - 2014-12-28 20:39 - 00003320 _____ () C:\Windows\System32\Tasks\AviraSpeedup

2014-12-27 22:57 - 2014-12-27 22:57 - 00000980 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141227_225657.reg

2014-12-27 00:09 - 2014-12-27 00:09 - 00005700 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141227_000935.reg

2014-12-25 11:34 - 2014-12-25 11:34 - 00045586 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141225_113359.reg

2014-12-25 11:06 - 2014-12-25 11:06 - 00013064 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141225_110632.reg

2014-12-23 21:53 - 2014-12-23 21:53 - 00000000 ____D () C:\TempDump

2014-12-23 14:36 - 2014-12-23 14:36 - 00000061 _____ () C:\Users\Jörn-Friedrich\Downloads\server.properties

2014-12-21 23:09 - 2014-12-21 23:09 - 00000460 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141221_230858.reg

2014-12-21 23:05 - 2014-12-21 23:05 - 05317104 _____ (Piriform Ltd) C:\Users\Jörn-Friedrich\Downloads\ccsetup501.exe

2014-12-19 21:22 - 2014-12-19 21:23 - 12833197 _____ () C:\Users\Jörn-Friedrich\Downloads\John Smith Legacy 1.8.1 v1.3.8(1).zip

2014-12-19 21:21 - 2014-12-19 21:21 - 12833197 _____ () C:\Users\Jörn-Friedrich\Downloads\John Smith Legacy 1.8.1 v1.3.8.zip

2014-12-18 08:12 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-18 08:12 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-13 22:47 - 2014-12-13 22:47 - 00000890 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141213_224740.reg

2014-12-13 20:52 - 2014-12-19 21:37 - 00010240 ___SH () C:\Users\Jörn-Friedrich\Downloads\Thumbs.db

2014-12-11 19:07 - 2014-12-11 19:07 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-12-10 08:42 - 2014-12-10 08:42 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-10 08:04 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-12-10 08:03 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-12-10 07:53 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-10 07:53 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-10 07:53 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-10 07:53 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-10 07:53 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-10 07:53 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-10 07:53 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-10 07:53 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2014-12-10 07:53 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-10 07:53 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-10 07:53 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-10 07:53 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-12-10 07:53 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-10 07:53 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-10 07:53 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-10 07:53 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-10 07:53 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-10 07:53 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-10 07:53 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-10 07:53 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-10 07:53 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-10 07:53 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-10 07:53 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-10 07:53 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-10 07:53 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-12-10 07:53 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-10 07:53 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-10 07:53 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-12-10 07:53 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-10 07:53 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-10 07:53 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-10 07:53 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-10 07:53 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-10 07:53 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-10 07:53 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-10 07:53 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-10 07:53 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-10 07:53 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-10 07:53 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-10 07:53 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-10 07:53 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-10 07:53 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-10 07:53 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-10 07:53 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-12-10 07:53 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-10 07:53 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-10 07:53 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-10 07:53 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-10 07:53 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-10 07:53 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-10 07:53 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-10 07:53 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-10 07:53 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-10 07:53 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-10 07:53 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-10 07:53 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-12-10 07:53 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-10 07:53 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-10 07:53 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-10 07:53 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-10 07:53 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-10 07:53 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-10 07:53 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-10 07:53 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-10 07:53 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2014-12-10 07:52 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-12-10 07:52 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-12-10 07:52 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2014-12-10 07:52 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe

2014-12-10 07:52 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-10 07:52 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2014-12-10 07:52 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2014-12-10 07:52 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2014-12-10 07:52 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2014-12-10 07:52 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-10 07:52 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll

2014-12-10 07:52 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2014-12-10 07:52 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll

2014-12-10 07:52 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2014-12-09 11:48 - 2014-12-09 11:48 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-08 15:18 - 2012-04-07 18:46 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-08 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-01-08 13:07 - 2014-04-19 10:16 - 01745661 _____ () C:\Windows\WindowsUpdate.log

2015-01-08 08:35 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-01-08 08:35 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-01-08 08:28 - 2012-06-11 21:25 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2015-01-08 08:28 - 2012-04-07 18:46 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-01-08 08:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-07 20:43 - 2011-03-11 10:20 - 00699432 _____ () C:\Windows\system32\perfh007.dat

2015-01-07 20:43 - 2011-03-11 10:20 - 00149572 _____ () C:\Windows\system32\perfc007.dat

2015-01-07 20:43 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-07 18:14 - 2012-04-07 18:50 - 00000000 ____D () C:\Users\Jörn-Friedrich

2015-01-05 11:36 - 2014-12-08 12:05 - 00035328 ___SH () C:\Users\Jörn-Friedrich\Desktop\Thumbs.db

2015-01-04 20:54 - 2014-10-29 15:18 - 00000000 ____D () C:\FTBLite2

2015-01-04 20:54 - 2014-10-27 23:12 - 00000000 ____D () C:\Users\Jörn-Friedrich\Downloads\Neuer Ordner

2015-01-04 20:54 - 2012-04-07 19:32 - 00000000 ____D () C:\Users\Jörn-Friedrich\Desktop\Daniel

