Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   PUP optional Candy (https://www.trojaner-board.de/147269-pup-optional-candy.html)

drud 03.01.2014 23:50
PUP optional Candy
 
Hallo zusammen
Mein PC hat heute nach Windows Update (grafikkarte, java) und Deinstallation alter unbenutzter Software (ein Spiel, das schon beim Kauf drauf war) mucken gemacht. Erst blieb der Windows Explorer hängen und dann kam immer die Meldung von wegen Outlook müsse als Standard Programm sein. Vorher hats mir nach den Updates noch das Deskop Hintergrundbild auf eines von Asus geändert. Ich habe das also hingekriegt mti einer Office Reparatur. Aber alles war sehr langsam. Habe dann Anti Maleware Bytes laufen lassen, CC Cleaner benutzt, da dieses ADW Programm hab ich auch benutzt. ob die 4 funde des PUP optional candy mit den vorher aufgetretenen problemen zusammenhängt oder nicht weiss ich nicht. die kiste ist jetzt aber wieder normal vom tempo her und blieb nicht mehr hängen (windows explorer). outlook meldung beim aufstarten kommt auch nicht mehr.

hier mal die logfiles:
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.03.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
mäder :: MÄDER-PC [administrator]

03.01.2014 19:58:38
mbam-log-2014-01-03 (19-58-38).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 257636
Time elapsed: 9 minute(s), 48 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 2
C:\Users\mäder\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\mäder\AppData\Roaming\OpenCandy\05413DA39887452AADBA7AE58C561337 (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

Files Detected: 2
C:\Users\mäder\Downloads\MediaInfo_GUI_0.7.63_Windows.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\mäder\AppData\Roaming\OpenCandy\05413DA39887452AADBA7AE58C561337\version51030bc4470a0.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

(end)
das vom ADW fehlt mir leider, das ha ich nicht gespeichert.

hier noch das andere:

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by mäder on 03.01.2014 at 20:49:47.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\mäder\appdata\local\{63E582D1-38F6-4DC1-A777-1723D2F6355A}
Successfully deleted: [Empty Folder] C:\Users\mäder\appdata\local\{A4143ACA-D8B4-4363-9AC3-B16317EC5EA2}



~~~ FireFox

Emptied folder: C:\Users\mäder\AppData\Roaming\mozilla\firefox\profiles\mpazrgl1.default\minidumps [112 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.01.2014 at 20:55:19.64
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
mein avira war nicht ausgeschaltet.

muss ich angst haben? kann ich noch irgendetwas tun? könnt ihr mir helfen zu prüfen, ob mein laptop wirklich virenfrei ist? ich nutz ihn auch für ebanking. WOT ist installiert. anti malwarebyte findet nichts mehr. avira läuft noch.

vielen herzlichen dank!!

lg
tanja

edit: bin vor allem beunruhigt weil ich gestern noch im ebanking war und nicht weiss wie lange das zeug schon drauf war. ev ja doch erst seit den updates heute. ich hoffe es.

ist dies überhaupt ein virus oder trojaner? ich hoffe ihr könnt mich beruhigen..

nochmal efit: die vier funde von malwarebytes habe ich in quarantäne gesvhoben und da dann gelöscht.

mir geht lauter zeugs durch den kopf... ich bin gebrannt seit dem polizei trojaner vir einem jahr und habe immer updates gemacht, WOT installiert, die gekaufte avira software sowie ein programm drauf welches überprüft ob bei softwares updates vorhanden sind...

wäre ev eine systemwiederherstellung sinnvoll?

schrauber 04.01.2014 08:48
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


drud 04.01.2014 19:15
Guten Morgen Schrauber

Danke für deine Hilfe. hier die Logs:


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by ***** (administrator) on *****-PC on 04-01-2014 09:34:26
Running from C:\Users\*****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Splashtop Inc.) C:\ASUS.SYS\SIONExportService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] ()
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\syncables.exe [370480 2010-07-19] (syncables, LLC)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-06] (Secure Banking)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Users\*****\AppData\Local\phase-6\phase-6-compendio\reminder\reminder.exe (phase-6)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {FAD6394E-D719-45AD-8C59-99A8E90A359C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default
FF Homepage: hxxp://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: WOT - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [896056 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [249856 2011-02-15] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Splashtop MDES; C:\ASUS.SYS\SIONExportService.exe [338208 2011-05-10] (Splashtop Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-05] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-09-05] (NVIDIA Corporation)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-09-05] (Scott)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 DNIMp50a64; System32\Drivers\DNIMp50a64.sys [x]
S3 DNISp50a64; System32\Drivers\DNISp50a64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 09:34 - 2014-01-04 09:34 - 00016911 _____ C:\Users\*****\Desktop\FRST.txt
2014-01-04 09:34 - 2014-01-04 09:34 - 00000000 ____D C:\FRST
2014-01-04 09:29 - 2014-01-04 09:29 - 01931368 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-01-04 07:22 - 2014-01-04 07:22 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-04 07:21 - 2014-01-04 07:21 - 00000056 _____ C:\Windows\setupact.log
2014-01-04 07:21 - 2014-01-04 07:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-03 20:55 - 2014-01-03 20:55 - 00000972 _____ C:\Users\*****\Desktop\JRT.txt
2014-01-03 20:49 - 2014-01-03 20:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-03 20:48 - 2014-01-03 20:48 - 01034531 _____ (Thisisu) C:\Users\*****\Desktop\JRT_6.0.8.exe
2014-01-03 20:36 - 2014-01-03 20:36 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016(1).exe
2014-01-03 20:33 - 2014-01-03 20:33 - 00035240 _____ C:\Users\*****\Desktop\cc_20140103_203341.reg
2014-01-03 20:26 - 2014-01-03 20:42 - 00000000 ____D C:\AdwCleaner
2014-01-03 20:26 - 2014-01-03 20:26 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016.exe
2014-01-03 19:28 - 2014-01-03 19:28 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-03 18:58 - 2014-01-03 18:58 - 00000000 ____D C:\Windows\SysWOW64\NV
2014-01-03 18:58 - 2014-01-03 18:58 - 00000000 ____D C:\Windows\system32\NV
2014-01-03 18:47 - 2014-01-03 18:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-03 18:47 - 2014-01-03 18:47 - 00000000 ____D C:\Program Files\Java
2014-01-03 18:45 - 2014-01-03 18:46 - 30694824 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u45-windows-x64.exe
2014-01-03 18:44 - 2014-01-03 18:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Google
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 _____ C:\Users\*****\.airinstall.log
2013-12-29 16:03 - 2013-12-29 16:04 - 63772080 _____ C:\Users\*****\Downloads\myphotobook.ch-1.5.3.exe
2013-12-25 12:38 - 2013-12-25 12:38 - 00001158 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2014 Plus.lnk
2013-12-25 12:38 - 2013-12-25 12:38 - 00000000 ____D C:\Users\Public\Documents\MAGIX
2013-12-25 12:25 - 2013-12-25 12:25 - 02849256 _____ (MAGIX AG) C:\Users\*****\Downloads\videodeluxe2014plus_dlm.exe
2013-12-21 23:13 - 2013-12-21 23:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 21:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 21:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 21:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 21:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 11:19 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-15 11:19 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-15 11:17 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 11:17 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 11:17 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 11:17 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 11:17 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 11:17 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 11:17 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 11:17 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 11:17 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 11:17 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 11:17 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 11:17 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 11:17 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 11:17 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 11:17 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 11:17 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 11:17 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 11:17 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 11:17 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 11:17 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 11:17 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 11:17 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 11:17 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 11:17 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 11:17 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 11:17 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 11:17 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 11:17 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 11:17 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 11:17 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 11:17 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-15 11:17 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-15 11:16 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-15 11:16 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-15 11:16 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-15 11:16 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-15 11:16 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-15 11:16 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-15 11:15 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-15 11:15 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-15 11:15 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-15 11:15 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-15 11:15 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-15 11:15 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-15 11:15 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-15 11:15 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-15 11:15 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-15 11:15 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-05 21:21 - 2014-01-03 18:41 - 01625724 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-05 21:09 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-05 21:09 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-05 21:09 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-05 21:09 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-05 21:09 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-05 21:09 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-12-05 21:09 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

==================== One Month Modified Files and Folders =======

2014-01-04 09:34 - 2014-01-04 09:34 - 00016911 _____ C:\Users\*****\Desktop\FRST.txt
2014-01-04 09:34 - 2014-01-04 09:34 - 00000000 ____D C:\FRST
2014-01-04 09:34 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 09:34 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 09:31 - 2011-11-11 20:57 - 00000000 ____D C:\Users\*****\AppData\Local\CrashDumps
2014-01-04 09:29 - 2014-01-04 09:29 - 01931368 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-01-04 09:22 - 2012-09-29 21:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 08:18 - 2011-09-15 07:11 - 01274486 _____ C:\Windows\WindowsUpdate.log
2014-01-04 07:22 - 2014-01-04 07:22 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-04 07:22 - 2011-12-26 13:15 - 00000000 ____D C:\Users\*****\Documents\Outlook-Dateien
2014-01-04 07:22 - 2011-11-11 10:23 - 00000000 ___HD C:\ASUS.DAT
2014-01-04 07:22 - 2011-09-15 07:37 - 00000012 ____H C:\dvmexp.idx
2014-01-04 07:21 - 2014-01-04 07:21 - 00000056 _____ C:\Windows\setupact.log
