Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   GVU Trojane auf WINDOWS 8 (https://www.trojaner-board.de/147022-gvu-trojane-windows-8-a.html)

afgbozz187 30.12.2013 22:46
GVU Trojane auf WINDOWS 8
 
sorry habs vohin falsch gepostet hie bin ich abe glaub ich richtig :
Hallo bauche dingend komme nach dem einloggen nicht meh zu desktop es kommt direkt diese GVU sche*** ich kann nicht mal task manage starten. Hab auch im abgesicheten modus versucht ging auch nicht kommt ein weißes fenste mit so einem kasten wo eigentlich die webcam angezeigt wird. systemwiederhestellung geht auch nicht obwohl ich welche punkte hatte BITTE ICH BAUCHE HILFE LAPTOP WAR NEU!!

schrauber 31.12.2013 02:25
hi,

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)
Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
  • Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST Download FRST 32-Bit | FRST 64-Bit
  • Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
  • Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:
Über den Boot Manager:
  • Starte den Rechner neu.
  • Während dem Hochfahren drücke mehrmals die F8 Taste
  • Wähle nun Computer reparieren.
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Mit Windows CD/DVD (auch bei Windows 8 möglich):
  • Lege die Windows CD in dein Laufwerk.
  • Starte den Rechner neu und starte von der CD.
  • Wähle die Spracheinstellungen und klicke "Weiter".
  • Klicke auf Computerreparaturoptionen !
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Wähle in den Reparaturoptionen: Eingabeaufforderung
  • Gib nun bitte notepad ein und drücke Enter.
  • Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
    Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
  • Schließe Notepad wieder
  • Gib nun bitte folgenden Befehl ein.
    e:\frst.exe bzw. e:\frst64.exe
    Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
  • Akzeptiere den Disclaimer mit Ja und klicke Untersuchen
Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).


afgbozz187 31.12.2013 15:34
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by SYSTEM on MININT-UADBI09 on 31-12-2013 15:27:41
Running from E:\
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtsFT] - C:\Windows\RTFTrack.exe [6334096 2012-10-17] (Realtek semiconductor)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-10-04] (Synaptics)
HKLM\...\Run: [OnekeyStudio] - C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-12-06] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [191544 2012-12-06] (Lenovo(beijing) Limited)
HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe [2045440 2010-09-02] (Eastman Kodak Company)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2958648 2012-10-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-08-16] (Intel Corporation)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-05-23] (cyberlink)
HKLM-x32\...\Run: [IntellingentTouchpad] - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [673336 2012-07-23] (Microsoft)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\noor\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-03-01] ()
HKU\noor\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\noor\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\noor\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [110352 2011-01-01] (www.motioninjoy.com)
HKU\noor\...\Winlogon: [Userinit] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] ()
HKU\noor\...\Winlogon: [Shell] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () <==== ATTENTION
AppInit_DLLs:    [ ] ()
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk -> C:\windows\system32\config\systemprofile\Desktop\Total.War.ROME.II.Update.2-RELOADED.exe (No File)
Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NVIDIA HD-Audio Driver.url ()