2015-01-04 20:53 - 2014-11-10 16:36 - 00000000 ____D () C:\FTBLite

2015-01-04 20:53 - 2014-10-29 15:25 - 00000000 ____D () C:\Ultimate

2015-01-04 20:51 - 2013-12-23 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft

2015-01-02 16:06 - 2014-04-13 17:32 - 00000440 _____ () C:\Windows\Tasks\One-Click Optimizer.job

2014-12-28 21:40 - 2009-07-14 05:45 - 00304160 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-12-28 20:40 - 2014-09-07 19:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviraSpeedup

2014-12-28 20:40 - 2012-04-07 18:48 - 00072296 _____ () C:\Users\Jörn-Friedrich\AppData\Local\GDIPFONTCACHEV1.DAT

2014-12-27 00:08 - 2014-04-21 19:26 - 00000000 ____D () C:\ProgramData\GlarySoft

2014-12-27 00:08 - 2014-04-21 19:06 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Roaming\GlarySoft

2014-12-25 11:32 - 2011-08-22 17:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-12-25 11:31 - 2013-11-11 20:22 - 00000000 ____D () C:\Users\Jörn-Friedrich\Documents\My Games

2014-12-25 11:31 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-12-25 11:29 - 2014-09-08 12:09 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2013

2014-12-25 07:51 - 2014-04-21 19:06 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Roaming\DiskDefrag

2014-12-24 15:48 - 2013-09-16 18:50 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Roaming\.minecraft

2014-12-23 23:04 - 2013-05-21 17:45 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\CrashDumps

2014-12-22 09:52 - 2014-10-27 10:01 - 00021504 ___SH () C:\Users\Jörn-Friedrich\Documents\Thumbs.db

2014-12-21 23:06 - 2012-04-08 09:27 - 00000786 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-12-21 23:06 - 2012-04-08 09:27 - 00000000 ____D () C:\Program Files\CCleaner

2014-12-12 18:23 - 2012-04-07 18:46 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-12-12 17:39 - 2014-09-11 10:00 - 00000000 ____D () C:\Users\Jörn-Friedrich\Desktop\Ebay-Bilder

2014-12-11 19:07 - 2014-09-07 19:22 - 00000000 ____D () C:\ProgramData\Package Cache

2014-12-11 19:07 - 2014-09-07 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-12-11 19:07 - 2014-09-07 19:22 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-12-11 17:52 - 2014-08-29 22:01 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\Adobe

2014-12-11 17:52 - 2012-04-30 23:14 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-11 17:52 - 2011-08-22 18:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-10 16:00 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-12-10 15:37 - 2013-02-21 20:35 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-12-10 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-12-10 08:42 - 2014-05-08 17:00 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-12-10 08:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-10 08:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat

2014-12-10 08:10 - 2012-04-15 16:51 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-12-10 08:09 - 2013-07-24 16:38 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-10 08:05 - 2011-03-14 15:08 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-09 16:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
 

Some content of TEMP:

====================

C:\Users\Jörn-Friedrich\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-04 12:33
 

==================== End Of Log ============================

--- --- ---

--- --- ---

und der ADDITION:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015

Ran by Jörn-Friedrich at 2015-01-08 15:38:09

Running from C:\Users\Jörn-Friedrich\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: ThreatFire (Enabled - Out of date) {EDD97D31-048C-2774-0FBE-26EE50D6465E}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ThreatFire (Enabled - Out of date) {56B89CD5-22B6-28FA-350E-1D9C2B510CE3}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

5700_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{2F949F9F-EBD4-8597-5CF0-6370C0161CC9}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)

Ashampoo WinOptimizer 2014 v.1.0.0 (HKLM-x32\...\{4209F371-99CD-68CB-1C29-9910F8F9BD96}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)

Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.12.9.0 - Asmedia Technology)

Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

Avira System Speedup 1.5 (HKLM-x32\...\Avira System Speedup_is1) (Version: 1.5 - 2000 - 2014 Avira Operations GmbH & Co. KG)

Boost Your Browser (HKLM-x32\...\{28AAEC25-198C-44D6-8D70-77494DFA8DB4}) (Version: 0.7 - Nikozen)

bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden

BPDSoftware (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden

BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

Browser 7 der Telekom 33.0.11 (x86 de) (HKLM-x32\...\Browser 7 der Telekom 33.0.11 (x86 de)) (Version: 33.0.11 - Deutsche Telekom AG)

Browser 7 Maintenance Service (HKLM-x32\...\Browser7MaintenanceService) (Version: 31.0.20 - Deutsche Telekom AG)

BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden

DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

DSL-Manager (HKLM-x32\...\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}) (Version:  - )

Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden

Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP OfficeJet J5700 (HKLM\...\{D3A65B0A-403B-4C20-A488-BFED2BC5D2EF}) (Version: 13.0 - HP)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Photosmart 5520 series - Grundlegende Software für das Gerät (HKLM\...\{4F396B08-301D-4E53-A372-95A7E93ABD04}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Photosmart 5520 series Hilfe (HKLM-x32\...\{640A03B3-4E6B-4440-A350-E6A8D6348F12}) (Version: 27.0.0 - Hewlett Packard)

HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)

HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)

J5700 (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden

J5700_Basic (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden

Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)

Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

JetDrive (HKLM-x32\...\JetDrive_is1) (Version: 7.0 - Abelssoft)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Klett Lehrersoftware Green Line (Band 2) (HKLM-x32\...\Klett Lehrersoftware Green Line (Band 2)) (Version:  - )