2014-01-04 07:21 - 2014-01-04 07:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 07:21 - 2011-09-15 07:23 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-04 07:21 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-03 20:55 - 2014-01-03 20:55 - 00000972 _____ C:\Users\*****\Desktop\JRT.txt
2014-01-03 20:49 - 2014-01-03 20:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-03 20:48 - 2014-01-03 20:48 - 01034531 _____ (Thisisu) C:\Users\*****\Desktop\JRT_6.0.8.exe
2014-01-03 20:42 - 2014-01-03 20:26 - 00000000 ____D C:\AdwCleaner
2014-01-03 20:36 - 2014-01-03 20:36 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016(1).exe
2014-01-03 20:33 - 2014-01-03 20:33 - 00035240 _____ C:\Users\*****\Desktop\cc_20140103_203341.reg
2014-01-03 20:26 - 2014-01-03 20:26 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016.exe
2014-01-03 20:01 - 2011-11-11 10:23 - 00183904 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 19:52 - 2009-07-14 05:45 - 00592688 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-03 19:48 - 2011-12-25 20:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-03 19:46 - 2009-07-14 08:45 - 00000000 ____D C:\Windows\ShellNew
2014-01-03 19:46 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2014-01-03 19:40 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2014-01-03 19:28 - 2014-01-03 19:28 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-03 19:28 - 2011-11-13 20:03 - 00000000 ____D C:\Users\*****\AppData\Local\Adobe
2014-01-03 19:28 - 2011-11-12 14:07 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-03 19:28 - 2011-11-12 14:06 - 00000000 ____D C:\ProgramData\Adobe
2014-01-03 18:59 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-03 18:58 - 2014-01-03 18:58 - 00000000 ____D C:\Windows\SysWOW64\NV
2014-01-03 18:58 - 2014-01-03 18:58 - 00000000 ____D C:\Windows\system32\NV
2014-01-03 18:58 - 2011-11-11 10:24 - 00001423 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 18:58 - 2011-11-11 10:24 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 18:58 - 2011-11-11 10:24 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 18:57 - 2011-04-13 03:33 - 00000000 ____D C:\Program Files\Google
2014-01-03 18:57 - 2011-04-13 03:33 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-03 18:52 - 2011-09-15 07:22 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-03 18:51 - 2012-12-05 19:49 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-03 18:51 - 2012-12-05 18:36 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-01-03 18:51 - 2011-12-05 21:43 - 00000000 ____D C:\Users\*****\AppData\Roaming\IrfanView
2014-01-03 18:49 - 2011-09-15 07:22 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-03 18:47 - 2014-01-03 18:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-03 18:47 - 2014-01-03 18:47 - 00000000 ____D C:\Program Files\Java
2014-01-03 18:47 - 2013-11-07 19:15 - 00000000 ____D C:\ProgramData\Oracle
2014-01-03 18:46 - 2014-01-03 18:45 - 30694824 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u45-windows-x64.exe
2014-01-03 18:45 - 2011-04-13 03:47 - 00000000 ____D C:\Program Files (x86)\ASUS
2014-01-03 18:44 - 2014-01-03 18:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Google
2014-01-03 18:44 - 2011-11-11 19:25 - 00000000 ____D C:\Users\*****\AppData\Local\Google
2014-01-03 18:41 - 2013-12-05 21:21 - 01625724 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-03 18:41 - 2011-02-19 05:24 - 00711094 _____ C:\Windows\system32\perfh007.dat
2014-01-03 18:41 - 2011-02-19 05:24 - 00153542 _____ C:\Windows\system32\perfc007.dat
2014-01-03 18:41 - 2009-07-14 06:13 - 01625724 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 _____ C:\Users\*****\.airinstall.log
2013-12-29 16:06 - 2011-11-11 19:28 - 00000000 ____D C:\Users\*****\AppData\Roaming\Adobe
2013-12-29 16:06 - 2011-11-11 10:22 - 00000000 ____D C:\Users\*****
2013-12-29 16:04 - 2013-12-29 16:03 - 63772080 _____ C:\Users\*****\Downloads\myphotobook.ch-1.5.3.exe
2013-12-26 11:48 - 2011-11-12 08:22 - 00000000 ____D C:\Users\*****\AppData\Local\MAGIX_AG
2013-12-25 12:39 - 2011-11-12 08:05 - 00000000 ___RD C:\Users\*****\Documents\MAGIX
2013-12-25 12:38 - 2013-12-25 12:38 - 00001158 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2014 Plus.lnk
2013-12-25 12:38 - 2013-12-25 12:38 - 00000000 ____D C:\Users\Public\Documents\MAGIX
2013-12-25 12:38 - 2011-11-12 08:04 - 00000000 ____D C:\Users\*****\AppData\Roaming\MAGIX
2013-12-25 12:38 - 2011-11-12 08:04 - 00000000 ____D C:\Users\*****\AppData\Local\MAGIX
2013-12-25 12:36 - 2011-11-12 08:02 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-25 12:36 - 2011-09-15 07:38 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-25 12:25 - 2013-12-25 12:25 - 02849256 _____ (MAGIX AG) C:\Users\*****\Downloads\videodeluxe2014plus_dlm.exe
2013-12-25 11:57 - 2012-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 23:13 - 2013-12-21 23:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-21 21:02 - 2012-08-31 20:11 - 00000000 ____D C:\Users\*****\Documents\My Digital Editions
2013-12-18 17:04 - 2013-05-08 19:14 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-18 17:04 - 2013-03-29 15:49 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 17:04 - 2013-03-29 15:49 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-15 21:29 - 2013-08-17 09:11 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 21:28 - 2011-11-11 11:15 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-15 19:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 11:22 - 2012-09-29 21:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-15 11:22 - 2012-09-29 21:19 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-15 11:22 - 2011-11-20 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-05 20:58 - 2013-03-29 15:49 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-05 20:50 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther
2013-12-05 20:47 - 2012-12-05 18:43 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-05 20:45 - 2011-12-19 21:42 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apple Computer
2013-12-05 18:47 - 2012-06-12 18:47 - 00007168 _____ C:\Users\*****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe
C:\Users\*****\AppData\Local\Temp\iv_uninstall.exe
C:\Users\*****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-15 18:56

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014
Ran by ***** at 2014-01-04 09:35:21
Running from C:\Users\*****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ACDSee Pro 5 (x32 Version: 5.3.168 - ACD Systems International Inc.)
Adobe AIR (x32 Version: 3.5.0.1060 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.5.0.1060 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (x32 Version:  - )
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (x32 Version: 1.2.0117.08443 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.0117.08443 - Alcor Micro Corp.) Hidden
Allway Sync version 12.0.0 (x32 Version:  - Botkind Inc)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.5.0 - Asmedia Technology)
ASUS AI Recovery (x32 Version: 1.0.24 - ASUS)
ASUS FancyStart (x32 Version: 1.1.1 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.22 - ASUS)
ASUS Live Update (x32 Version: 2.5.9 - ASUS)
ASUS Music Maker (x32 Version: 17.0.2.22 - MAGIX AG)
ASUS Music Maker (x32 Version: 17.0.2.22 - MAGIX AG) Hidden
ASUS Power4Gear Hybrid (Version: 1.1.43 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028 - ASUS)
ASUS USB Charger Plus (x32 Version: 2.0.3 - AsusTek Computer Inc.)
ASUS Video Magic (x32 Version: 6.0.4710 - CyberLink Corp.)
ASUS Video Magic (x32 Version: 6.0.4710 - CyberLink Corp.) Hidden
ASUS Virtual Camera (x32 Version: 1.0.21 - asus)
ASUS WebStorage (x32 Version: 3.0.84.161 - eCareme Technologies, Inc.)
AsusScr_N5_En (x32 Version: 1.0.0001 - ASUS)
AsusVibe2.0 (x32 Version: 2.0.4.617 - ASUSTEK)
Atheros Client Installation Program (x32 Version: 7.0 - Atheros)
ATK Package (x32 Version: 1.0.0010 - ASUS)
Avira Antivirus Premium (x32 Version: 14.0.2.286 - Avira)
Bluetooth Win7 Suite (64) (Version: 7.2.0.65 - Atheros Communications)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
CCleaner (Version: 3.26 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink MediaEspresso (x32 Version: 6.0.1123_32710 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.0.1123_32710 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDirector (x32 Version: 8.0.3327 - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.3327 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.3122.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.3122.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Fast Boot (Version: 1.0.9 - ASUS)
FileZilla Client 3.5.3 (x32 Version: 3.5.3 - FileZilla Project)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.32.0 - MAGIX AG)
Free Audio Converter version 5.0.6.221 (x32 Version: 5.0.6.221 - DVDVideoSoft Ltd.)
FreePDF (Remove only) (x32 Version:  - )
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Garmin USB Drivers (x32 Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (x32 Version: 2.5.6 - Garmin Ltd or its subsidiaries)
GPL Ghostscript (Version: 9.04 - Artifex Software Inc.)
ifolor Bestellsoftware 3.7 (x32 Version: 3.7.220.0 - Ifolor AG)
ifolor Designer (x32 Version: 3.0.13.0 - Ifolor AG)
Incomedia WebSite X5 v8 - Evolution (x32 Version:  - Incomedia s.r.l.)
IncrediMail (x32 Version: 6.2.9.5203 - IncrediMail) Hidden
IncrediMail 2.0 (x32 Version: 6.2.9.5203 - IncrediMail Ltd.)
InstantOn for NB (x32 Version: 2.1.2 - ASUS)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.3347 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (Version: 1.0.400.4 - Intel)
Interaktive Sprachreise - Sprachkurs 1 Français (x32 Version:  - digital publishing AG)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Langenscheidt Grammatiktrainer 6.0 Englisch (x32 Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Grammatiktrainer 6.0 Franzoesisch (x32 Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 2 6.0 Französisch (x32 Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 6.0 Französisch (x32 Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Vokabeltrainer 6.0 Englisch (x32 Version: 6.0.0 - Langenscheidt)
Langenscheidt Vokabeltrainer 6.0 Französisch (x32 Version: 6.0.20 - Langenscheidt)
lingDIALOG (x32 Version: 3.0908 - WEVOSYS)
lingDIALOG (x32 Version: 3.0908 - WEVOSYS) Hidden
MAGIX Fotos auf DVD MX Deluxe (x32 Version: 11.0.2.80 - MAGIX AG)
MAGIX Fotos auf DVD MX Deluxe (x32 Version: 11.0.2.80 - MAGIX AG) Hidden
MAGIX Screenshare (x32 Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (x32 Version: 4.3.6.1987 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG)
MAGIX Video deluxe 17 Plus Sonderedition (x32 Version: 10.0.11.0 - MAGIX AG)
MAGIX Video deluxe 17 Plus Sonderedition (x32 Version: 10.0.11.0 - MAGIX AG) Hidden
MAGIX Video deluxe 17 Plus Sonderedition Video Plugins (x32 Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Plus (Version: 13.0.2.8 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Plus (x32 Version: 13.0.2.8 - MAGIX AG)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Migros Photo Service (x32 Version: 5.0.4 - CEWE COLOR AG u Co. OHG)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Music Now! (x32 Version: 1.0.5.0 - Splashtop Inc.)
Music Now! (x32 Version: 1.0.5.0 - Splashtop Inc.) Hidden
Nuance PDF Reader (x32 Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA 3D Vision Treiber 327.02 (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (Version: 327.02 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.2.22.1 (Version: 1.2.22.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2702 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
PDFCreator (x32 Version: 1.3.2 - Frank Heindörfer, Philip Chinery)
pdfforge Toolbar v5.1 (x32 Version: 5.1 - Spigot, Inc.) <==== ATTENTION
phase-6-compendio 2.3.2b (HKCU Version: 2.3.2b - phase-6)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - IncrediMail Ltd.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6413 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (Version:  - )
Revo Uninstaller 1.94 (x32 Version: 1.94 - VS Revo Group)
Secunia PSI (3.0.0.4001) (x32 Version: 3.0.0.4001 - Secunia)
Secure Banking Version 1.5.1 (x32 Version: 1.5.1 - Hopfgartner Niklas)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
SilentInstall (x32 Version:  - My Company)
SilentInstall (x32 Version: 1.0.0.0 - mquadr.at) Hidden
Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.)