==================== Services (Whitelisted) =================

S2 CLKMSVC10_3A60B698; C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink)
S2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-10-18] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [579400 2013-02-08] (LENOVO INCORPORATED.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-09-17] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S2 Yontoo Desktop Updater; C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe [23552 2013-03-23] (Microsoft)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1408824 2013-10-18] (Motorola Solutions, Inc.)
S1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-03-05] (DT Soft Ltd)
S1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)
S0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
S0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-26] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8230160 2012-10-17] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-26] (Microsoft Corporation)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-04] (Synaptics Incorporated)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-31 15:27 - 2013-12-31 15:27 - 00000000 ____D C:\FRST
2013-12-30 21:13 - 2013-12-31 15:25 - 00000000 _____ C:\Recovery.txt
2013-12-30 20:52 - 2013-12-30 20:52 - 00000000 __SHD C:\found.000
2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe
2013-12-30 20:23 - 2013-12-21 00:11 - 69513976 _____ C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED.exe
2013-12-30 20:21 - 2013-12-30 20:21 - 00022837 _____ C:\Users\noor\Downloads\Total.War.ROME.II.Update.2-RELOADED.rar.nzb
2013-12-30 20:13 - 2013-12-30 20:28 - 00000000 ____D C:\Users\noor\Desktop\Crack
2013-12-30 18:49 - 2013-12-30 18:49 - 00000653 _____ C:\Users\Public\Desktop\Total War Rome II.lnk
2013-12-30 18:27 - 2013-12-30 20:26 - 00000000 ____D C:\Program Files\Total War Rome II
2013-12-30 17:49 - 2013-12-30 20:18 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.4-RELOADED
2013-12-30 17:48 - 2013-12-30 20:18 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.3-RELOADED
2013-12-30 17:48 - 2013-12-30 20:17 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED
2013-12-30 17:39 - 2013-12-30 17:39 - 00015115 _____ C:\Users\noor\Downloads\57.nzb.gz
2013-12-30 17:39 - 2013-12-30 17:39 - 00008938 _____ C:\Users\noor\Downloads\63.nzb.gz
2013-12-30 17:23 - 2013-12-30 17:23 - 00003397 _____ C:\Users\noor\Downloads\53.nzb.gz
2013-12-30 17:22 - 2013-12-30 20:19 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.1-RELOADED
2013-12-30 17:21 - 2013-12-30 17:21 - 00000982 _____ C:\Users\noor\Downloads\37.nzb.gz
2013-12-30 12:12 - 2013-12-30 12:12 - 00535101 _____ C:\Users\noor\Downloads\rld-twr2u7.rar.nzb
2013-12-27 20:45 - 2013-12-27 20:45 - 02182873 _____ C:\Users\noor\Downloads\Prisoners.2013.German.AC3D.DL.720p.BluRay.x264-HDLoad{{Usenetrevolution.info}}.nzb
2013-12-27 20:42 - 2013-12-27 20:42 - 00345157 _____ C:\Users\noor\Downloads\Disturbia 2007 German DL 720p BluRay DTS-ES x264-msd.rar
2013-12-27 20:36 - 2013-12-27 20:36 - 01010102 _____ C:\Users\noor\Downloads\Die.Unfassbaren.Now.You.See.Me.EXTENDED.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info.nzb
2013-12-27 20:33 - 2013-12-27 20:34 - 04157852 _____ C:\Users\noor\Downloads\Fight Club 1999 German REMASTERED BluRay REPACK 10 80p x264 x264Crew.nzb
2013-12-27 20:10 - 2013-12-27 20:10 - 01217907 _____ C:\Users\noor\Downloads\Whos.Next.2012.German.DL.720p.BluRay.x264-LeetHD{{Usenetrevolution.info}}.nzb
2013-12-27 20:02 - 2013-12-27 20:02 - 01561885 _____ C:\Users\noor\Downloads\Runner.Runner.2013.German.DL.AC3.720p.BluRay.x264-QRC{{Usenetrevolution.info}}.nzb
2013-12-27 19:57 - 2013-12-27 19:57 - 00568543 _____ C:\Users\noor\Downloads\8092 (1).nzb.gz
2013-12-27 19:52 - 2013-12-27 19:53 - 00000000 ____D C:\Users\noor\AppData\Local\QuickPar
2013-12-27 19:49 - 2013-12-27 19:49 - 00001034 _____ C:\Users\noor\Desktop\QuickPar.lnk
2013-12-27 19:49 - 2013-12-27 19:49 - 00000000 ____D C:\Program Files (x86)\QuickPar
2013-12-27 19:48 - 2013-12-27 19:48 - 00503439 _____ (Peter B Clements) C:\Users\noor\Downloads\QuickPar-0.9.1.0-DEU.exe
2013-12-27 19:43 - 2013-12-30 19:00 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.GERMAN-0x0007
2013-12-27 04:07 - 2013-12-27 04:07 - 00964898 _____ C:\Users\noor\Downloads\Pain.and.Gain.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info}}.nzb
2013-12-27 02:28 - 2013-12-27 02:28 - 00100332 _____ C:\Users\noor\Downloads\The Orphan Killer UNCUT German 2011 720p BluRay x264-AMBASSADOR.rar
2013-12-26 21:47 - 2013-12-27 00:21 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-26 18:42 - 2013-12-30 18:31 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-26 18:42 - 2013-12-26 18:42 - 01133552 _____ C:\Users\noor\Downloads\SteamSetup.exe
2013-12-26 18:42 - 2013-12-26 18:42 - 00000990 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-26 02:45 - 2013-12-26 02:45 - 00568543 _____ C:\Users\noor\Downloads\8092.nzb.gz
2013-12-26 02:41 - 2013-12-30 17:13 - 00000000 __RDO C:\Users\noor\SkyDrive
2013-12-26 02:12 - 2013-12-30 20:02 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{84CCD9F6-C4E8-4D47-9ADE-146DDE960D42}
2013-12-26 02:02 - 2013-12-26 02:02 - 00000020 ___SH C:\Users\noor\ntuser.ini
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-26 01:59 - 2013-12-26 01:59 - 00022960 _____ C:\Windows\System32\emptyregdb.dat
2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel
2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel
2013-12-26 01:39 - 2013-12-26 01:39 - 00000000 ____D C:\Windows\System32\config\bbimigrate
2013-12-26 01:37 - 2013-12-30 21:03 - 00000000 ____D C:\users\noor
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Vorlagen
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Startmenü
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Netzwerkumgebung
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Lokale Einstellungen
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Eigene Dateien
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Druckumgebung
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Musik
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Bilder
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Verlauf
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Anwendungsdaten
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Anwendungsdaten
2013-12-26 01:33 - 2013-12-26 01:59 - 00020958 _____ C:\Windows\diagwrn.xml
2013-12-26 01:33 - 2013-12-26 01:59 - 00020958 _____ C:\Windows\diagerr.xml
2013-12-26 01:28 - 2013-12-31 15:22 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-26 01:28 - 2013-12-30 21:18 - 01788946 _____ C:\Windows\WindowsUpdate.log
2013-12-26 01:28 - 2013-12-26 01:41 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-26 01:28 - 2013-12-26 01:41 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-26 01:28 - 2013-12-26 01:28 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2013-12-26 01:28 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll
2013-12-26 01:28 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll
2013-12-26 01:28 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll
2013-12-26 01:28 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
2013-12-26 01:28 - 2013-11-11 16:01 - 00598304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll
2013-12-26 01:28 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll
2013-12-26 01:28 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll
2013-12-26 01:27 - 2013-12-26 01:27 - 00000264 _____ C:\Windows\Tasks\Synaptics TouchPad Enhancements.job
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Synaptics
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Realtek
2013-12-26 01:24 - 2013-12-27 00:23 - 00000000 ___DC C:\Windows\Panther
2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 __SHD C:\Recovery
2013-12-26 01:23 - 2013-12-26 01:23 - 23183360 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 12996608 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 05769216 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 01995264 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-12-26 01:23 - 2013-12-26 01:23 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-26 01:23 - 2013-12-26 01:23 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 01395200 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe
2013-12-26 01:23 - 2013-12-26 01:23 - 00393216 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00287744 _____ (Microsoft Corporation) C:\Windows\System32\mdmregistration.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-12-26 01:23 - 2013-12-26 01:23 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\scrrun.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00075360 _____ (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Windows.old