Klett Lehrersoftware Green Line (Band 3) (HKLM-x32\...\Klett Lehrersoftware Green Line (Band 3)) (Version:  - )

Klett Lehrersoftware Green Line (HKLM-x32\...\Klett Lehrersoftware Green Line) (Version:  - )

Klett Lehrersoftware Green Line NI (Band 2) (HKLM-x32\...\Klett Lehrersoftware Green Line NI (Band 2)) (Version:  - )

Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)

MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden

Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7943 - Memeo Inc.)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)

Mozilla Firefox 34.0.5 (x86 de) (HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)

Mozilla Thunderbird 12.0.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 12.0.1 (x86 de)) (Version: 12.0.1 - Mozilla)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Naturwissenschaften Arbeitsblätter 1 (HKLM-x32\...\{54DA4E8E-61F3-481F-8805-1CA64C07FC87}) (Version: 1.00 - )

NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Ökologie (HKLM-x32\...\{0746C6D7-3FD1-42FB-99D1-6B0B73DE2B55}) (Version: 1.00.0001 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

ProductContext (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)

Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden

SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden

Studie zur Verbesserung von HP Photosmart 5520 series Produkten (HKLM\...\{B99F865A-3ECB-4E65-B6CF-9C60EE0273A3}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

ThreatFire (HKLM-x32\...\3554AA4B-9B0B-451a-A269-2B5F53982209_is1) (Version:  - PC Tools)

Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VipBoxSportsApp (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - VipBoxSportsApp.com) <==== ATTENTION

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)

Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)

Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version:  - )

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

28-12-2014 20:39:55 Avira System Speedup 1.5

28-12-2014 20:41:32 Erstelle Systemwiederherstellungspunkt bevor Junk-Dateien gelöscht werden

04-01-2015 19:00:20 Windows-Sicherung
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2013-11-09 23:59 - 00000000 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {14167E82-08E3-43D1-8996-92B8704A17CC} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.4.0.13\WSCStub.exe

Task: {2F3BDC2E-3B25-4EA8-B601-08D71FE8BEA8} - System32\Tasks\HP AR Program Upload - 103e5ea9e68e48ef898ffab3d0a7a7445b5c4caf35164e4098a8b06afc6fbe03 => C:\Program Files\HP\HP Photosmart 5520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)

Task: {31FF28B0-07B4-4C30-996A-9C7455CF2915} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.4.0.13\SymErr.exe

Task: {4049C539-2E99-4D05-A142-F744CB0B4789} - System32\Tasks\{04325A7F-AC69-40B9-ACCA-1E26234D2AD8} => pcalua.exe -a E:\setup.exe -d E:\

Task: {421AFE08-3326-42DC-A055-9DD157BD9DA3} - System32\Tasks\AviraSpeedup => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [2014-12-11] (Avira Operations GmbH & Co. KG)

Task: {58A2DFA0-EF80-4FB7-A453-F9A32BC3F399} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {69C17C76-6BAC-407C-97A7-E09ED59BE675} - System32\Tasks\{E87B0CB2-0127-49B7-AA1D-86BA5E8798C2} => pcalua.exe -a "G:\HP\Digital Imaging\extcapuninstall\hpzmsi01.exe" -d "G:\HP\Digital Imaging\extcapuninstall"

Task: {6F2D98EB-AE99-46DE-BB8C-D07E8344609D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)

Task: {70C0E124-F204-4585-A613-A3B382A7D26E} - System32\Tasks\HPCustParticipation HP Photosmart 5520 series => C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {77338522-067F-4C6D-8CB3-859A2C873B0A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)

Task: {77B585CA-9A54-47F6-ABB0-B9388DA62A26} - System32\Tasks\{D7AB6A25-7202-43CF-BA83-2842E956B1D7} => pcalua.exe -a E:\Setup.exe -d E:\

Task: {8A3E707F-78D2-4D21-95D1-C869FA38DBB6} - System32\Tasks\{00A86ABF-1645-4E19-893D-25ACB9B82BC9} => C:\Klett\Lehrersoftware\Green Line\Lehrersoftware.exe [2005-12-20] (Macromedia, Inc.)

Task: {92757F55-94DF-492E-8795-F2351D92EE84} - System32\Tasks\{7AE043A9-E5AA-4A32-89D4-16A49C5E3C9C} => pcalua.exe -a "C:\Users\Jörn-Friedrich\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P267NJTQ\wmp11-windowsxp-x86-DE-DE.exe" -d C:\Users\Jörn-Friedrich\Desktop

Task: {979A520B-4783-4851-8050-9747AFB96B3E} - System32\Tasks\{C881014E-0543-4815-9A23-3100B712CD5E} => pcalua.exe -a E:\Sicherheits-Center\GData\GER_R_ESD_CBE_IS.exe -d E:\Sicherheits-Center\GData

Task: {C3CD27DE-50EA-4576-9933-85D6915AE966} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.4.0.13\SymErr.exe

Task: {C95C76E9-A64F-4E79-911E-72033E53867C} - System32\Tasks\{756982EA-90AB-47AD-84D0-D3DBD20BC3A3} => pcalua.exe -a C:\Users\Jörn-Friedrich\Desktop\Daniel\FarmingSimulator2009DemoDE.exe -d C:\Users\Jörn-Friedrich\Desktop\Daniel