SonicMaster (x32 Version: 1.0.0.4 - Synopsys)
Synaptics Pointing Device Driver (Version: 15.3.6.0 - Synaptics Incorporated)
syncables desktop SE (x32 Version: 5.5.746.11492 - syncables)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Vasco da Gama 4 HDPro (x32 Version: 4.00.0000 - MotionStudios)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinFlash (x32 Version: 2.31.1 - ASUS)
Wireless Console 3 (x32 Version: 3.0.19 - ASUS)
WN111v2 (x32 Version: 2.00.0000 - NETGEAR) Hidden
WOT for Internet Explorer (Version: 12.8.2.0 - WOT Services Oy)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

15-12-2013 20:27:31 Windows Update
20-12-2013 20:02:17 Windows Update
25-12-2013 11:05:05 Windows Update
31-12-2013 15:23:10 Windows Update
03-01-2014 17:33:40 Windows Update
03-01-2014 17:39:46 Windows Update
03-01-2014 17:45:58 Removed Java 7 Update 25 (64-bit)
03-01-2014 17:47:07 Installed Java 7 Update 45 (64-bit)
03-01-2014 18:24:13 Removed Adobe Reader XI (11.0.05).
03-01-2014 18:25:14 Removed Adobe Reader XI (11.0.05) - Deutsch.
03-01-2014 18:38:25 Configured Microsoft Office Professional Plus 2010

==================== Hosts content: ==========================

2009-07-14 03:34 - 2012-12-02 17:27 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {09091695-6C73-4FFF-8D3A-7426CC49B0E8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {288A542A-0CE9-4147-807D-4AF0B728214D} - \Scheduled Update for Ask Toolbar No Task File
Task: {2B1B66EE-B9F7-4D90-B6CD-41FC432D7F42} - System32\Tasks\{ECBCBAE6-A001-47CE-A29A-4BBA5EAE8396} => C:\Windows\winsxs\x86_microsoft-windows-wrp-integrity-client_31bf3856ad364e35_6.1.7600.16385_none_2b1523604c99c736\sfc.exe [2009-07-14] (Microsoft Corporation)
Task: {2DF92BA6-1B70-4FB1-BFCC-69BF7B6721D0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-15] (Adobe Systems Incorporated)
Task: {2FB883B5-CCD9-4924-A91A-58FBFE5097B7} - System32\Tasks\{C497668A-62C3-4C4A-8AAD-586270314EC6} => C:\Program Files (x86)\Common Files\Ahead\Nero Web\SetupX.exe
Task: {5B166FB9-F7C3-4B91-885F-B8D23A657FCE} - System32\Tasks\{522E25AD-0B64-46EE-840F-DB74A1F22376} => C:\Program Files (x86)\Common Files\Ahead\Nero Web\SetupX.exe
Task: {6725C9CA-4EBF-4053-BAF0-6833ABC8ACC6} - System32\Tasks\USBChargerPlus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2011-06-30] (ASUSTek Computer Inc.)
Task: {6CE5C801-A98C-422A-8806-A550BD68E59A} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-02] (ASUS)
Task: {6F10E9DB-5296-4BAA-B2EA-679D0C201325} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {7A5CD5AA-E96E-44C5-9584-CA0CAED21B3E} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {7B128480-1C81-4BF0-B933-AA3C84F4B4AC} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {85A70D8A-FA9A-4686-BDC0-DE8AE28BFD38} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-09-05] (Adobe Systems Incorporated)
Task: {99B3C585-ABC0-4B50-B22B-5EA0CF0DA099} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {B4A47919-3A96-4CDE-9228-81C98A70DE1C} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {C9A0C5CD-5FAE-4F67-B038-32A2587396D4} - System32\Tasks\{A9748989-40E6-4344-8E9E-F2CFA09F440A} => C:\Program Files (x86)\Common Files\Ahead\Nero Web\SetupX.exe
Task: {DD91D3E9-6863-4A35-97B2-9FA2A66547A8} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2010-11-24] (CyberLink)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2010-07-15 00:11 - 2010-07-15 00:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2011-08-19 03:32 - 2011-05-24 01:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-10-09 22:15 - 2012-10-09 19:40 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-12-09 09:53 - 2013-07-06 13:36 - 00017920 _____ () C:\Program Files (x86)\Secure Banking\SecureBanking.dll
2012-12-09 09:53 - 2013-07-06 13:36 - 00008704 _____ () C:\Program Files (x86)\Secure Banking\funcs.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-12-21 23:13 - 2013-12-21 23:13 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: USB Device(VID_1f3a_PID_efe8)
Description: USB Device(VID_1f3a_PID_efe8)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: USB Devices
Service: usbUDisc
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/04/2014 09:32:29 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x1a94
Startzeit der fehlerhaften Anwendung: 0xExplorer.exe0
Pfad der fehlerhaften Anwendung: Explorer.exe1
Pfad des fehlerhaften Moduls: Explorer.exe2
Berichtskennung: Explorer.exe3

Error: (01/04/2014 09:32:06 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000053290
ID des fehlerhaften Prozesses: 0x251c
Startzeit der fehlerhaften Anwendung: 0xExplorer.exe0
Pfad der fehlerhaften Anwendung: Explorer.exe1
Pfad des fehlerhaften Moduls: Explorer.exe2
Berichtskennung: Explorer.exe3

Error: (01/04/2014 09:31:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x2780
Startzeit der fehlerhaften Anwendung: 0xExplorer.exe0
Pfad der fehlerhaften Anwendung: Explorer.exe1
Pfad des fehlerhaften Moduls: Explorer.exe2
Berichtskennung: Explorer.exe3

Error: (01/04/2014 09:31:30 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x21e4
Startzeit der fehlerhaften Anwendung: 0xExplorer.exe0
Pfad der fehlerhaften Anwendung: Explorer.exe1
Pfad des fehlerhaften Moduls: Explorer.exe2
Berichtskennung: Explorer.exe3

Error: (01/04/2014 09:31:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x2424
Startzeit der fehlerhaften Anwendung: 0xExplorer.exe0
Pfad der fehlerhaften Anwendung: Explorer.exe1
Pfad des fehlerhaften Moduls: Explorer.exe2
Berichtskennung: Explorer.exe3

Error: (01/04/2014 09:31:14 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x2650
Startzeit der fehlerhaften Anwendung: 0xExplorer.exe0
Pfad der fehlerhaften Anwendung: Explorer.exe1
Pfad des fehlerhaften Moduls: Explorer.exe2
Berichtskennung: Explorer.exe3

Error: (01/04/2014 09:31:13 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x2560
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (01/04/2014 09:31:05 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x1c70
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (01/04/2014 09:30:52 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x26cc
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (01/04/2014 09:30:42 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3


System errors:
=============
Error: (01/04/2014 07:23:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/04/2014 07:23:54 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (01/04/2014 07:23:18 AM) (Source: Service Control Manager) (User: )
Description: Dienst "AtherosSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (01/04/2014 09:32:29 AM) (Source: Application Error)(User: )
Description: Explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da1a9401cf0927794dd6c6C:\Windows\Explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dllbeb2eccd-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:32:06 AM) (Source: Application Error)(User: )
Description: Explorer.exe6.1.7601.175674d672ee4ntdll.dll6.1.7601.18247521eaf24c00000050000000000053290251c01cf092764b75841C:\Windows\Explorer.exeC:\Windows\SYSTEM32\ntdll.dllb174127a-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:31:35 AM) (Source: Application Error)(User: )
Description: Explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da278001cf0927608cbef0C:\Windows\Explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll9ecf4081-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:31:30 AM) (Source: Application Error)(User: )
Description: Explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da21e401cf09275d78d775C:\Windows\Explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll9be16f0b-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:31:22 AM) (Source: Application Error)(User: )
Description: Explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da242401cf092758a56d47C:\Windows\Explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll9710663d-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:31:14 AM) (Source: Application Error)(User: )
Description: Explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da265001cf092753ecdc20C:\Windows\Explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll9225d830-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:31:13 AM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da256001cf0927534d5fedC:\Windows\explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll918d801f-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:31:05 AM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da1c7001cf09274e454959C:\Windows\explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll8cec12d6-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:30:52 AM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da26cc01cf092745d2cec5C:\Windows\explorer.exeC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll851f5dd9-751a-11e3-9d60-742f68b21421

Error: (01/04/2014 09:30:42 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da


CodeIntegrity Errors:
===================================
  Date: 2012-12-02 17:26:55.803
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-02 17:26:55.757
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 40%
Total physical RAM: 8096.05 MB
Available physical RAM: 4850.24 MB
Total Pagefile: 16190.29 MB
Available Pagefile: 12806.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:259.17 GB) (Free:142 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:312 GB) (Free:100.17 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: F3C6F6A7)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=259 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=312 GB) - (Type=OF Extended)

==================== End Of Log ============================
leider macht Windows Explorer nun doch wieder Probleme und schliesst sich ständig und öffnet sich wieder (das Fenster mit der Fehlermeldung).

Kann ich eigentlich den PC trotzdem nutzen mit darauf installierter Software, oder besser nicht?

Der Antiviren-Suchlauf habe ich abgebrochen gestern Abend und heute morgen auch, habe nun erstmal das FRST gemacht.

Danke und lg,
Tanja

edit: bitte sage mir, falls du das irgendwie sehen kannst, ob ich das zeugs seit gestern habe oder schon vorher - eben weil ich im eBanking war vorgestern. bzw. ob ich deswegen irgendetwas tun kann oder tun muss. danke.

edit2: die kurztasten auf der seite der tastatur für lautstärke etc. funktionieren auch nicht.

edit: habe zwischenzeitlich noch das update für den grafikkartentreiber/grafikkarte bekommen. kann ich das ausführen?

schrauber 05.01.2014 16:21
Das Update kannste machen.

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

drud 05.01.2014 18:34
hallo schrauber

hier combo fix

Code:
ComboFix 14-01-04.03 - ***** 05.01.2014  18:20:17.1.8 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.41.1031.18.8096.5375 [GMT 1:00]
ausgeführt von:: c:\users\*****\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\*****\AppData\Roaming\Microsoft\Windows\Recent\zeitverschiebung.org.url
c:\windows\SysWow64\SET61D5.tmp
c:\windows\SysWow64\SET7D09.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-12-05 bis 2014-01-05  ))))))))))))))))))))))))))))))
.
.