2013-12-26 01:22 - 2013-12-26 01:22 - 13177344 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 07399256 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 04191744 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 04105728 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02896896 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02570240 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02143744 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02140888 _____ (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01843712 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01756160 _____ (Microsoft Corporation) C:\Windows\System32\WMPDMC.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01642016 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-12-26 01:22 - 2013-12-26 01:22 - 01530200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 01506680 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01476184 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-12-26 01:22 - 2013-12-26 01:22 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01345536 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01302528 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00922624 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00840704 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00747008 _____ (Microsoft Corporation) C:\Windows\System32\wlidcli.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncCore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00637952 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00568832 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 00566784 _____ (Microsoft Corporation) C:\Windows\System32\wpncore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00516496 _____ (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00382808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00372568 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00358896 _____ (Microsoft Corporation) C:\Windows\System32\dcomp.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00325464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS
2013-12-26 01:22 - 2013-12-26 01:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentClient.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00249856 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00146776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\SerCx2.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\winbici.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00086872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00039768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\CredentialMigrationHandler.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2013-12-26 01:21 - 2013-12-26 01:21 - 00262144 _____ C:\Windows\System32\config\userdiff
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\MSBuild
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-26 01:09 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\System32\PresentationNative_v0300.dll
2013-12-26 01:09 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-12-26 01:09 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\System32\TsWpfWrp.exe
2013-12-26 01:09 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2013-12-26 01:09 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-26 01:09 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2013-12-26 00:51 - 2013-12-26 01:59 - 00006611 _____ C:\Windows\comsetup.log
2013-12-25 22:30 - 2013-12-25 22:31 - 155611672 _____ (Lenovo Group Limited                                        ) C:\Users\noor\Downloads\1fwl08ww.exe
2013-12-25 22:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2013-12-25 22:20 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll
2013-12-25 22:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-25 22:18 - 2013-12-25 22:20 - 00000000 ____D C:\Users\noor\AppData\Local\NVIDIA
2013-12-25 22:18 - 2013-12-25 22:18 - 00001362 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2013-12-25 22:15 - 2013-12-25 22:15 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-25 22:15 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll
2013-12-25 22:15 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 18293608 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys
2013-12-25 22:12 - 2013-11-14 12:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 03069608 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6433182.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6433182.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 01510176 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdagenco64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00479520 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00357152 _____ C:\Windows\System32\NvIFROpenGL.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00196384 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvhda64v.sys
2013-12-25 22:12 - 2013-11-14 12:58 - 00031520 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdap64.dll
2013-12-25 22:12 - 2013-11-14 12:58 - 00029984 _____ (NVIDIA Corporation) C:\Windows\System32\SET422F.tmp
2013-12-25 22:12 - 2013-11-14 12:58 - 00023754 _____ C:\Windows\System32\nvinfo.pb
2013-12-25 22:10 - 2013-12-25 22:10 - 00000000 ____D C:\Users\noor\Documents\Meine empfangenen Dateien
2013-12-25 21:57 - 2013-12-25 21:57 - 00006230 _____ C:\Users\noor\Downloads\Driver Genius Pro 14.0.0.323 Final Multilanguage inkl.German.nfo.nzb
2013-12-25 21:55 - 2013-12-25 21:56 - 11360048 _____ (Driver-Soft Inc.                                            ) C:\Users\noor\Downloads\Driver_Genius_Professional_12_DE.exe
2013-12-25 21:49 - 2013-12-25 21:49 - 00154283 ____H C:\Users\noor\AppData\Roaming\Masoud-wchelper.dll
2013-12-25 21:49 - 2013-12-25 21:49 - 00000000 ____D C:\Users\noor\AppData\Roaming\FlashPlayer
2013-12-25 21:48 - 2013-12-25 21:48 - 00015520 _____ C:\Users\noor\Downloads\Driver-Genius-12.0.0.1328-Final-MLCrackKey.rar.nzb
2013-12-25 21:46 - 2013-12-25 21:46 - 00341104 _____ (QuickSet) C:\Users\noor\Downloads\DriverGeniusCrk.rar.exe
2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\InstallMate
2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\1f2851370af833c2
2013-12-25 21:42 - 2013-12-25 22:24 - 00000000 ____D C:\ProgramData\DriverGenius
2013-12-25 21:41 - 2013-12-25 22:00 - 00001222 _____ C:\Users\noor\Desktop\Driver Genius.lnk
2013-12-25 21:41 - 2013-12-25 21:41 - 00000000 ____D C:\Program Files (x86)\Driver-Soft
2013-12-25 21:39 - 2013-12-25 21:40 - 11360728 _____ (Driver-Soft Inc.                                            ) C:\Users\noor\Downloads\Driver_Genius_Professional_DE_12.exe
2013-12-25 16:18 - 2013-12-25 16:18 - 02578718 _____ C:\Users\noor\Downloads\Chennai.Express.2013.German.1080p.BluRay.x264-iFPD{{Usenetrevolution.info}}.nzb
2013-12-23 14:30 - 2013-12-23 14:30 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-12-23 14:29 - 2013-12-23 14:29 - 00527423 _____ (                                                            ) C:\Users\noor\Downloads\Lame_v3.99.3_for_Windows.exe
2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5.tar.gz
2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5 (1).tar.gz
2013-12-23 14:12 - 2013-12-23 14:12 - 03740128 _____ (foobar2000.org) C:\Users\noor\Downloads\foobar2000_v1.2.9.exe
2013-12-23 14:12 - 2013-12-23 14:12 - 00001046 _____ C:\Users\Public\Desktop\foobar2000.lnk
2013-12-23 00:09 - 2013-12-23 00:09 - 03191888 _____ (McAfee, Inc.) C:\Users\noor\Downloads\MCPR_6.5.101.exe
2013-12-22 17:36 - 2013-12-22 17:36 - 00480515 _____ C:\Users\noor\Downloads\Microsoft Office Professional Plus 2013 VL x64 - x86 iso German - mcu.nfo.nzb
2013-12-22 03:42 - 2013-12-22 03:42 - 00161133 _____ C:\Users\noor\Documents\2pac.xspf
2013-12-21 19:24 - 2013-12-21 19:24 - 00087777 _____ C:\Users\noor\Downloads\One Piece Ep.521 - Xvid - HD - Anime German sub by had551.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00083039 _____ C:\Users\noor\Downloads\One Piece Ep.523 - Xvid - HD - Anime German sub by had51.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00083000 _____ C:\Users\noor\Downloads\One Piece Ep.525 - Xvid - HD - Anime German sub by had551.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00079383 _____ C:\Users\noor\Downloads\One Piece Ep.522 - MP4 - Anime German sub by had551.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00078590 _____ C:\Users\noor\Downloads\One Piece Ep.524 - Xvid - HD - Anime German sub by had551.nzb
2013-12-21 19:22 - 2013-12-21 19:22 - 00323328 _____ C:\Users\noor\Downloads\NZBIndex-download.nzb
2013-12-16 21:05 - 2013-12-16 21:05 - 00219348 _____ C:\Users\noor\Downloads\1pho.pdb
2013-12-14 23:47 - 2013-12-14 23:48 - 00973212 _____ C:\Users\noor\Downloads\Sinister 2012 German DTS DL 720p BluRay x264-RHD.nzb
2013-12-14 23:41 - 2013-12-14 23:41 - 00366170 _____ C:\Users\noor\Downloads\Youre.Next.TS.MD.German.XviD-WTR{{Usenetrevolution.info}}.nzb
2013-12-14 23:39 - 2013-12-14 23:39 - 00170844 _____ C:\Users\noor\Downloads\Youre.Next.TS.LD.German.X264-AOE{{Usenetrevolution.info}}.nzb
2013-12-14 19:30 - 2013-12-14 19:30 - 01586776 _____ C:\Users\noor\Downloads\One Piece Ep.501 bis 520 - MKV - Anime German sub by had551.nzb
2013-12-14 14:49 - 2013-12-14 14:49 - 00001285 _____ C:\Users\noor\Desktop\2Pac - Verknüpfung.lnk
2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\noor\AppData\Local\SKIDROW
2013-12-07 22:17 - 2013-12-07 22:21 - 145842626 _____ C:\Users\noor\Downloads\One Piece Pirate Warriors 2.rar
2013-12-03 16:25 - 2013-12-03 16:25 - 00014915 _____ C:\Users\noor\Documents\welkrieg zeitleiste2.odt
2013-12-03 15:15 - 2013-12-03 16:26 - 00015462 _____ C:\Users\noor\Documents\weltkrieg zeitleiste.odt
2013-12-03 12:11 - 2013-12-03 12:11 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-03 12:11 - 2013-12-03 12:11 - 00000000 ____D C:\Users\noor\AppData\Roaming\OpenOffice
2013-12-03 12:10 - 2013-12-03 12:11 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-12-03 12:08 - 2013-12-03 12:08 - 00000000 ____D C:\Users\noor\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-12-03 11:59 - 2013-12-03 12:04 - 163606685 _____ C:\Users\noor\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-12-01 19:53 - 2013-12-01 19:53 - 00127389 _____ C:\Users\noor\Downloads\Hours Wettlauf gegen die Zeit 2013 German DTS DL 720p BluRay x264-LeetHD.rar