Task: {CD66F585-14E8-4687-878D-F9765BE0D3E9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)

Task: {D3662D69-499E-4581-B396-DFDB9B8DF91D} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION

Task: {DB70218F-C5A9-4B44-BD19-2239915FCA25} - System32\Tasks\{B460C4DC-CF64-4DE4-A8F8-594015661CB0} => pcalua.exe -a E:\Setup.exe -d E:\

Task: {EFBD5344-A11D-4E94-9D61-41B99D08A0A2} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2014\WO2014.exe [2013-12-18] (Ashampoo Development GmbH & Co. KG)

Task: {F95910D3-D842-47A8-A0CF-CA21AE2CC349} - System32\Tasks\4787 => Wscript.exe C:\Users\JRN-FR~1\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION

Task: {FCABCB2F-FABD-4C40-A596-785A11AC11CE} - System32\Tasks\{01F6BFF5-BB14-46FD-B1A6-96DCABFF52B9} => pcalua.exe -a C:\PROGRA~2\Klett\LEHRER~1\UNWISE.EXE -c C:\PROGRA~2\Klett\LEHRER~1\INSTALL.LOG

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\One-Click Optimizer.job => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2014\WO2014.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2014-10-15 15:22 - 2014-10-15 15:22 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\b2363cf94faf59386ab4778a39c16e2b\IsdiInterop.ni.dll

2011-08-22 17:03 - 2011-05-20 18:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2014-12-09 11:48 - 2014-12-09 11:48 - 03758192 _____ () C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\Temp:AD022376
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupreg: (default) => 

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Allin1Convert_8h Browser Plugin Loader 64 => C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrmon64.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-3173901494-1134987012-1569752986-500 - Administrator - Disabled)

Gast (S-1-5-21-3173901494-1134987012-1569752986-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3173901494-1134987012-1569752986-1004 - Limited - Enabled)

Jörn-Friedrich (S-1-5-21-3173901494-1134987012-1569752986-1001 - Administrator - Enabled) => C:\Users\Jörn-Friedrich
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/08/2015 08:28:54 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/08/2015 08:28:11 AM) (Source: MemeoBackgroundService) (EventID: 0) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (01/08/2015 08:28:09 AM) (Source: Service1) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig
 

Error: (01/07/2015 07:39:23 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: Der Index kann nicht initialisiert werden.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Die Anwendung kann nicht initialisiert werden.
 

Kontext: Windows Anwendung
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Das Gatherer-Objekt kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (01/07/2015 07:39:15 AM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/07/2015 07:39:15 AM) (Source: Windows Search Service) (EventID: 9002) (User: )

Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 
 

System errors:

=============

Error: (01/07/2015 10:41:49 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 

Error: (01/07/2015 07:39:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/07/2015 07:39:19 AM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
 

Error: (01/05/2015 09:59:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/05/2015 09:59:06 AM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
 

Error: (01/04/2015 09:29:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/04/2015 09:29:20 AM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
 

Error: (01/04/2015 00:23:56 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 

Error: (01/03/2015 08:42:49 PM) (Source: Tcpip) (EventID: 4199) (User: )

Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.1.2 mit dem Computer mit der

Netzwerkhardwareadresse 10-3B-59-F3-97-A3 ermittelt. Netzwerkvorgänge könnten daher auf diesem

System unterbrochen werden.
 

Error: (01/03/2015 10:09:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

Microsoft Office Sessions:

=========================

Error: (09/20/2014 08:48:06 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 18 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-07-13 01:22:54.845

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\T-Com\DSLCheck\PCIDumpr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-07-13 01:22:54.755

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\T-Com\DSLCheck\PCIDumpr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Brauchte nochmals Hilfe

schrauber

08.01.2015 17:17

Jetzt machen wir erstmal einen Rechner fertig.

Ich empfehle immer Emsisoft

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Friedrich290

08.01.2015 22:07

Hallo,

anbei die Esetdatei:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=c5967b9e0768014091216379bc16fe40

# engine=21872

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-01-08 08:36:28

# local_time=2015-01-08 09:36:28 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1='Avira Desktop'

# compatibility_mode=1810 16777213 100 99 19229 3931988 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 168940 11053707 0 0

# scanned=212685

# found=34

# cleaned=0

# scan_time=3734

sh=1C1691D53A24A5184AE315A00AC461767ADEDC20 ft=1 fh=5b79596457e5e7ad vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe.vir"

sh=8743F255E80C6A0A95A94CC668553686FF170120 ft=1 fh=0e8260637ee8e1d9 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll.vir"

sh=A704B6A7928A66851D5D0C251F975B52F6755053 ft=1 fh=3a141fdd6276f642 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe.vir"

sh=AAB44C79899999D77D4BC45AC1FC31746EE01C39 ft=1 fh=f19b2f7682fe88c5 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll.vir"

sh=3010A616F191A1AB67BAA394F95094E43E1B0F05 ft=1 fh=1d4eab4a3a54531e vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll.vir"

sh=CFD6E953ACB4E21B22DD6D2BBD7360C353AA5049 ft=1 fh=65b60511f931799f vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll.vir"