2014-01-05 16:32 . 2014-01-05 16:33        --------        d-----w-        c:\users\*****\AppData\Local\NVIDIA Corporation
2014-01-05 16:31 . 2013-12-05 08:42        39200        ----a-w-        c:\windows\system32\drivers\nvvad64v.sys
2014-01-05 16:31 . 2013-12-05 08:42        32544        ----a-w-        c:\windows\SysWow64\nvaudcap32v.dll
2014-01-05 16:30 . 2014-01-05 16:33        --------        d-----w-        c:\users\*****\AppData\Local\NVIDIA
2014-01-05 16:27 . 2014-01-05 16:27        75888        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{41908EA0-5BCE-4670-BF84-3A7A32710435}\offreg.dll
2014-01-05 16:21 . 2013-12-10 02:13        982232        ----a-w-        c:\windows\SysWow64\nvspcap.dll
2014-01-05 16:21 . 2013-12-10 02:13        1100248        ----a-w-        c:\windows\system32\nvspcap64.dll
2014-01-05 16:21 . 2014-01-05 16:21        --------        d-----w-        c:\program files (x86)\AGEIA Technologies
2014-01-05 16:20 . 2014-01-05 16:20        --------        d-----w-        c:\windows\SysWow64\NV
2014-01-05 16:20 . 2014-01-05 16:20        --------        d-----w-        c:\windows\system32\NV
2014-01-05 16:18 . 2014-01-05 16:32        --------        d-----w-        c:\windows\LastGood
2014-01-05 16:15 . 2014-01-05 16:15        --------        d-----w-        C:\NVIDIA
2014-01-04 08:34 . 2014-01-04 08:34        --------        d-----w-        C:\FRST
2014-01-03 19:49 . 2014-01-03 19:49        --------        d-----w-        c:\windows\ERUNT
2014-01-03 19:26 . 2014-01-03 19:42        --------        d-----w-        C:\AdwCleaner
2014-01-03 18:28 . 2014-01-03 18:28        --------        d-----w-        c:\program files (x86)\Common Files\Adobe
2014-01-03 17:47 . 2014-01-03 17:47        312744        ----a-w-        c:\windows\system32\javaws.exe
2014-01-03 17:47 . 2014-01-03 17:47        108968        ----a-w-        c:\windows\system32\WindowsAccessBridge-64.dll
2014-01-03 17:47 . 2014-01-03 17:47        189352        ----a-w-        c:\windows\system32\javaw.exe
2014-01-03 17:47 . 2014-01-03 17:47        189352        ----a-w-        c:\windows\system32\java.exe
2014-01-03 17:47 . 2014-01-03 17:47        --------        d-----w-        c:\program files\Java
2014-01-03 17:44 . 2014-01-03 17:44        --------        d-----w-        c:\users\*****\AppData\Roaming\Google
2014-01-03 17:34 . 2013-12-04 03:28        10315576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{41908EA0-5BCE-4670-BF84-3A7A32710435}\mpengine.dll
2013-12-29 15:06 . 2013-12-29 15:06        --------        d-----w-        c:\program files (x86)\Common Files\Adobe AIR
2013-12-15 20:30 . 2013-05-10 04:30        167424        ----a-w-        c:\program files\Windows Media Player\wmplayer.exe
2013-12-15 20:30 . 2013-05-10 03:48        164864        ----a-w-        c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-15 20:30 . 2013-05-10 05:56        12625920        ----a-w-        c:\windows\system32\wmploc.DLL
2013-12-15 20:30 . 2013-05-10 04:56        12625408        ----a-w-        c:\windows\SysWow64\wmploc.DLL
2013-12-15 20:30 . 2013-05-10 05:56        14631424        ----a-w-        c:\windows\system32\wmp.dll
2013-12-15 10:19 . 2013-10-30 02:32        335360        ----a-w-        c:\windows\system32\msieftp.dll
2013-12-15 10:19 . 2013-10-30 02:19        301568        ----a-w-        c:\windows\SysWow64\msieftp.dll
2013-12-15 10:16 . 2013-11-23 18:26        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll
2013-12-15 10:16 . 2013-11-23 17:47        465920        ----a-w-        c:\windows\system32\WMPhoto.dll
2013-12-15 10:16 . 2013-10-19 02:18        81408        ----a-w-        c:\windows\system32\imagehlp.dll
2013-12-15 10:16 . 2013-10-19 01:36        159232        ----a-w-        c:\windows\SysWow64\imagehlp.dll
2013-12-15 10:16 . 2013-11-12 02:23        2048        ----a-w-        c:\windows\system32\tzres.dll
2013-12-15 10:16 . 2013-11-12 02:07        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
2013-12-15 10:15 . 2013-10-04 02:16        116736        ----a-w-        c:\windows\system32\drivers\drmk.sys
2013-12-15 10:15 . 2013-10-04 01:36        230400        ----a-w-        c:\windows\system32\drivers\portcls.sys
2013-12-15 10:15 . 2013-10-12 02:32        150016        ----a-w-        c:\windows\system32\wshom.ocx
2013-12-15 10:15 . 2013-10-12 02:31        202752        ----a-w-        c:\windows\system32\scrrun.dll
2013-12-15 10:15 . 2013-10-12 02:04        121856        ----a-w-        c:\windows\SysWow64\wshom.ocx
2013-12-15 10:15 . 2013-10-12 02:03        163840        ----a-w-        c:\windows\SysWow64\scrrun.dll
2013-12-15 10:15 . 2013-10-12 01:33        156160        ----a-w-        c:\windows\system32\cscript.exe
2013-12-15 10:15 . 2013-10-12 01:33        168960        ----a-w-        c:\windows\system32\wscript.exe
2013-12-15 10:15 . 2013-10-12 01:15        141824        ----a-w-        c:\windows\SysWow64\wscript.exe
2013-12-15 10:15 . 2013-10-12 01:15        126976        ----a-w-        c:\windows\SysWow64\cscript.exe
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-18 16:04 . 2013-05-08 18:14        84720        ----a-w-        c:\windows\system32\drivers\avnetflt.sys
2013-12-18 16:04 . 2013-03-29 14:49        131576        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2013-12-18 16:04 . 2013-03-29 14:49        108440        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2013-12-15 20:28 . 2011-11-11 10:15        90708896        ----a-w-        c:\windows\system32\MRT.exe
2013-12-15 10:22 . 2012-09-29 20:19        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-15 10:22 . 2011-11-20 11:36        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-05 19:58 . 2013-03-29 14:49        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys
2013-12-04 18:26 . 2013-12-04 18:26        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 18:26 . 2013-12-04 18:26        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll
2013-12-04 18:26 . 2013-12-04 18:26        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-04 18:26 . 2013-12-04 18:26        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll
2013-12-04 18:26 . 2013-12-04 18:26        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx
2013-12-04 18:26 . 2013-12-04 18:26        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2013-12-04 18:26 . 2013-12-04 18:26        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-04 18:26 . 2013-12-04 18:26        337408        ----a-w-        c:\windows\SysWow64\html.iec
2013-12-04 18:26 . 2013-12-04 18:26        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2013-12-04 18:26 . 2013-12-04 18:26        235008        ----a-w-        c:\windows\system32\elshyph.dll
2013-12-04 18:26 . 2013-12-04 18:26        182272        ----a-w-        c:\windows\SysWow64\msls31.dll
2013-12-04 18:26 . 2013-12-04 18:26        942592        ----a-w-        c:\windows\system32\jsIntl.dll
2013-12-04 18:26 . 2013-12-04 18:26        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2013-12-04 18:26 . 2013-12-04 18:26        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 18:26 . 2013-12-04 18:26        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-04 18:26 . 2013-12-04 18:26        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2013-12-04 18:26 . 2013-12-04 18:26        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2013-12-04 18:26 . 2013-12-04 18:26        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2013-12-04 18:26 . 2013-12-04 18:26        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll
2013-12-04 18:26 . 2013-12-04 18:26        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll
2013-12-04 18:26 . 2013-12-04 18:26        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe
2013-12-04 18:26 . 2013-12-04 18:26        139264        ----a-w-        c:\windows\SysWow64\wextract.exe
2013-12-04 18:26 . 2013-12-04 18:26        13312        ----a-w-        c:\windows\SysWow64\mshta.exe
2013-12-04 18:26 . 2013-12-04 18:26        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2013-12-04 18:26 . 2013-12-04 18:26        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2013-12-04 18:26 . 2013-12-04 18:26        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2013-12-04 18:26 . 2013-12-04 18:26        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-12-04 18:26 . 2013-12-04 18:26        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll
2013-12-04 18:26 . 2013-12-04 18:26        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-12-04 18:26 . 2013-12-04 18:26        247808        ----a-w-        c:\windows\system32\msls31.dll
2013-12-04 18:26 . 2013-12-04 18:26        195584        ----a-w-        c:\windows\system32\msrating.dll
2013-12-04 18:26 . 2013-12-04 18:26        13312        ----a-w-        c:\windows\system32\msfeedssync.exe
2013-12-04 18:26 . 2013-12-04 18:26        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-12-04 18:26 . 2013-12-04 18:26        105984        ----a-w-        c:\windows\system32\iesysprep.dll
2013-12-04 18:26 . 2013-12-04 18:26        84992        ----a-w-        c:\windows\system32\mshtmled.dll
2013-12-04 18:26 . 2013-12-04 18:26        81408        ----a-w-        c:\windows\system32\icardie.dll
2013-12-04 18:26 . 2013-12-04 18:26        77312        ----a-w-        c:\windows\system32\tdc.ocx
2013-12-04 18:26 . 2013-12-04 18:26        626176        ----a-w-        c:\windows\system32\msfeeds.dll
2013-12-04 18:26 . 2013-12-04 18:26        616104        ----a-w-        c:\windows\system32\ieapfltr.dat
2013-12-04 18:26 . 2013-12-04 18:26        548352        ----a-w-        c:\windows\system32\vbscript.dll
2013-12-04 18:26 . 2013-12-04 18:26        453120        ----a-w-        c:\windows\system32\dxtmsft.dll
2013-12-04 18:26 . 2013-12-04 18:26        413696        ----a-w-        c:\windows\system32\html.iec
2013-12-04 18:26 . 2013-12-04 18:26        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 18:26 . 2013-12-04 18:26        30208        ----a-w-        c:\windows\system32\licmgr10.dll
2013-12-04 18:26 . 2013-12-04 18:26        296960        ----a-w-        c:\windows\system32\dxtrans.dll
2013-12-04 18:26 . 2013-12-04 18:26        263376        ----a-w-        c:\windows\system32\iedkcs32.dll
2013-12-04 18:26 . 2013-12-04 18:26        243200        ----a-w-        c:\windows\system32\webcheck.dll
2013-12-04 18:26 . 2013-12-04 18:26        235520        ----a-w-        c:\windows\system32\url.dll
2013-12-04 18:26 . 2013-12-04 18:26        167424        ----a-w-        c:\windows\system32\iexpress.exe
2013-12-04 18:26 . 2013-12-04 18:26        143872        ----a-w-        c:\windows\system32\wextract.exe
2013-12-04 18:26 . 2013-12-04 18:26        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-12-04 18:26 . 2013-12-04 18:26        101376        ----a-w-        c:\windows\system32\inseng.dll
2013-12-04 18:26 . 2013-12-04 18:26        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2013-12-04 18:26 . 2013-12-04 18:26        774144        ----a-w-        c:\windows\system32\jscript.dll
2013-12-04 18:26 . 2013-12-04 18:26        62464        ----a-w-        c:\windows\system32\pngfilt.dll
2013-12-04 18:26 . 2013-12-04 18:26        48128        ----a-w-        c:\windows\system32\imgutil.dll
2013-12-04 18:26 . 2013-12-04 18:26        147968        ----a-w-        c:\windows\system32\occache.dll
2013-12-04 18:26 . 2013-12-04 18:26        13824        ----a-w-        c:\windows\system32\mshta.exe
2013-12-04 18:26 . 2013-12-04 18:26        135680        ----a-w-        c:\windows\system32\iepeers.dll
2013-11-19 02:33 . 2011-11-24 19:13        267936        ------w-        c:\windows\system32\MpSigStub.exe
2013-11-14 11:58 . 2011-09-15 06:22        1436528        ----a-w-        c:\windows\system32\nvumdshimx.dll
2013-11-14 11:58 . 2011-09-15 06:22        141336        ----a-w-        c:\windows\SysWow64\nvinit.dll
2013-11-14 11:58 . 2011-09-15 06:22        3069608        ----a-w-        c:\windows\system32\nvapi64.dll
2013-11-14 11:58 . 2011-09-15 06:22        2697248        ----a-w-        c:\windows\SysWow64\nvapi.dll
2013-11-11 15:02 . 2011-05-27 16:38        6674208        ----a-w-        c:\windows\system32\nvcpl.dll
2013-11-11 15:02 . 2011-05-27 16:38        3490080        ----a-w-        c:\windows\system32\nvsvc64.dll
2013-11-11 15:01 . 2011-05-27 16:38        922912        ----a-w-        c:\windows\system32\nvvsvc.exe
2013-11-11 15:01 . 2011-05-27 16:38        67072        ----a-w-        c:\windows\system32\nv3dappshextr.dll
2013-11-11 15:01 . 2011-05-27 16:38        63776        ----a-w-        c:\windows\system32\nvshext.dll
2013-11-11 15:01 . 2011-05-27 16:38        2559776        ----a-w-        c:\windows\system32\nvsvcr.dll
2013-11-11 15:01 . 2011-05-27 16:38        219424        ----a-w-        c:\windows\system32\nvmctray.dll
2013-11-11 15:01 . 2011-05-27 16:38        1065248        ----a-w-        c:\windows\system32\nv3dappshext.dll
2013-11-11 15:01 . 2011-05-27 16:38        3467927        ----a-w-        c:\windows\system32\nvcoproc.bin