==================== One Month Modified Files and Folders =======

2013-12-31 15:27 - 2013-12-31 15:27 - 00000000 ____D C:\FRST
2013-12-31 15:25 - 2013-12-30 21:13 - 00000000 _____ C:\Recovery.txt
2013-12-31 15:24 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-31 15:22 - 2013-12-26 01:28 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-30 22:08 - 2013-03-02 00:49 - 00002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-30 22:08 - 2013-03-02 00:48 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-30 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\sru
2013-12-30 21:59 - 2013-11-14 08:27 - 01780340 _____ C:\Windows\System32\PerfStringBackup.INI
2013-12-30 21:59 - 2013-11-14 08:11 - 00766620 _____ C:\Windows\System32\perfh007.dat
2013-12-30 21:59 - 2013-11-14 08:11 - 00159902 _____ C:\Windows\System32\perfc007.dat
2013-12-30 21:55 - 2013-08-22 15:46 - 00290800 _____ C:\Windows\setupact.log
2013-12-30 21:18 - 2013-12-26 01:28 - 01788946 _____ C:\Windows\WindowsUpdate.log
2013-12-30 21:03 - 2013-12-26 01:37 - 00000000 ____D C:\users\noor
2013-12-30 20:52 - 2013-12-30 20:52 - 00000000 __SHD C:\found.000
2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe
2013-12-30 20:28 - 2013-12-30 20:13 - 00000000 ____D C:\Users\noor\Desktop\Crack
2013-12-30 20:26 - 2013-12-30 18:27 - 00000000 ____D C:\Program Files\Total War Rome II
2013-12-30 20:23 - 2013-03-23 19:33 - 00000000 ____D C:\Users\noor\AppData\Roaming\vlc
2013-12-30 20:21 - 2013-12-30 20:21 - 00022837 _____ C:\Users\noor\Downloads\Total.War.ROME.II.Update.2-RELOADED.rar.nzb
2013-12-30 20:19 - 2013-12-30 17:22 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.1-RELOADED
2013-12-30 20:18 - 2013-12-30 17:49 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.4-RELOADED
2013-12-30 20:18 - 2013-12-30 17:48 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.3-RELOADED
2013-12-30 20:17 - 2013-12-30 17:48 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED
2013-12-30 20:02 - 2013-12-26 02:12 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{84CCD9F6-C4E8-4D47-9ADE-146DDE960D42}
2013-12-30 19:54 - 2013-03-02 00:48 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 19:50 - 2013-09-08 16:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 19:00 - 2013-12-27 19:43 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.GERMAN-0x0007
2013-12-30 18:54 - 2013-03-01 19:34 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3994570472-1178723934-3272383085-1002
2013-12-30 18:49 - 2013-12-30 18:49 - 00000653 _____ C:\Users\Public\Desktop\Total War Rome II.lnk
2013-12-30 18:31 - 2013-12-26 18:42 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-30 17:43 - 2013-03-01 22:15 - 00000000 ____D C:\Users\noor\AppData\Local\PMB Files
2013-12-30 17:39 - 2013-12-30 17:39 - 00015115 _____ C:\Users\noor\Downloads\57.nzb.gz
2013-12-30 17:39 - 2013-12-30 17:39 - 00008938 _____ C:\Users\noor\Downloads\63.nzb.gz
2013-12-30 17:23 - 2013-12-30 17:23 - 00003397 _____ C:\Users\noor\Downloads\53.nzb.gz
2013-12-30 17:21 - 2013-12-30 17:21 - 00000982 _____ C:\Users\noor\Downloads\37.nzb.gz
2013-12-30 17:13 - 2013-12-26 02:41 - 00000000 __RDO C:\Users\noor\SkyDrive
2013-12-30 17:13 - 2013-03-01 19:24 - 00000000 ____D C:\Users\noor\AppData\Local\VirtualStore
2013-12-30 16:56 - 2013-03-01 22:15 - 00000000 ____D C:\ProgramData\PMB Files
2013-12-30 16:55 - 2013-03-07 20:04 - 00000271 _____ C:\Users\noor\AppData\Local\RegisteredPackageInformation.xml
2013-12-30 14:31 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-12-30 13:54 - 2013-03-04 23:21 - 00000000 ____D C:\Users\noor\AppData\Roaming\Skype
2013-12-30 12:12 - 2013-12-30 12:12 - 00535101 _____ C:\Users\noor\Downloads\rld-twr2u7.rar.nzb
2013-12-28 16:47 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2013-12-27 20:45 - 2013-12-27 20:45 - 02182873 _____ C:\Users\noor\Downloads\Prisoners.2013.German.AC3D.DL.720p.BluRay.x264-HDLoad{{Usenetrevolution.info}}.nzb
2013-12-27 20:42 - 2013-12-27 20:42 - 00345157 _____ C:\Users\noor\Downloads\Disturbia 2007 German DL 720p BluRay DTS-ES x264-msd.rar
2013-12-27 20:36 - 2013-12-27 20:36 - 01010102 _____ C:\Users\noor\Downloads\Die.Unfassbaren.Now.You.See.Me.EXTENDED.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info.nzb
2013-12-27 20:34 - 2013-12-27 20:33 - 04157852 _____ C:\Users\noor\Downloads\Fight Club 1999 German REMASTERED BluRay REPACK 10 80p x264 x264Crew.nzb
2013-12-27 20:10 - 2013-12-27 20:10 - 01217907 _____ C:\Users\noor\Downloads\Whos.Next.2012.German.DL.720p.BluRay.x264-LeetHD{{Usenetrevolution.info}}.nzb
2013-12-27 20:02 - 2013-12-27 20:02 - 01561885 _____ C:\Users\noor\Downloads\Runner.Runner.2013.German.DL.AC3.720p.BluRay.x264-QRC{{Usenetrevolution.info}}.nzb
2013-12-27 19:57 - 2013-12-27 19:57 - 00568543 _____ C:\Users\noor\Downloads\8092 (1).nzb.gz
2013-12-27 19:53 - 2013-12-27 19:52 - 00000000 ____D C:\Users\noor\AppData\Local\QuickPar
2013-12-27 19:49 - 2013-12-27 19:49 - 00001034 _____ C:\Users\noor\Desktop\QuickPar.lnk
2013-12-27 19:49 - 2013-12-27 19:49 - 00000000 ____D C:\Program Files (x86)\QuickPar
2013-12-27 19:48 - 2013-12-27 19:48 - 00503439 _____ (Peter B Clements) C:\Users\noor\Downloads\QuickPar-0.9.1.0-DEU.exe
2013-12-27 04:07 - 2013-12-27 04:07 - 00964898 _____ C:\Users\noor\Downloads\Pain.and.Gain.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info}}.nzb
2013-12-27 02:28 - 2013-12-27 02:28 - 00100332 _____ C:\Users\noor\Downloads\The Orphan Killer UNCUT German 2011 720p BluRay x264-AMBASSADOR.rar
2013-12-27 00:23 - 2013-12-26 01:24 - 00000000 ___DC C:\Windows\Panther
2013-12-27 00:21 - 2013-12-26 21:47 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-27 00:21 - 2013-03-01 19:24 - 00000000 ____D C:\Users\noor\AppData\Local\Packages
2013-12-26 21:48 - 2013-08-22 15:44 - 00512264 _____ C:\Windows\System32\FNTCACHE.DAT
2013-12-26 21:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\restore
2013-12-26 18:42 - 2013-12-26 18:42 - 01133552 _____ C:\Users\noor\Downloads\SteamSetup.exe
2013-12-26 18:42 - 2013-12-26 18:42 - 00000990 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-26 02:45 - 2013-12-26 02:45 - 00568543 _____ C:\Users\noor\Downloads\8092.nzb.gz