sh=275F649C7C4613C61B59BD33393AA245AD3D3816 ft=1 fh=ecf7e3ee1d6b314e vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll.vir"

sh=B46AC89336EE49AE7D475F54C6A0847EAA8A174F ft=1 fh=d456ecb0103eab2f vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe.vir"

sh=E232E27D89D586694D6294850587B0725D1ED5C0 ft=1 fh=c71c0011c4e77235 vn="Win32/Adware.MultiPlug.EG Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.dll.vir"

sh=49D67CB7CB84CB03EB59EF5E9B63C529819E2CCA ft=1 fh=02e66a7f20ffb4b5 vn="Variante von Win64/Adware.MultiPlug.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.x64.dll.vir"

sh=BA7CB3E582E0F51A59417940BA6AA72BCEE4BD93 ft=1 fh=02e66a7fc58de247 vn="Variante von Win64/Adware.MultiPlug.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll.vir"

sh=E6C7C9C6CF09BC0EC20178BBF9493D1C1986627A ft=1 fh=87f90cf5989f5ff8 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll.vir"

sh=9BB7E9F76D42ABD1CF5ED4E1FFA5860DA3E7D762 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\3@3AcA.com\content\bg.js.vir"

sh=529847C8472E4B972BD11C1C9BF8979AD01FA319 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\81X@T7ZC6I.edu\content\bg.js.vir"

sh=427E52A966E261626C58C8F3F6C1558D453820F1 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\APueTDX@U.com\content\bg.js.vir"

sh=C5926491831A1EA4FF038E13EA91A2E23D3B7A8C ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\FUAujg@j.net\content\bg.js.vir"

sh=DD8292E97FA03DE095377C098E50A3AAED73A211 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\LTA@q.net\content\bg.js.vir"

sh=B7C722576E340B33362B753B2A82246D80C62D97 ft=1 fh=aecc075c8b73a942 vn="Win64/Adware.AddLyrics.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\drivers\webinstrNewH.sys.vir"

sh=250257253810329A238AED92CE43B30EB91534DD ft=1 fh=325d23bd620750a3 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll"

sh=2F47FC1FA1CED95DB8AFF54CA7CAD2D8AD784665 ft=1 fh=5a8faa0e442e2fb1 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll"

sh=250257253810329A238AED92CE43B30EB91534DD ft=1 fh=325d23bd620750a3 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll"

sh=2F47FC1FA1CED95DB8AFF54CA7CAD2D8AD784665 ft=1 fh=5a8faa0e442e2fb1 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll"

sh=3ADFD1204778466DCF09A25EB0AF08FE58387800 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg\TKDicbqjS.js"

sh=8F2ED3BB0E8C7CB103FBB1678280895D697EB88D ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml\puQcJwDtvP.js"

sh=3798F8DF1C088F3F9246A10FD8834B25CE2AEFCD ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa\v.js"

sh=3ADFD1204778466DCF09A25EB0AF08FE58387800 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\All Users\gpkmjaddgmnebabefhalcdhlohdhiejg\TKDicbqjS.js"

sh=8F2ED3BB0E8C7CB103FBB1678280895D697EB88D ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\All Users\jooedlmpmpnhalnchcfgihpehccbioml\puQcJwDtvP.js"

sh=3798F8DF1C088F3F9246A10FD8834B25CE2AEFCD ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\All Users\pobnbnmffkpndfpcgmkcmocainfomioa\v.js"

sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\KYBEFZU"

sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\XSHNPL"

sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\YDYXQG"

sh=F6E53933B39D27963E052FF559E7F9B7C7FBE234 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.DU Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js"

sh=C222E0B2AD770DD5777C83575328B492FB5F11CE ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js"

sh=E82E97E10F75E13517BC1AE0E8326B843DA6C0A9 ft=1 fh=f401725bddbf58fb vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe"

anbei die zweite Datei:

Code:

 Results of screen317's Security Check version 0.99.93  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop      

Windows Defender   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Java 8 Update 25  

 Java version 32-bit out of Date! 

 Adobe Flash Player         16.0.0.235  

 Mozilla Firefox (34.0.5) 
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

und die FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015

Ran by Daniel (administrator) on 1906DANIEL on 08-01-2015 22:05:33

Running from C:\Users\Daniel\Desktop\Bereinigung

Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe

(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe

() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe

(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

() C:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)

HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cl (the data entry has 551 more characters).

ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=

HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll No File

BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll No File

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default

FF Homepage: about:home

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]

FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]

FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]

FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]
 

Chrome: 

=======

CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()

R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)

R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-08] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)

R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-08 14:46 - 2015-01-08 14:46 - 00000000 ____D () C:\Windows\ERUNT

2015-01-08 13:05 - 2015-01-08 20:44 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-01-08 13:05 - 2015-01-08 13:05 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-01-08 13:05 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-01-08 13:05 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-01-08 13:05 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-01-08 13:01 - 2015-01-08 22:05 - 00000000 ____D () C:\Users\Daniel\Desktop\Bereinigung

2015-01-08 12:56 - 2015-01-08 14:42 - 00000000 ____D () C:\AdwCleaner

2015-01-07 20:38 - 2015-01-07 20:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-01-07 19:41 - 2015-01-08 22:05 - 00000000 ____D () C:\FRST