2013-11-11 07:59 . 2013-11-11 07:59        590112        ----a-w-        c:\windows\SysWow64\nvStreaming.exe
2013-11-07 00:52 . 2013-11-07 00:52        279000        ----a-w-        c:\windows\SysWow64\IntelCpHeciSvc.exe
2013-11-07 00:52 . 2013-11-07 00:52        515544        ----a-w-        c:\windows\system32\igfxsrvc.exe
2013-11-07 00:52 . 2013-11-07 00:52        439296        ----a-w-        c:\windows\system32\igfxrrus.lrc
2013-11-07 00:52 . 2013-11-07 00:52        439296        ----a-w-        c:\windows\system32\igfxrrom.lrc
2013-11-07 00:52 . 2013-11-07 00:52        438784        ----a-w-        c:\windows\system32\igfxrsky.lrc
2013-11-07 00:52 . 2013-11-07 00:52        438784        ----a-w-        c:\windows\system32\igfxrptg.lrc
2013-11-07 00:52 . 2013-11-07 00:52        438784        ----a-w-        c:\windows\system32\igfxrplk.lrc
2013-11-07 00:52 . 2013-11-07 00:52        437760        ----a-w-        c:\windows\system32\igfxrtrk.lrc
2013-11-07 00:52 . 2013-11-07 00:52        437760        ----a-w-        c:\windows\system32\igfxrsve.lrc
2013-11-07 00:52 . 2013-11-07 00:52        437760        ----a-w-        c:\windows\system32\igfxrslv.lrc
2013-11-07 00:52 . 2013-11-07 00:52        437760        ----a-w-        c:\windows\system32\igfxrptb.lrc
2013-11-07 00:52 . 2013-11-07 00:52        437760        ----a-w-        c:\windows\system32\igfxrnor.lrc
2013-11-07 00:52 . 2013-11-07 00:52        437248        ----a-w-        c:\windows\system32\igfxrtha.lrc
2013-11-07 00:52 . 2013-11-07 00:52        410624        ----a-w-        c:\windows\system32\igfxTMM.dll
2013-11-07 00:52 . 2013-11-07 00:52        171992        ----a-w-        c:\windows\system32\igfxtray.exe
2013-11-07 00:52 . 2013-11-07 00:52        116224        ----a-w-        c:\windows\system32\igfxCoIn_v3347.dll
2013-11-07 00:52 . 2011-08-19 02:32        64000        ----a-w-        c:\windows\system32\igfxsrvc.dll
2013-11-07 00:52 . 2013-11-07 00:52        440320        ----a-w-        c:\windows\system32\igfxrell.lrc
2013-11-07 00:52 . 2013-11-07 00:52        439808        ----a-w-        c:\windows\system32\igfxrfra.lrc
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Syncables"="c:\program files (x86)\syncables\syncables desktop\Syncables.exe" [2010-07-19 370480]
"SecureBanking"="c:\program files (x86)\Secure Banking\SecureBanking.exe" [2013-07-06 507904]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-23 1601536]
"RemoteControl10"="c:\program files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [2010-02-03 87336]
"TrayServer"="c:\program files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\TrayServer.exe" [2008-08-07 90112]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-08-17 5732992]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"FreePDF Assistant"="c:\program files (x86)\FreePDF_XP\fpassist.exe" [2011-02-23 371200]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-18 684600]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-09-05 958576]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
.
c:\users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
phase-6 Reminder.lnk - c:\users\*****\AppData\Local\phase-6\phase-6-compendio\reminder\reminder.exe [2013-1-23 724992]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe /start [2011-4-13 548528]
FancyStart daemon.lnk - c:\windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe -d [2011-9-15 12862]
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2012-9-24 573536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"Nuance PDF Reader-reminder"="c:\program files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "c:\programdata\Nuance\PDF Reader\Ereg\Ereg.ini"
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE"
"ASUSWebStorage"=c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
"SonicMasterTray"=c:\program files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "c:\program files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"                                                                                       
"UpdatePSTShortCut"="c:\program files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "c:\program files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"                                                                                           
"ACPW05DE"="c:\program files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe" /pid ACPW05DE
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 DNIMp50a64;DNIMp50a64 NDIS Protocol Driver;c:\windows\system32\Drivers\DNIMp50a64.sys;c:\windows\SYSNATIVE\Drivers\DNIMp50a64.sys [x]
R3 DNISp50a64;DNISp50a64 NDIS Protocol Driver;c:\windows\system32\Drivers\DNISp50a64.sys;c:\windows\SYSNATIVE\Drivers\DNISp50a64.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 usbUDisc;usbUDisc;c:\windows\system32\DRIVERS\USBDrv_AMD64.sys;c:\windows\SYSNATIVE\DRIVERS\USBDrv_AMD64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AntiVirMailService;Avira Email Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\Common Files\InstantOn\InsOnSrv.exe;c:\program files (x86)\Common Files\InstantOn\InsOnSrv.exe [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
S2 Splashtop MDES;Splashtop Meta Data Export Service;c:\asus.sys\SIONExportService.exe;c:\asus.sys\SIONExportService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-29 10:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2010-09-02 08:41        220160        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2010-09-02 08:41        220160        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-06-03 2226280]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-13 617120]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-13 379552]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-11-07 171992]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-11-07 399832]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-11-07 442328]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-12-10 1100248]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.ch/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.1.1
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/4.0.3.0/GarminAxControl_32.CAB
FF - ProfilePath - c:\users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ch/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynAsusAcpi - c:\program files (x86)\Synaptics\SynTP\SynAsusAcpi.exe
AddRemove-Incomedia WebSite X5 v8 - Evolution - c:\windows\system32\iwpsetup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.032"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.abr"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ANI\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.apd"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.arw"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.bay"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.bw"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CR2\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CRW\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.cs1"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CUR\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.dcr"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DCX\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.djv"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DJVU\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.dng"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EPS\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.erf"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.fff"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FPX\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.hdr"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ICL\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.icn"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.IFF\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ilbm"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.int"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.inta"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.iw4"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.j2c"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jbr"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jfif"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jif"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JP2\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpe"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpeg"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (S-1-5-21-4073853582-3472843793-526417432-1001)
@Denied: (2) (LocalSystem)
"Progid"="PhotoViewer.FileAssoc.Jpeg"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpk"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpx"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.KDC\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.mef"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.mos"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.mrw"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.nef"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.nrw"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ORF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.orf"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PBM\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pbr"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PCD\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pct"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PCX\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pef"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PGM\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pic"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pict"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pix"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PPM\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSD\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSP\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pspbrush"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pspimage"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.raf"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.RAS\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.RAW\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rgba"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rsb"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rw2"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rwl"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.SGI\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.sr2"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.srf"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.srw"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TGA\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.thm"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ttc"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v50po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.v50po"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v50pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.v50pp"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v50ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.v50ppf"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.wbm"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WBMP\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.XBM\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.xif"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.xmp"
.
[HKEY_USERS\S-1-5-21-4073853582-3472843793-526417432-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.XPM\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-01-05  18:31:40
ComboFix-quarantined-files.txt  2014-01-05 17:31
.
Vor Suchlauf: 23 Verzeichnis(se), 149'545'771'008 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 151'154'065'408 Bytes frei
.
- - End Of File - - 754D5FD113C901BE5A791AB8F4C26F52
einen neustart hat das programm nicht verlangt.

wäre es möglich, meinen allerersten beitrag zu editieren und dort meinen namen durch *** zu ersetzen in den beiden log-files?

ich hoffe,ich haben virenprogrammmässig alles richig geschlossen/beendet vorher.

danke & lg

schrauber 06.01.2014 16:19
Das Forum hat ein Script welches das automatisch ändert von zeit zu zeit :)

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

drud 07.01.2014 22:05
Danke Schrauber.

Funde konnte ich mit Anti Maleware Byte nicht löschen, es hat mir nur folgendes angezeigt (vgl. logfile). ich hab das dann also nun einfach hier reinkopiert, in den logfiles ist es ja gespeichert.

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.07.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
mäder :: *****-PC [Administrator]

07.01.2014 21:28:06
mbam-log-2014-01-07 (21-28-06).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 257037
Laufzeit: 6 Minute(n), 4 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Code:
# AdwCleaner v3.016 - Bericht erstellt am 07/01/2014 um 21:40:23
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : *****- *****-PC
# Gestartet von : C:\Users\mäder\Desktop\adwcleaner_3.016(1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\Software\Splashtop Inc.