2013-12-26 02:41 - 2013-05-29 11:14 - 00000000 ___RD C:\Users\noor\SkyDrive.old
2013-12-26 02:05 - 2013-11-14 09:24 - 00000000 ___HD C:\$Windows.~BT
2013-12-26 02:02 - 2013-12-26 02:02 - 00000020 ___SH C:\Users\noor\ntuser.ini
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-26 02:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Registration
2013-12-26 02:00 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-12-26 02:00 - 2013-08-22 14:36 - 00000000 __RHD C:\users\Default
2013-12-26 01:59 - 2013-12-26 01:59 - 00022960 _____ C:\Windows\System32\emptyregdb.dat
2013-12-26 01:59 - 2013-12-26 01:33 - 00020958 _____ C:\Windows\diagwrn.xml
2013-12-26 01:59 - 2013-12-26 01:33 - 00020958 _____ C:\Windows\diagerr.xml
2013-12-26 01:59 - 2013-12-26 00:51 - 00006611 _____ C:\Windows\comsetup.log
2013-12-26 01:53 - 2013-08-22 16:36 - 00000000 __RSD C:\Windows\Media
2013-12-26 01:53 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-26 01:50 - 2012-12-06 16:06 - 01804472 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-26 01:44 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\System32\Sysprep
2013-12-26 01:44 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\System32\config\ELAM
2013-12-26 01:44 - 2012-12-06 16:05 - 00000000 ____D C:\Windows\SysWOW64\Atheros_L1e
2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel
2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel
2013-12-26 01:43 - 2013-08-22 16:37 - 00004893 _____ C:\Windows\DtcInstall.log
2013-12-26 01:43 - 2012-07-26 06:37 - 00000000 ____D C:\users\Default.migrated
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\winrm
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\WCN
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\slmgr
2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\Printing_Admin_Scripts
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\IME
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\WinBioPlugIns
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\SystemResetPlatform
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\spool
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\NDF
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\MUI
2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\IME
2013-12-26 01:42 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\SMI
2013-12-26 01:42 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\System32\oobe
2013-12-26 01:42 - 2013-06-29 19:08 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-12-26 01:42 - 2013-04-23 18:38 - 00000000 ____D C:\Windows\SysWOW64\jmdp
2013-12-26 01:42 - 2013-04-23 18:38 - 00000000 ____D C:\Windows\SysWOW64\ARFC
2013-12-26 01:42 - 2012-12-06 16:04 - 00000000 ____D C:\Windows\SysWOW64\SDA
2013-12-26 01:41 - 2013-12-26 01:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-26 01:41 - 2013-12-26 01:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-26 01:41 - 2013-11-14 08:13 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-26 01:41 - 2013-08-22 16:43 - 00000000 ____D C:\Windows\DigitalLocker
2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\IME
2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Help
2013-12-26 01:41 - 2012-08-01 16:53 - 00000000 ____D C:\ProgramData\PRICache
2013-12-26 01:40 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-26 01:39 - 2013-12-26 01:39 - 00000000 ____D C:\Windows\System32\config\bbimigrate
2013-12-26 01:39 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\Recovery
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Vorlagen
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Startmenü
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Netzwerkumgebung
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Lokale Einstellungen
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Eigene Dateien
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Druckumgebung
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Musik
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Bilder
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Verlauf
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Anwendungsdaten
2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Anwendungsdaten
2013-12-26 01:28 - 2013-12-26 01:28 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2013-12-26 01:28 - 2013-08-22 15:46 - 00000168 _____ C:\Windows\setuperr.log
2013-12-26 01:27 - 2013-12-26 01:27 - 00000264 _____ C:\Windows\Tasks\Synaptics TouchPad Enhancements.job
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Synaptics
2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Realtek
2013-12-26 01:25 - 2013-11-13 23:18 - 00000808 _____ C:\Windows\PFRO.log
2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 __SHD C:\Recovery
2013-12-26 01:23 - 2013-12-26 01:23 - 23183360 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 12996608 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 05769216 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 01995264 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-12-26 01:23 - 2013-12-26 01:23 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-26 01:23 - 2013-12-26 01:23 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 01395200 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe
2013-12-26 01:23 - 2013-12-26 01:23 - 00393216 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00287744 _____ (Microsoft Corporation) C:\Windows\System32\mdmregistration.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-12-26 01:23 - 2013-12-26 01:23 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\scrrun.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00075360 _____ (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Windows.old
2013-12-26 01:23 - 2013-08-22 16:36 - 00262144 _____ C:\Windows\System32\config\BCD-Template