2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log

2015-01-07 18:10 - 2015-01-08 14:43 - 00115210 _____ () C:\Windows\PFRO.log

2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe

2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira

2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe

2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe

2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk

2015-01-06 10:23 - 2015-01-08 20:40 - 01429528 _____ () C:\Windows\WindowsUpdate.log

2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe

2015-01-02 15:05 - 2015-01-08 19:31 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher

2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher

2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime

2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game

2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi

2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe

2015-01-02 14:25 - 2015-01-08 19:30 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test

2015-01-02 14:03 - 2015-01-08 15:51 - 00001364 _____ () C:\Windows\Tasks\YDYXQG.job

2015-01-02 14:03 - 2015-01-02 14:03 - 00004376 _____ () C:\Windows\System32\Tasks\YDYXQG

2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c

2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin

2015-01-02 13:59 - 2015-01-08 19:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft

2015-01-02 13:59 - 2015-01-08 15:51 - 00001366 _____ () C:\Windows\Tasks\KYBEFZU.job

2015-01-02 13:59 - 2015-01-08 15:51 - 00001364 _____ () C:\Windows\Tasks\XSHNPL.job

2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7

2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\XSHNPL

2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\KYBEFZU

2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe

2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android

2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk

2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______

2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___

2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689

2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software

2014-12-27 20:25 - 2015-01-07 22:31 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2

2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk

2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2

2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2

2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe

2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe

2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys

2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys

2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys

2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll

2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll

2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll

2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll

2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll

2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe

2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll

2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls

2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll

2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll

2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll

2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll

2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll

2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll

2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll

2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll

2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll

2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll

2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll

2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-12-26 19:07 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\OptuOn

2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg

2014-12-26 19:03 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\Unisales

2014-12-26 19:03 - 2014-12-26 19:03 - 00000000 ____D () C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa

2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth

2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke

2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles

2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia

2014-12-25 20:54 - 2015-01-08 21:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe

2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben

2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla

2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla

2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe

2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype

2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype

2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe

2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url

2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:49 - 2015-01-08 15:51 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe

2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA

2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games

2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk

2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015

2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015

2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList

2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial

2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki

2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware

2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk

2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk

2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks

2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk

2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4

2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater

2014-12-24 20:15 - 2014-12-24 20:15 - 01174352 _____ () C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe

2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk

2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk

2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll

2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll

2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google

2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll

2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll

2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll

2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll

2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll

2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll

2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe

2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll

2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll

2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys

2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll

2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll

2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll

2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-12-24 19:38 - 2015-01-08 16:16 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList

2014-12-24 19:33 - 2015-01-08 21:38 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002

2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk

2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM

2014-12-24 19:28 - 2015-01-08 15:55 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps

2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks

2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud

2014-12-24 19:28 - 2014-12-24 19:28 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk

2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent

2014-12-24 19:27 - 2015-01-08 15:52 - 00000000 ___RD () C:\Users\Daniel\OneDrive

2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk

2014-12-24 19:26 - 2015-01-06 14:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi

2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream

2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-12-24 19:11 - 2015-01-08 12:57 - 00001013 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages

2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore

2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk

2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store

2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel

2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten

2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-08 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru

2015-01-08 20:24 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2015-01-08 20:24 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2015-01-08 20:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-08 14:43 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-08 14:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2015-01-08 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Vss

2015-01-08 13:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-01-07 08:09 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2015-01-07 08:09 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator

2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports

2015-01-06 14:58 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF

2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache

2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup

2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default

2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer

2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore

2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games

2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM

2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM
 

Some content of TEMP:

====================

C:\Users\Daniel\AppData\Local\Temp\avgnt.exe

C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe

C:\Users\Daniel\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-07 07:25
 

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber

08.01.2015 23:03

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll
 

C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll
 

C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll
 

C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll
 

C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg
 

C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml
 

C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa
 

C:\Users\Daniel\AppData\Roaming\KYBEFZU
 

C:\Users\Daniel\AppData\Roaming\XSHNPL
 

C:\Users\Daniel\AppData\Roaming\YDYXQG
 

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js
 

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js
 

C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT

c:\Program Files (x86)\Optimizer Pro 3.20
 

Task: {005282E6-5CC6-4BF7-98C5-90CBAB18AF32} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION
 

Task: {09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION
 

Task: {2CDB4F58-A85B-44BA-8169-B17F48E4A352} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION
 

Task: {3D579731-9F71-434C-A882-4C8FFDB72088} - System32\Tasks\YDYXQG => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION
 

Task: {454BA2C3-F94E-44A5-8F7E-8A563168E5A2} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION
 

Task: {46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39} - System32\Tasks\XSHNPL => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION
 

Task: {7322D2DA-6C4A-4CDE-9632-076A5631BA28} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: {73D1D1E0-573E-4AFB-9EF2-26758087333A} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION
 

Task: {77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION
 

Task: {7A635968-AEB1-476F-9CE0-C3010E47BAC9} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: {9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B} - System32\Tasks\KYBEFZU => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION
 

Task: {CE01B344-EB87-4532-A1F4-E725F78EB745} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION
 

Task: {CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: {D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION
 

Task: {D8B8C766-27EB-45EC-8EE9-48E488196B62} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION
 

Task: {E744ED2B-A072-4D77-99F5-E32DBFB79ACF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\KYBEFZU.job => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\XSHNPL.job => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\YDYXQG.job => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Frisches FRST log bitte. Noch Probleme?