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2964 octets] - [03/01/2014 20:26:43]
AdwCleaner[R1].txt - [3027 octets] - [03/01/2014 20:36:41]
AdwCleaner[R2].txt - [3087 octets] - [03/01/2014 20:41:11]
AdwCleaner[R3].txt - [1218 octets] - [07/01/2014 21:39:28]
AdwCleaner[S0].txt - [3152 octets] - [03/01/2014 20:42:00]
AdwCleaner[S1].txt - [1139 octets] - [07/01/2014 21:40:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1199 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Home Premium x64
Ran by ***** on 07.01.2014 at 21:47:59.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\*****\AppData\Roaming\mozilla\firefox\profiles\mpazrgl1.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.01.2014 at 21:53:58.57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014
Ran by ***** (administrator) on *****-PC on 07-01-2014 22:03:24
Running from C:\Users\*****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Splashtop Inc.) C:\ASUS.SYS\SIONExportService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] ()
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\syncables.exe [370480 2010-07-19] (syncables, LLC)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-06] (Secure Banking)
HKU\UpdatusUser\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Users\*****\AppData\Local\phase-6\phase-6-compendio\reminder\reminder.exe (phase-6)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {FAD6394E-D719-45AD-8C59-99A8E90A359C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default
FF Homepage: hxxp://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: WOT - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [896056 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [249856 2011-02-15] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Splashtop MDES; C:\ASUS.SYS\SIONExportService.exe [338208 2011-05-10] (Splashtop Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-05] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-11-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-09-05] (Scott)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 DNIMp50a64; System32\Drivers\DNIMp50a64.sys [x]
S3 DNISp50a64; System32\Drivers\DNISp50a64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-07 22:03 - 2014-01-07 22:03 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2014-01-07 21:57 - 2014-01-07 21:57 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-07 21:56 - 2014-01-07 21:56 - 00000756 _____ C:\Users\*****\Desktop\JRT 7.1.14.txt
2014-01-07 21:53 - 2014-01-07 21:53 - 00000756 _____ C:\Users\*****\Desktop\JRT.txt
2014-01-07 21:47 - 2014-01-07 21:47 - 01036305 _____ (Thisisu) C:\Users\*****\Desktop\JRT.exe
2014-01-07 21:17 - 2014-01-07 21:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-05 18:39 - 2014-01-05 18:39 - 00003344 _____ C:\Windows\PFRO.log
2014-01-05 18:31 - 2014-01-05 18:31 - 00051871 _____ C:\ComboFix.txt
2014-01-05 18:19 - 2014-01-05 18:31 - 00000000 ____D C:\ComboFix
2014-01-05 18:19 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-05 18:19 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-05 18:19 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-05 18:18 - 2014-01-05 18:31 - 00000000 ____D C:\Qoobox
2014-01-05 18:11 - 2014-01-05 18:11 - 05160001 ____R (Swearware) C:\Users\*****\Desktop\ComboFix.exe
2014-01-05 17:32 - 2014-01-05 17:33 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation
2014-01-05 17:31 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-05 17:31 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-05 17:30 - 2014-01-05 17:33 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA
2014-01-05 17:24 - 2014-01-05 17:24 - 00001349 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-05 17:21 - 2014-01-05 17:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-05 17:21 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-05 17:21 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\SysWOW64\NV
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\system32\NV
2014-01-05 17:17 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-05 17:17 - 2013-11-14 12:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00300320 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2014-01-05 17:17 - 2013-11-14 12:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00032544 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-01-05 17:15 - 2014-01-05 17:15 - 00000000 ____D C:\NVIDIA
2014-01-05 17:10 - 2014-01-05 17:14 - 259887872 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\331.82-notebook-win8-win7-64bit-international-whql.exe
2014-01-04 09:35 - 2014-01-04 09:43 - 00037839 _____ C:\Users\*****\Desktop\Addition.txt
2014-01-04 09:34 - 2014-01-07 22:03 - 00018973 _____ C:\Users\*****\Desktop\FRST.txt
2014-01-04 09:34 - 2014-01-07 22:03 - 00000000 ____D C:\FRST
2014-01-04 09:29 - 2014-01-07 22:03 - 01931762 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-01-04 07:21 - 2014-01-07 21:57 - 00001774 _____ C:\Windows\setupact.log
2014-01-04 07:21 - 2014-01-04 07:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-03 20:49 - 2014-01-03 20:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-03 20:48 - 2014-01-03 20:48 - 01034531 _____ (Thisisu) C:\Users\*****\Desktop\JRT_6.0.8.exe
2014-01-03 20:36 - 2014-01-03 20:36 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016(1).exe
2014-01-03 20:33 - 2014-01-03 20:33 - 00035240 _____ C:\Users\*****\Desktop\cc_20140103_203341.reg
2014-01-03 20:26 - 2014-01-07 21:40 - 00000000 ____D C:\AdwCleaner
2014-01-03 20:26 - 2014-01-03 20:26 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016.exe
2014-01-03 19:28 - 2014-01-03 19:28 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-03 18:47 - 2014-01-03 18:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-03 18:47 - 2014-01-03 18:47 - 00000000 ____D C:\Program Files\Java
2014-01-03 18:45 - 2014-01-03 18:46 - 30694824 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u45-windows-x64.exe
2014-01-03 18:44 - 2014-01-03 18:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Google
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 _____ C:\Users\*****\.airinstall.log
2013-12-29 16:03 - 2013-12-29 16:04 - 63772080 _____ C:\Users\*****\Downloads\myphotobook.ch-1.5.3.exe
2013-12-25 12:38 - 2013-12-25 12:38 - 00001158 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2014 Plus.lnk
2013-12-25 12:38 - 2013-12-25 12:38 - 00000000 ____D C:\Users\Public\Documents\MAGIX
2013-12-25 12:25 - 2013-12-25 12:25 - 02849256 _____ (MAGIX AG) C:\Users\*****\Downloads\videodeluxe2014plus_dlm.exe
2013-12-21 23:13 - 2013-12-21 23:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 21:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 21:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 21:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 21:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 11:19 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-15 11:19 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-15 11:17 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 11:17 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 11:17 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 11:17 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 11:17 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 11:17 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 11:17 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 11:17 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 11:17 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 11:17 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 11:17 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 11:17 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 11:17 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 11:17 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 11:17 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 11:17 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 11:17 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 11:17 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 11:17 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 11:17 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 11:17 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 11:17 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 11:17 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 11:17 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 11:17 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 11:17 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 11:17 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 11:17 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 11:17 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 11:17 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 11:17 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-15 11:17 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-15 11:16 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-15 11:16 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-15 11:16 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-15 11:16 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-15 11:16 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-15 11:16 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-15 11:15 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-15 11:15 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-15 11:15 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-15 11:15 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-15 11:15 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-15 11:15 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-15 11:15 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-15 11:15 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-15 11:15 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-15 11:15 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-07 22:04 - 2014-01-04 09:34 - 00018973 _____ C:\Users\*****\Desktop\FRST.txt
2014-01-07 22:03 - 2014-01-07 22:03 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2014-01-07 22:03 - 2014-01-04 09:34 - 00000000 ____D C:\FRST
2014-01-07 22:03 - 2014-01-04 09:29 - 01931762 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-01-07 21:58 - 2011-12-26 13:15 - 00000000 ____D C:\Users\*****\Documents\Outlook-Dateien
2014-01-07 21:57 - 2014-01-07 21:57 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-07 21:57 - 2014-01-04 07:21 - 00001774 _____ C:\Windows\setupact.log
2014-01-07 21:57 - 2011-11-11 10:23 - 00000000 ___HD C:\ASUS.DAT
2014-01-07 21:57 - 2011-09-15 07:37 - 00000012 ____H C:\dvmexp.idx
2014-01-07 21:57 - 2011-09-15 07:23 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-07 21:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-07 21:56 - 2014-01-07 21:56 - 00000756 _____ C:\Users\*****\Desktop\JRT 7.1.14.txt
2014-01-07 21:56 - 2011-09-15 07:11 - 01375114 _____ C:\Windows\WindowsUpdate.log
2014-01-07 21:55 - 2011-11-11 20:57 - 00000000 ____D C:\Users\*****\AppData\Local\CrashDumps
2014-01-07 21:53 - 2014-01-07 21:53 - 00000756 _____ C:\Users\*****\Desktop\JRT.txt
2014-01-07 21:50 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-07 21:50 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-07 21:47 - 2014-01-07 21:47 - 01036305 _____ (Thisisu) C:\Users\*****\Desktop\JRT.exe