2013-12-26 01:22 - 2013-12-26 01:22 - 13177344 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 07399256 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 04191744 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 04105728 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02896896 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02570240 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02143744 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 02140888 _____ (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01843712 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 01756160 _____ (Microsoft Corporation) C:\Windows\System32\WMPDMC.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01642016 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-12-26 01:22 - 2013-12-26 01:22 - 01530200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 01506680 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01476184 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-12-26 01:22 - 2013-12-26 01:22 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01345536 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 01302528 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00922624 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00840704 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00747008 _____ (Microsoft Corporation) C:\Windows\System32\wlidcli.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncCore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00637952 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00568832 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 00566784 _____ (Microsoft Corporation) C:\Windows\System32\wpncore.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00516496 _____ (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2013-12-26 01:22 - 2013-12-26 01:22 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00382808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00372568 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00358896 _____ (Microsoft Corporation) C:\Windows\System32\dcomp.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00325464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS
2013-12-26 01:22 - 2013-12-26 01:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentClient.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00249856 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00146776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\SerCx2.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\winbici.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00086872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00039768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys
2013-12-26 01:22 - 2013-12-26 01:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\CredentialMigrationHandler.dll
2013-12-26 01:22 - 2013-12-26 01:22 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\MediaViewer
2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\FileManager
2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Camera
2013-12-26 01:21 - 2013-12-26 01:21 - 00262144 _____ C:\Windows\System32\config\userdiff
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\MSBuild
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-26 00:56 - 2012-12-06 16:05 - 01252231 _____ C:\Windows\WindowsUpdate (1).log
2013-12-26 00:36 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-12-25 22:31 - 2013-12-25 22:30 - 155611672 _____ (Lenovo Group Limited                                        ) C:\Users\noor\Downloads\1fwl08ww.exe
2013-12-25 22:24 - 2013-12-25 21:42 - 00000000 ____D C:\ProgramData\DriverGenius
2013-12-25 22:20 - 2013-12-25 22:18 - 00000000 ____D C:\Users\noor\AppData\Local\NVIDIA
2013-12-25 22:20 - 2013-03-03 01:22 - 00000000 ____D C:\Users\noor\AppData\Local\NVIDIA Corporation
2013-12-25 22:20 - 2012-12-06 15:59 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-25 22:19 - 2013-11-21 17:26 - 00000000 ____D C:\Intel
2013-12-25 22:18 - 2013-12-25 22:18 - 00001362 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2013-12-25 22:15 - 2013-12-25 22:15 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-25 22:10 - 2013-12-25 22:10 - 00000000 ____D C:\Users\noor\Documents\Meine empfangenen Dateien
2013-12-25 22:10 - 2012-12-06 15:55 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-25 22:00 - 2013-12-25 21:41 - 00001222 _____ C:\Users\noor\Desktop\Driver Genius.lnk
2013-12-25 21:57 - 2013-12-25 21:57 - 00006230 _____ C:\Users\noor\Downloads\Driver Genius Pro 14.0.0.323 Final Multilanguage inkl.German.nfo.nzb
2013-12-25 21:56 - 2013-12-25 21:55 - 11360048 _____ (Driver-Soft Inc.                                            ) C:\Users\noor\Downloads\Driver_Genius_Professional_12_DE.exe
2013-12-25 21:49 - 2013-12-25 21:49 - 00154283 ____H C:\Users\noor\AppData\Roaming\Masoud-wchelper.dll
2013-12-25 21:49 - 2013-12-25 21:49 - 00000000 ____D C:\Users\noor\AppData\Roaming\FlashPlayer
2013-12-25 21:48 - 2013-12-25 21:48 - 00015520 _____ C:\Users\noor\Downloads\Driver-Genius-12.0.0.1328-Final-MLCrackKey.rar.nzb
2013-12-25 21:46 - 2013-12-25 21:46 - 00341104 _____ (QuickSet) C:\Users\noor\Downloads\DriverGeniusCrk.rar.exe
2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\InstallMate
2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\1f2851370af833c2
2013-12-25 21:41 - 2013-12-25 21:41 - 00000000 ____D C:\Program Files (x86)\Driver-Soft
2013-12-25 21:40 - 2013-12-25 21:39 - 11360728 _____ (Driver-Soft Inc.                                            ) C:\Users\noor\Downloads\Driver_Genius_Professional_DE_12.exe
2013-12-25 21:20 - 2013-03-03 01:26 - 586697113 _____ C:\Windows\MEMORY.DMP
2013-12-25 16:18 - 2013-12-25 16:18 - 02578718 _____ C:\Users\noor\Downloads\Chennai.Express.2013.German.1080p.BluRay.x264-iFPD{{Usenetrevolution.info}}.nzb
2013-12-23 17:12 - 2013-03-01 20:07 - 00000000 ____D C:\Users\noor\Documents\Youcam
2013-12-23 14:31 - 2013-11-20 21:03 - 00000000 ____D C:\Users\noor\AppData\Roaming\foobar2000
2013-12-23 14:31 - 2013-10-17 12:17 - 00000000 ____D C:\Users\noor\Desktop\Filme
2013-12-23 14:30 - 2013-12-23 14:30 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-12-23 14:29 - 2013-12-23 14:29 - 00527423 _____ (                                                            ) C:\Users\noor\Downloads\Lame_v3.99.3_for_Windows.exe
2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5.tar.gz