Friedrich290

08.01.2015 23:31

hallo,

anbei die Datei:

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-01-2015

Ran by Daniel at 2015-01-08 23:24:01 Run:1

Running from C:\Users\Daniel\Desktop\Bereinigung

Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll
 

C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll
 

C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll
 

C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll
 

C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg
 

C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml
 

C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa
 

C:\Users\Daniel\AppData\Roaming\KYBEFZU
 

C:\Users\Daniel\AppData\Roaming\XSHNPL
 

C:\Users\Daniel\AppData\Roaming\YDYXQG
 

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js
 

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js
 

C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT

c:\Program Files (x86)\Optimizer Pro 3.20
 

Task: {005282E6-5CC6-4BF7-98C5-90CBAB18AF32} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION
 

Task: {09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION
 

Task: {2CDB4F58-A85B-44BA-8169-B17F48E4A352} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION
 

Task: {3D579731-9F71-434C-A882-4C8FFDB72088} - System32\Tasks\YDYXQG => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION
 

Task: {454BA2C3-F94E-44A5-8F7E-8A563168E5A2} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION
 

Task: {46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39} - System32\Tasks\XSHNPL => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION
 

Task: {7322D2DA-6C4A-4CDE-9632-076A5631BA28} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: {73D1D1E0-573E-4AFB-9EF2-26758087333A} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION
 

Task: {77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION
 

Task: {7A635968-AEB1-476F-9CE0-C3010E47BAC9} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: {9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B} - System32\Tasks\KYBEFZU => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION
 

Task: {CE01B344-EB87-4532-A1F4-E725F78EB745} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION
 

Task: {CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: {D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION
 

Task: {D8B8C766-27EB-45EC-8EE9-48E488196B62} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION
 

Task: {E744ED2B-A072-4D77-99F5-E32DBFB79ACF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\KYBEFZU.job => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\XSHNPL.job => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION
 

Task: C:\Windows\Tasks\YDYXQG.job => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION

Emptytemp:

         
 

*****************
 

:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll => Error: No automatic fix found for this entry.

C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll => Moved successfully.

C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll => Moved successfully.

C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll => Moved successfully.

C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg => Moved successfully.

C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml => Moved successfully.

C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa => Moved successfully.

C:\Users\Daniel\AppData\Roaming\KYBEFZU => Moved successfully.

C:\Users\Daniel\AppData\Roaming\XSHNPL => Moved successfully.

C:\Users\Daniel\AppData\Roaming\YDYXQG => Moved successfully.

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js => Moved successfully.

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js => Moved successfully.

C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe => Moved successfully.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

5936b827 => Service deleted successfully.

"c:\Program Files (x86)\Optimizer Pro 3.20" => File/Directory not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{005282E6-5CC6-4BF7-98C5-90CBAB18AF32} => Key not found. 

C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CDB4F58-A85B-44BA-8169-B17F48E4A352} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => Key not found. 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3D579731-9F71-434C-A882-4C8FFDB72088}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D579731-9F71-434C-A882-4C8FFDB72088}" => Key deleted successfully.

C:\Windows\System32\Tasks\YDYXQG => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YDYXQG" => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{454BA2C3-F94E-44A5-8F7E-8A563168E5A2} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => Key not found. 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39}" => Key deleted successfully.

C:\Windows\System32\Tasks\XSHNPL => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XSHNPL" => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7322D2DA-6C4A-4CDE-9632-076A5631BA28} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73D1D1E0-573E-4AFB-9EF2-26758087333A} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A635968-AEB1-476F-9CE0-C3010E47BAC9} => Key not found. 

C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => Key not found. 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B}" => Key deleted successfully.

C:\Windows\System32\Tasks\KYBEFZU => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KYBEFZU" => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE01B344-EB87-4532-A1F4-E725F78EB745} => Key not found. 

C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} => Key not found. 

C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} => Key not found. 

C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8B8C766-27EB-45EC-8EE9-48E488196B62} => Key not found. 

C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E744ED2B-A072-4D77-99F5-E32DBFB79ACF} => Key not found. 

C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => Key not found. 

C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job not found.

C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job not found.

C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job not found.

C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job not found.

C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job not found.

C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job not found.

C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job not found.

C:\Windows\Tasks\KYBEFZU.job => Moved successfully.

C:\Windows\Tasks\XSHNPL.job => Moved successfully.

C:\Windows\Tasks\YDYXQG.job => Moved successfully.

EmptyTemp: => Removed 60.9 MB temporary data.
 
 

The system needed a reboot. 
 

==== End of Fixlog 23:24:12 ====

schrauber

09.01.2015 09:16

Zitat:

Frisches FRST log bitte. Noch Probleme?

;).