2014-01-07 21:40 - 2014-01-03 20:26 - 00000000 ____D C:\AdwCleaner
2014-01-07 21:18 - 2012-11-26 19:34 - 00001111 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-07 21:18 - 2012-11-26 19:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-07 21:17 - 2014-01-07 21:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-06 22:22 - 2012-09-29 21:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-05 18:40 - 2011-09-15 07:36 - 00002594 _____ C:\Windows\system32\AutoRunFilter.ini
2014-01-05 18:39 - 2014-01-05 18:39 - 00003344 _____ C:\Windows\PFRO.log
2014-01-05 18:39 - 2011-09-15 07:36 - 00001956 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-05 18:31 - 2014-01-05 18:31 - 00051871 _____ C:\ComboFix.txt
2014-01-05 18:31 - 2014-01-05 18:19 - 00000000 ____D C:\ComboFix
2014-01-05 18:31 - 2014-01-05 18:18 - 00000000 ____D C:\Qoobox
2014-01-05 18:29 - 2009-07-14 03:34 - 00000248 _____ C:\Windows\system.ini
2014-01-05 18:11 - 2014-01-05 18:11 - 05160001 ____R (Swearware) C:\Users\*****\Desktop\ComboFix.exe
2014-01-05 17:33 - 2014-01-05 17:32 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation
2014-01-05 17:33 - 2014-01-05 17:30 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA
2014-01-05 17:33 - 2011-09-15 07:22 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-05 17:32 - 2011-09-15 07:22 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-05 17:32 - 2011-09-15 07:22 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-05 17:24 - 2014-01-05 17:24 - 00001349 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-05 17:21 - 2014-01-05 17:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\SysWOW64\NV
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\system32\NV
2014-01-05 17:15 - 2014-01-05 17:15 - 00000000 ____D C:\NVIDIA
2014-01-05 17:14 - 2014-01-05 17:10 - 259887872 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\331.82-notebook-win8-win7-64bit-international-whql.exe
2014-01-04 09:43 - 2014-01-04 09:35 - 00037839 _____ C:\Users\*****\Desktop\Addition.txt
2014-01-04 07:21 - 2014-01-04 07:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-03 20:49 - 2014-01-03 20:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-03 20:48 - 2014-01-03 20:48 - 01034531 _____ (Thisisu) C:\Users\*****\Desktop\JRT_6.0.8.exe
2014-01-03 20:36 - 2014-01-03 20:36 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016(1).exe
2014-01-03 20:33 - 2014-01-03 20:33 - 00035240 _____ C:\Users\*****\Desktop\cc_20140103_203341.reg
2014-01-03 20:26 - 2014-01-03 20:26 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016.exe
2014-01-03 20:01 - 2011-11-11 10:23 - 00183904 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 19:52 - 2009-07-14 05:45 - 00592688 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-03 19:48 - 2011-12-25 20:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-03 19:46 - 2009-07-14 08:45 - 00000000 ____D C:\Windows\ShellNew
2014-01-03 19:46 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2014-01-03 19:40 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2014-01-03 19:28 - 2014-01-03 19:28 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-03 19:28 - 2011-11-13 20:03 - 00000000 ____D C:\Users\*****\AppData\Local\Adobe
2014-01-03 19:28 - 2011-11-12 14:07 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-03 19:28 - 2011-11-12 14:06 - 00000000 ____D C:\ProgramData\Adobe
2014-01-03 18:59 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-03 18:58 - 2011-11-11 10:24 - 00001423 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 18:58 - 2011-11-11 10:24 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 18:58 - 2011-11-11 10:24 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 18:57 - 2011-04-13 03:33 - 00000000 ____D C:\Program Files\Google
2014-01-03 18:57 - 2011-04-13 03:33 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-03 18:51 - 2012-12-05 19:49 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-03 18:51 - 2012-12-05 18:36 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-01-03 18:51 - 2011-12-05 21:43 - 00000000 ____D C:\Users\*****\AppData\Roaming\IrfanView
2014-01-03 18:47 - 2014-01-03 18:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-03 18:47 - 2014-01-03 18:47 - 00000000 ____D C:\Program Files\Java
2014-01-03 18:47 - 2013-11-07 19:15 - 00000000 ____D C:\ProgramData\Oracle
2014-01-03 18:46 - 2014-01-03 18:45 - 30694824 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u45-windows-x64.exe
2014-01-03 18:45 - 2011-04-13 03:47 - 00000000 ____D C:\Program Files (x86)\ASUS
2014-01-03 18:44 - 2014-01-03 18:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Google
2014-01-03 18:44 - 2011-11-11 19:25 - 00000000 ____D C:\Users\*****\AppData\Local\Google
2014-01-03 18:41 - 2013-12-05 21:21 - 01625724 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-03 18:41 - 2011-02-19 05:24 - 00711094 _____ C:\Windows\system32\perfh007.dat
2014-01-03 18:41 - 2011-02-19 05:24 - 00153542 _____ C:\Windows\system32\perfc007.dat
2014-01-03 18:41 - 2009-07-14 06:13 - 01625724 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 _____ C:\Users\*****\.airinstall.log
2013-12-29 16:06 - 2011-11-11 19:28 - 00000000 ____D C:\Users\*****\AppData\Roaming\Adobe
2013-12-29 16:06 - 2011-11-11 10:22 - 00000000 ____D C:\Users\*****
2013-12-29 16:04 - 2013-12-29 16:03 - 63772080 _____ C:\Users\*****\Downloads\myphotobook.ch-1.5.3.exe
2013-12-26 11:48 - 2011-11-12 08:22 - 00000000 ____D C:\Users\*****\AppData\Local\MAGIX_AG
2013-12-25 12:39 - 2011-11-12 08:05 - 00000000 ___RD C:\Users\*****\Documents\MAGIX
2013-12-25 12:38 - 2013-12-25 12:38 - 00001158 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2014 Plus.lnk
2013-12-25 12:38 - 2013-12-25 12:38 - 00000000 ____D C:\Users\Public\Documents\MAGIX
2013-12-25 12:38 - 2011-11-12 08:04 - 00000000 ____D C:\Users\*****\AppData\Roaming\MAGIX
2013-12-25 12:38 - 2011-11-12 08:04 - 00000000 ____D C:\Users\*****\AppData\Local\MAGIX
2013-12-25 12:36 - 2011-11-12 08:02 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-25 12:36 - 2011-09-15 07:38 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-25 12:25 - 2013-12-25 12:25 - 02849256 _____ (MAGIX AG) C:\Users\*****\Downloads\videodeluxe2014plus_dlm.exe
2013-12-25 11:57 - 2012-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 23:13 - 2013-12-21 23:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-21 21:02 - 2012-08-31 20:11 - 00000000 ____D C:\Users\*****\Documents\My Digital Editions
2013-12-18 17:04 - 2013-05-08 19:14 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-18 17:04 - 2013-03-29 15:49 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 17:04 - 2013-03-29 15:49 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-15 21:29 - 2013-08-17 09:11 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 21:28 - 2011-11-11 11:15 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-15 19:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 11:22 - 2012-09-29 21:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-15 11:22 - 2012-09-29 21:19 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-15 11:22 - 2011-11-20 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 03:13 - 2014-01-05 17:21 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-12-10 03:13 - 2014-01-05 17:21 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe
C:\Users\*****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-15 18:56

==================== End Of Log ============================
--- --- ---

--- --- ---


so, alles abgearbeitet :) ich danke dir!

das problem mit dem windows explorer hatte ich heute abend wieder.

vielen dank!!!

schrauber 08.01.2014 12:03
Downloade dir bitte Windows Repair (All In One) von hier.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

drud 08.01.2014 12:32
danke schrauber.

etwas ist mir nicht klar:

warum muss ich allfällige externe festplatten und USB sticks anschliessen?

gerade bei der festplatte habe ich eigentlich eher angst, dass ich mir da etwas draufziehe von meinem laptop. es ist meine datensicherungs-festplatte. daher die angst. ich habe nur eine zusätzliche sicherung, eben die. die hatte ich nun aber mehrere wochen nicht im einsatz.

usb stick hatte ich in letzter zeit (letzte zwei wochen) nur einen in verwendung, der aber auch auf einem anderen pc im einsatz ist.

soll ich das also wirklich tun?

schrauber 09.01.2014 10:47
Das ist kein Muss, Du kannst diese Teile nur gerade mal mitscannen lassen wenn Du magst :)

drud 11.01.2014 18:20
danke schrauber. ich werde morgen alles abarbeiten. lg

schrauber 12.01.2014 08:45
ok :)

drud 12.01.2014 21:06
guten abend schrauber
bitte entschuldige, aber heute lief nicht nach plan :( dh. ich konnte heute gar ncihts machen, ncihtmal anfangen :( ich werde alles morgen abend, also montag abend, abarbeiten. da wirds aber auf jeden fall dann endlich auch klappen.
ich hoffe, dass mein laptöpchen dann bald wieder auf'm damm ist :)
ich danke dir für dein verständnis und deine hilfe.
bis morgen abend!
lg

schrauber 13.01.2014 12:19
ok :)

drud 14.01.2014 09:20
also ich bin dran. die erste aufgabe habe ich fertig. jedoch komt die windows explorer fehlermeldung immer noch. am schluss sah es nicht gleich aus bei dem windows reparatur programm. ich konnte nicht einen advanced modus starten. es hatdan erstmal ein backup angelegt. danach konnte ich die häckchen setzen, es sah aber anders aus. nun ist das fertig und ich versuche den eset scanner.

sch... eset hat bis jetzt 3 trojaner gefunden, alle java exploit. ich dreh noch durch. weder avira noch antimalwarebytes haben mir das gemeldet :( und ich dachte echt, es sei nichts schlimmes, dieses candy zeugs :(
ich hoffe, du kannst mir weiterhin helfen schrauber. eset läuft noch. werde das logfile posten, wenns fertig ist.

ich wusste, dass es dieses scheiss java update ist :(

Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=afd9b8a2e9b7a447b0016c6a8cfc33ad
# engine=16637
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-13 11:04:30
# local_time=2014-01-14 12:04:30 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 13607 141284120 0 0
# scanned=487705
# found=3
# cleaned=0
# scan_time=10218
sh=964DAB36D65D22444CFEE4134C69E86C517318D7 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NNM trojan" ac=I fn="C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\2c40cfd4-7b00bc23"
sh=2972F20F0C35AB26F3F71BB94D8515E066ACC942 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NPL trojan" ac=I fn="C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\3782e558-748b078c"
sh=2972F20F0C35AB26F3F71BB94D8515E066ACC942 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NPL trojan" ac=I fn="C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\5a071331-69a32add"
weiter als bis dahin komm ich heut morgen nicht. muss jetzt zur arbeit. er bringt bei jedem neustart die windows ecplorer meldung. kann gar nichts tun. so eine sch...

soll ich die lezten beiden aufgaben trotzdem noch abarbeiten? oder ändert sich durch den fund etwas?
(sofern ich das teil zum laufen bringe wegem windows explorer problem)

schrauber 15.01.2014 09:13
Ja bitte, ich brauche auf jeden Fall ein frisches FRST Logfile. Mach noch das hier vorher:

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

drud 15.01.2014 21:13
kein neustart verlangt von TFC. ging ganz rassig.