2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5 (1).tar.gz
2013-12-23 14:12 - 2013-12-23 14:12 - 03740128 _____ (foobar2000.org) C:\Users\noor\Downloads\foobar2000_v1.2.9.exe
2013-12-23 14:12 - 2013-12-23 14:12 - 00001046 _____ C:\Users\Public\Desktop\foobar2000.lnk
2013-12-23 14:12 - 2013-11-20 21:03 - 00000000 ____D C:\Program Files (x86)\foobar2000
2013-12-23 00:10 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-12-23 00:09 - 2013-12-23 00:09 - 03191888 _____ (McAfee, Inc.) C:\Users\noor\Downloads\MCPR_6.5.101.exe
2013-12-22 21:16 - 2013-11-24 11:59 - 00000000 ____D C:\Program Files\Assassins Creed IV Black Flag
2013-12-22 21:16 - 2013-11-24 01:10 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-12-22 21:16 - 2013-03-05 00:36 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-22 17:36 - 2013-12-22 17:36 - 00480515 _____ C:\Users\noor\Downloads\Microsoft Office Professional Plus 2013 VL x64 - x86 iso German - mcu.nfo.nzb
2013-12-22 17:22 - 2013-03-02 19:53 - 00000000 ____D C:\Users\noor\Desktop\USB STICK
2013-12-22 17:16 - 2013-03-21 22:15 - 00663552 ___SH C:\Users\noor\Downloads\Thumbs.db
2013-12-22 03:42 - 2013-12-22 03:42 - 00161133 _____ C:\Users\noor\Documents\2pac.xspf
2013-12-22 00:52 - 2013-10-24 15:26 - 00000000 ____D C:\Program Files (x86)\Saints Row IV
2013-12-21 19:24 - 2013-12-21 19:24 - 00087777 _____ C:\Users\noor\Downloads\One Piece Ep.521 - Xvid - HD - Anime German sub by had551.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00083039 _____ C:\Users\noor\Downloads\One Piece Ep.523 - Xvid - HD - Anime German sub by had51.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00083000 _____ C:\Users\noor\Downloads\One Piece Ep.525 - Xvid - HD - Anime German sub by had551.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00079383 _____ C:\Users\noor\Downloads\One Piece Ep.522 - MP4 - Anime German sub by had551.nzb
2013-12-21 19:24 - 2013-12-21 19:24 - 00078590 _____ C:\Users\noor\Downloads\One Piece Ep.524 - Xvid - HD - Anime German sub by had551.nzb
2013-12-21 19:22 - 2013-12-21 19:22 - 00323328 _____ C:\Users\noor\Downloads\NZBIndex-download.nzb
2013-12-21 19:22 - 2013-10-24 02:01 - 00000000 ____D C:\Users\noor\AppData\Roaming\UseNeXT
2013-12-21 00:11 - 2013-12-30 20:23 - 69513976 _____ C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED.exe
2013-12-16 21:05 - 2013-12-16 21:05 - 00219348 _____ C:\Users\noor\Downloads\1pho.pdb
2013-12-16 20:40 - 2013-08-16 00:41 - 00000000 ____D C:\Windows\System32\MRT
2013-12-16 20:39 - 2013-03-02 12:04 - 90708896 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-12-16 16:03 - 2013-04-20 15:16 - 00089600 ___SH C:\Users\noor\Desktop\Thumbs.db
2013-12-14 23:48 - 2013-12-14 23:47 - 00973212 _____ C:\Users\noor\Downloads\Sinister 2012 German DTS DL 720p BluRay x264-RHD.nzb
2013-12-14 23:41 - 2013-12-14 23:41 - 00366170 _____ C:\Users\noor\Downloads\Youre.Next.TS.MD.German.XviD-WTR{{Usenetrevolution.info}}.nzb
2013-12-14 23:39 - 2013-12-14 23:39 - 00170844 _____ C:\Users\noor\Downloads\Youre.Next.TS.LD.German.X264-AOE{{Usenetrevolution.info}}.nzb
2013-12-14 19:30 - 2013-12-14 19:30 - 01586776 _____ C:\Users\noor\Downloads\One Piece Ep.501 bis 520 - MKV - Anime German sub by had551.nzb
2013-12-14 14:49 - 2013-12-14 14:49 - 00001285 _____ C:\Users\noor\Desktop\2Pac - Verknüpfung.lnk
2013-12-11 19:50 - 2013-09-08 16:37 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 03:13 - 2013-12-25 22:15 - 01100248 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll
2013-12-10 03:13 - 2013-12-25 22:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\noor\AppData\Local\SKIDROW
2013-12-08 00:49 - 2013-11-24 12:33 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-07 22:21 - 2013-12-07 22:17 - 145842626 _____ C:\Users\noor\Downloads\One Piece Pirate Warriors 2.rar
2013-12-06 19:42 - 2013-03-05 00:36 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-06 16:59 - 2013-03-04 23:21 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-06 16:59 - 2013-03-04 23:21 - 00000000 ____D C:\ProgramData\Skype
2013-12-05 09:42 - 2013-12-25 22:20 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2013-12-05 09:42 - 2013-12-25 22:20 - 00035104 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll
2013-12-05 09:42 - 2013-12-25 22:20 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-04 01:05 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-04 01:05 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-03 16:26 - 2013-12-03 15:15 - 00015462 _____ C:\Users\noor\Documents\weltkrieg zeitleiste.odt
2013-12-03 16:25 - 2013-12-03 16:25 - 00014915 _____ C:\Users\noor\Documents\welkrieg zeitleiste2.odt
2013-12-03 12:11 - 2013-12-03 12:11 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-03 12:11 - 2013-12-03 12:11 - 00000000 ____D C:\Users\noor\AppData\Roaming\OpenOffice
2013-12-03 12:11 - 2013-12-03 12:10 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-12-03 12:08 - 2013-12-03 12:08 - 00000000 ____D C:\Users\noor\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-12-03 12:04 - 2013-12-03 11:59 - 163606685 _____ C:\Users\noor\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-12-01 19:53 - 2013-12-01 19:53 - 00127389 _____ C:\Users\noor\Downloads\Hours Wettlauf gegen die Zeit 2013 German DTS DL 720p BluRay x264-LeetHD.rar
2013-12-01 18:49 - 2013-03-02 00:48 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-01 18:49 - 2013-03-02 00:48 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 11%
Total physical RAM: 8139.27 MB
Available physical RAM: 7177.24 MB
Total Pagefile: 8139.27 MB
Available Pagefile: 7205.38 MB
Total Virtual: 131072 MB
Available Virtual: 131071.85 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:883.84 GB) (Free:339.54 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.65 GB) NTFS
Drive e: (MILAD) (Removable) (Total:59.41 GB) (Free:59.41 GB) FAT32
Drive g: () (Fixed) (Total:0.34 GB) (Free:0 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.5 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 15 GB) (Disk ID: E4837710)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 932 GB) (Disk ID: E4837711)