Friedrich290

09.01.2015 13:15

Hallo,

anbei die FRST von heute:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015

Ran by Daniel (administrator) on 1906DANIEL on 09-01-2015 12:50:02

Running from C:\Users\Daniel\Desktop\Bereinigung

Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe

(Microsoft Corporation) C:\Windows\System32\LogonUI.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Microsoft Corporation) C:\Windows\System32\LocationNotifications.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Microsoft Corporation) C:\Windows\System32\calc.exe

(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe

(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe

() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe

() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-12-19] (Acer Incorporated)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2014-12-19] ()

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"

HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)

HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cl (the data entry has 551 more characters).

ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB

HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=

HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 

SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll No File

BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll No File

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]

FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]

FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]

FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]
 

Chrome: 

=======

CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]

CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2713856 2014-12-19] (Acer Incorporated)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()

R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)

R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-09] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)

R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-09 12:49 - 2015-01-09 12:49 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk

2015-01-08 14:46 - 2015-01-08 14:46 - 00000000 ____D () C:\Windows\ERUNT

2015-01-08 13:05 - 2015-01-09 12:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-01-08 13:05 - 2015-01-08 13:05 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-01-08 13:05 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-01-08 13:05 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-01-08 13:05 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-01-08 13:01 - 2015-01-09 12:50 - 00000000 ____D () C:\Users\Daniel\Desktop\Bereinigung

2015-01-08 12:56 - 2015-01-08 14:42 - 00000000 ____D () C:\AdwCleaner

2015-01-07 20:38 - 2015-01-07 20:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-01-07 19:41 - 2015-01-09 12:50 - 00000000 ____D () C:\FRST

2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log

2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log

2015-01-07 18:10 - 2015-01-08 23:25 - 00116036 _____ () C:\Windows\PFRO.log

2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe

2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira

2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira

2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe

2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe

2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk

2015-01-06 10:23 - 2015-01-09 07:37 - 01554603 _____ () C:\Windows\WindowsUpdate.log

2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe

2015-01-02 15:05 - 2015-01-08 19:31 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher

2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher

2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime

2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game

2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi

2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe

2015-01-02 14:25 - 2015-01-08 19:30 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test

2015-01-02 14:02 - 2015-01-08 23:24 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c

2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin

2015-01-02 13:59 - 2015-01-08 19:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft

2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7

2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun

2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe

2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android

2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android

2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk

2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______

2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser

2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____

2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___

2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0

2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689

2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software

2014-12-27 20:25 - 2015-01-09 08:31 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2

2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk

2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2

2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2

2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe

2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe

2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys

2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys

2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys

2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll

2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL

2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL

2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL

2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll

2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll

2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl

2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll

2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll

2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll

2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll

2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll

2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe

2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll

2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll

2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll

2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll

2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll

2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls

2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls

2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll

2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll

2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll

2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll

2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll

2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll

2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll

2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll

2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll

2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll

2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll

2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll

2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll

2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll

2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll

2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll

2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-12-26 19:07 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\OptuOn

2014-12-26 19:03 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\Unisales

2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth

2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke

2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs

2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles

2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia

2014-12-25 20:54 - 2015-01-09 08:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe

2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia

2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben

2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla

2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla

2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla

2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe

2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype

2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype

2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe

2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe

2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url

2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:49 - 2015-01-09 12:46 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe

2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA

2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games

2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk

2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015

2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015

2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList

2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial

2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki

2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros

2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware

2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk

2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk

2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks

2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk

2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft

2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4

2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater

2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater

2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk

2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk

2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll

2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll

2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google

2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google

2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll

2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll

2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll

2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll

2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll

2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll

2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll

2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll

2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll

2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe

2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll

2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll

2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll

2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll

2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys

2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll

2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll

2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll

2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-12-24 19:38 - 2015-01-09 07:19 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList

2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList

2014-12-24 19:33 - 2015-01-08 21:38 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002

2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk

2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM

2014-12-24 19:28 - 2015-01-09 12:48 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps

2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks

2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud

2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent

2014-12-24 19:27 - 2015-01-09 12:47 - 00000000 ___RD () C:\Users\Daniel\OneDrive

2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk

2014-12-24 19:26 - 2015-01-09 12:47 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi

2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream

2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia

2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM

2014-12-24 19:11 - 2015-01-08 12:57 - 00001013 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages

2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore

2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk

2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO

2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store

2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel

2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten

2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten

2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-09 12:49 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2015-01-09 12:49 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer

2015-01-09 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-01-09 12:43 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru

2015-01-09 00:17 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2015-01-09 00:17 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2015-01-09 00:17 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-08 23:25 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-08 23:24 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2015-01-08 14:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2015-01-08 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Vss

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee

2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator

2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports

2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF

2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache

2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod

2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup

2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default

2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer

2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore

2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent

2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games

2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM

2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM
 

Some content of TEMP:

====================

C:\Users\Daniel\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-07 07:25
 

==================== End Of Log ============================

--- --- ---

Ist der Laptop jetzt OK ?

Alle Zeitangaben in WEZ +1. Es ist jetzt 10:15 Uhr.

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131