Partition: GPT Partition Type
========================================================
Disk: 2 (Size: 60 GB) (Disk ID: 9EE7B8A1)
Partition 1: (Active) - (Size=60 GB) - (Type=0B)


LastRegBack: 2013-12-26 01:25

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

schrauber 01.01.2014 13:21
Eigentlich müsste ich dich mit dem System so hängen lassen, bei der ganzen gecrackten Scheisse die auf dem Rechner ist.

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKU\noor\...\Winlogon: [Userinit] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] ()
HKU\noor\...\Winlogon: [Shell] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () <==== ATTENTION
AppInit_DLLs:    [ ] ()
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


Rechner normal starten. Wir sind dann noch nit fertig, aber es geht erst weiter wenn der ganze Scheiss gelöscht wurde.

afgbozz187 02.01.2014 13:41
Danke das sie mich nicht hängen lassen :)

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01
Ran by SYSTEM at 2014-01-01 13:51:23 Run:1
Running from E:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\noor\...\Winlogon: [Userinit] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] ()
HKU\noor\...\Winlogon: [Shell] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () <==== ATTENTION
AppInit_DLLs:    [ ] ()
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe
       
*****************

HKU\noor\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value deleted successfully.
HKU\noor\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsemngr.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsermngr.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bundlesweetimsetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\cltmngsvc.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta babylon.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta tb.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta2.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltainstaller.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltasetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltatb_2501-c733154b.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\iminentsetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\rjatydimofu.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\sweetimsetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\tbdelta.exetoolbar783881609.exe => Key deleted successfully.
C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk => Moved successfully.
C:\Users\noor\AppData\Roaming\loadit.exe => Moved successfully.

==== End of Fixlog ====
Als ich wieder nach dem fix drin war habe ich einen scan durchgeführt mit malwarbytes heißt es glaub ich danach kommt wieder ein weißes fenster da steht das sie angeblich den pc scannen würden und einen neustart durchführen nach dem neustart kommt wieder dieses gvu fenster es kommt ungefähr nach 5-10 min er lässt malwarebytes nicht zu ende scannen .

ok hab es geschafft den virus mit malwarebytes zu entfernen laptop startet jetzt normal, han aber jetzt das problem das ich den laptop nicht herunterfahren kann, da steht er würde herunterfahren dann wird der bildschirm schwarz und ich komme dann zum sperrschirm.

schrauber 03.01.2014 12:01
Dann lass den PC an.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Scan im normalen Modus machen. Und erstmal die Cracks löschen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:38 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131