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 01
Ran by ***** (administrator) on *****-PC on 15-01-2014 20:32:26
Running from C:\Users\*****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Splashtop Inc.) C:\ASUS.SYS\SIONExportService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] ()
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\TrayServer.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-06] (Secure Banking)
HKU\UpdatusUser\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Users\*****\AppData\Local\phase-6\phase-6-compendio\reminder\reminder.exe (phase-6)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {FAD6394E-D719-45AD-8C59-99A8E90A359C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default
FF Homepage: hxxp://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-23]
FF Extension: WOT - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-28]
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-06]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT

==================== Services (Whitelisted) =================

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [896056 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [249856 2011-02-15] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Splashtop MDES; C:\ASUS.SYS\SIONExportService.exe [338208 2011-05-10] (Splashtop Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-05] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-11-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-09-05] (Scott)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 DNIMp50a64; System32\Drivers\DNIMp50a64.sys [x]
S3 DNISp50a64; System32\Drivers\DNISp50a64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-15 20:27 - 2014-01-15 20:27 - 00448512 _____ (OldTimer Tools) C:\Users\*****\Desktop\TFC.exe
2014-01-15 20:25 - 2014-01-15 20:25 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-14 06:45 - 2014-01-14 06:45 - 00987410 _____ C:\Users\*****\Desktop\SecurityCheck.exe
2014-01-13 21:04 - 2014-01-13 21:05 - 02347384 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_enu.exe
2014-01-13 20:21 - 2014-01-13 20:45 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-01-13 20:17 - 2014-01-13 20:17 - 00000207 _____ C:\Windows\tweaking.com-regbackup-*****-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-01-13 20:17 - 2014-01-13 20:17 - 00000000 ____D C:\RegBackup
2014-01-13 19:32 - 2014-01-13 19:32 - 00000000 ____D C:\Users\*****\Desktop\tweaking.com_windows_repair_aio
2014-01-13 19:31 - 2014-01-13 19:31 - 02903255 _____ C:\Users\*****\Desktop\tweaking.com_windows_repair_aio.zip
2014-01-07 22:03 - 2014-01-15 20:32 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2014-01-07 21:56 - 2014-01-07 21:56 - 00000756 _____ C:\Users\*****\Desktop\JRT 7.1.14.txt
2014-01-07 21:53 - 2014-01-07 21:53 - 00000756 _____ C:\Users\*****\Desktop\JRT.txt
2014-01-07 21:47 - 2014-01-07 21:47 - 01036305 _____ (Thisisu) C:\Users\*****\Desktop\JRT.exe
2014-01-07 21:17 - 2014-01-07 21:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-05 18:39 - 2014-01-13 20:47 - 00003692 _____ C:\Windows\PFRO.log
2014-01-05 18:31 - 2014-01-05 18:31 - 00051871 _____ C:\ComboFix.txt
2014-01-05 18:19 - 2014-01-05 18:31 - 00000000 ____D C:\ComboFix
2014-01-05 18:19 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-05 18:19 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-05 18:19 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-05 18:19 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-05 18:18 - 2014-01-05 18:31 - 00000000 ____D C:\Qoobox
2014-01-05 18:11 - 2014-01-05 18:11 - 05160001 ____R (Swearware) C:\Users\*****\Desktop\ComboFix.exe
2014-01-05 17:32 - 2014-01-05 17:33 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation
2014-01-05 17:31 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-05 17:31 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-05 17:30 - 2014-01-05 17:33 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA
2014-01-05 17:24 - 2014-01-05 17:24 - 00001349 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-05 17:21 - 2014-01-05 17:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-05 17:21 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-05 17:21 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\SysWOW64\NV
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\system32\NV
2014-01-05 17:17 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-05 17:17 - 2013-11-14 12:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00300320 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2014-01-05 17:17 - 2013-11-14 12:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-05 17:17 - 2013-11-14 12:58 - 00032544 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-01-05 17:15 - 2014-01-05 17:15 - 00000000 ____D C:\NVIDIA
2014-01-05 17:10 - 2014-01-05 17:14 - 259887872 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\331.82-notebook-win8-win7-64bit-international-whql.exe
2014-01-04 09:35 - 2014-01-04 09:43 - 00037839 _____ C:\Users\*****\Desktop\Addition.txt
2014-01-04 09:34 - 2014-01-15 20:32 - 00017586 _____ C:\Users\*****\Desktop\FRST.txt
2014-01-04 09:34 - 2014-01-15 20:32 - 00000000 ____D C:\FRST
2014-01-04 09:29 - 2014-01-15 20:32 - 02076160 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-01-04 07:21 - 2014-01-15 20:22 - 00005470 _____ C:\Windows\setupact.log
2014-01-04 07:21 - 2014-01-04 07:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-03 20:49 - 2014-01-03 20:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-03 20:48 - 2014-01-03 20:48 - 01034531 _____ (Thisisu) C:\Users\*****\Desktop\JRT_6.0.8.exe
2014-01-03 20:36 - 2014-01-03 20:36 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016(1).exe
2014-01-03 20:33 - 2014-01-03 20:33 - 00035240 _____ C:\Users\*****\Desktop\cc_20140103_203341.reg
2014-01-03 20:26 - 2014-01-07 21:40 - 00000000 ____D C:\AdwCleaner
2014-01-03 20:26 - 2014-01-03 20:26 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016.exe
2014-01-03 19:28 - 2014-01-03 19:28 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-03 18:47 - 2014-01-03 18:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-03 18:47 - 2014-01-03 18:47 - 00000000 ____D C:\Program Files\Java
2014-01-03 18:45 - 2014-01-03 18:46 - 30694824 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u45-windows-x64.exe
2014-01-03 18:44 - 2014-01-03 18:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Google
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 _____ C:\Users\*****\.airinstall.log
2013-12-29 16:03 - 2013-12-29 16:04 - 63772080 _____ C:\Users\*****\Downloads\myphotobook.ch-1.5.3.exe
2013-12-25 12:38 - 2013-12-25 12:38 - 00001158 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2014 Plus.lnk
2013-12-25 12:38 - 2013-12-25 12:38 - 00000000 ____D C:\Users\Public\Documents\MAGIX
2013-12-25 12:25 - 2013-12-25 12:25 - 02849256 _____ (MAGIX AG) C:\Users\*****\Downloads\videodeluxe2014plus_dlm.exe
2013-12-21 23:13 - 2013-12-21 23:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-01-15 20:32 - 2014-01-07 22:03 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2014-01-15 20:32 - 2014-01-04 09:34 - 00017586 _____ C:\Users\*****\Desktop\FRST.txt
2014-01-15 20:32 - 2014-01-04 09:34 - 00000000 ____D C:\FRST
2014-01-15 20:32 - 2014-01-04 09:29 - 02076160 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-01-15 20:27 - 2014-01-15 20:27 - 00448512 _____ (OldTimer Tools) C:\Users\*****\Desktop\TFC.exe
2014-01-15 20:27 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-15 20:27 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-15 20:26 - 2011-11-11 20:57 - 00000000 ____D C:\Users\*****\AppData\Local\CrashDumps
2014-01-15 20:26 - 2011-02-19 05:24 - 00697232 _____ C:\Windows\system32\perfh007.dat
2014-01-15 20:26 - 2011-02-19 05:24 - 00149372 _____ C:\Windows\system32\perfc007.dat
2014-01-15 20:26 - 2009-07-14 06:13 - 01651444 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-15 20:25 - 2014-01-15 20:25 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-15 20:25 - 2011-12-26 13:15 - 00000000 ____D C:\Users\*****\Documents\Outlook-Dateien
2014-01-15 20:25 - 2011-11-11 10:23 - 00000000 ___HD C:\ASUS.DAT
2014-01-15 20:22 - 2014-01-04 07:21 - 00005470 _____ C:\Windows\setupact.log
2014-01-15 20:22 - 2011-09-15 07:37 - 00000012 ____H C:\dvmexp.idx
2014-01-15 20:22 - 2011-09-15 07:23 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-15 20:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-15 20:20 - 2011-09-15 07:11 - 01513867 _____ C:\Windows\WindowsUpdate.log
2014-01-14 06:45 - 2014-01-14 06:45 - 00987410 _____ C:\Users\*****\Desktop\SecurityCheck.exe
2014-01-14 06:22 - 2012-09-29 21:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-14 01:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-13 21:05 - 2014-01-13 21:04 - 02347384 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_enu.exe
2014-01-13 20:47 - 2014-01-05 18:39 - 00003692 _____ C:\Windows\PFRO.log
2014-01-13 20:47 - 2009-07-14 05:45 - 00592688 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-13 20:45 - 2014-01-13 20:21 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-01-13 20:44 - 2009-07-14 03:34 - 00000514 _____ C:\Windows\win.ini
2014-01-13 20:17 - 2014-01-13 20:17 - 00000207 _____ C:\Windows\tweaking.com-regbackup-*****-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-01-13 20:17 - 2014-01-13 20:17 - 00000000 ____D C:\RegBackup
2014-01-13 19:51 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-13 19:32 - 2014-01-13 19:32 - 00000000 ____D C:\Users\*****\Desktop\tweaking.com_windows_repair_aio
2014-01-13 19:31 - 2014-01-13 19:31 - 02903255 _____ C:\Users\*****\Desktop\tweaking.com_windows_repair_aio.zip
2014-01-07 21:56 - 2014-01-07 21:56 - 00000756 _____ C:\Users\*****\Desktop\JRT 7.1.14.txt
2014-01-07 21:53 - 2014-01-07 21:53 - 00000756 _____ C:\Users\*****\Desktop\JRT.txt
2014-01-07 21:47 - 2014-01-07 21:47 - 01036305 _____ (Thisisu) C:\Users\*****\Desktop\JRT.exe
2014-01-07 21:40 - 2014-01-03 20:26 - 00000000 ____D C:\AdwCleaner
2014-01-07 21:18 - 2012-11-26 19:34 - 00001111 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-07 21:18 - 2012-11-26 19:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-07 21:17 - 2014-01-07 21:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-05 18:40 - 2011-09-15 07:36 - 00002594 _____ C:\Windows\system32\AutoRunFilter.ini
2014-01-05 18:39 - 2011-09-15 07:36 - 00001956 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-05 18:31 - 2014-01-05 18:31 - 00051871 _____ C:\ComboFix.txt
2014-01-05 18:31 - 2014-01-05 18:19 - 00000000 ____D C:\ComboFix
2014-01-05 18:31 - 2014-01-05 18:18 - 00000000 ____D C:\Qoobox
2014-01-05 18:29 - 2009-07-14 03:34 - 00000248 _____ C:\Windows\system.ini
2014-01-05 18:11 - 2014-01-05 18:11 - 05160001 ____R (Swearware) C:\Users\*****\Desktop\ComboFix.exe
2014-01-05 17:33 - 2014-01-05 17:32 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation
2014-01-05 17:33 - 2014-01-05 17:30 - 00000000 ____D C:\Users\*****\AppData\Local\NVIDIA
2014-01-05 17:33 - 2011-09-15 07:22 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-05 17:32 - 2011-09-15 07:22 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-05 17:32 - 2011-09-15 07:22 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-05 17:24 - 2014-01-05 17:24 - 00001349 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-05 17:21 - 2014-01-05 17:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\SysWOW64\NV
2014-01-05 17:20 - 2014-01-05 17:20 - 00000000 ____D C:\Windows\system32\NV
2014-01-05 17:15 - 2014-01-05 17:15 - 00000000 ____D C:\NVIDIA
2014-01-05 17:14 - 2014-01-05 17:10 - 259887872 _____ (NVIDIA Corporation) C:\Users\*****\Downloads\331.82-notebook-win8-win7-64bit-international-whql.exe
2014-01-04 09:43 - 2014-01-04 09:35 - 00037839 _____ C:\Users\*****\Desktop\Addition.txt
2014-01-04 07:21 - 2014-01-04 07:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-03 20:49 - 2014-01-03 20:49 - 00000000 ____D C:\Windows\ERUNT
2014-01-03 20:48 - 2014-01-03 20:48 - 01034531 _____ (Thisisu) C:\Users\*****\Desktop\JRT_6.0.8.exe
2014-01-03 20:36 - 2014-01-03 20:36 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016(1).exe
2014-01-03 20:33 - 2014-01-03 20:33 - 00035240 _____ C:\Users\*****\Desktop\cc_20140103_203341.reg
2014-01-03 20:26 - 2014-01-03 20:26 - 01233962 _____ C:\Users\*****\Desktop\adwcleaner_3.016.exe
2014-01-03 20:01 - 2011-11-11 10:23 - 00183904 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 19:48 - 2011-12-25 20:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-03 19:46 - 2009-07-14 08:45 - 00000000 ____D C:\Windows\ShellNew
2014-01-03 19:46 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2014-01-03 19:28 - 2014-01-03 19:28 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-03 19:28 - 2011-11-13 20:03 - 00000000 ____D C:\Users\*****\AppData\Local\Adobe
2014-01-03 19:28 - 2011-11-12 14:07 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-03 19:28 - 2011-11-12 14:06 - 00000000 ____D C:\ProgramData\Adobe
2014-01-03 18:59 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-03 18:58 - 2011-11-11 10:24 - 00001423 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 18:58 - 2011-11-11 10:24 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 18:58 - 2011-11-11 10:24 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 18:57 - 2011-04-13 03:33 - 00000000 ____D C:\Program Files\Google
2014-01-03 18:57 - 2011-04-13 03:33 - 00000000 ____D C:\Program Files (x86)\Google
2014-01-03 18:51 - 2012-12-05 19:49 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-03 18:51 - 2012-12-05 18:36 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-01-03 18:51 - 2011-12-05 21:43 - 00000000 ____D C:\Users\*****\AppData\Roaming\IrfanView
2014-01-03 18:47 - 2014-01-03 18:47 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-03 18:47 - 2014-01-03 18:47 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-03 18:47 - 2014-01-03 18:47 - 00000000 ____D C:\Program Files\Java
2014-01-03 18:47 - 2013-11-07 19:15 - 00000000 ____D C:\ProgramData\Oracle
2014-01-03 18:46 - 2014-01-03 18:45 - 30694824 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u45-windows-x64.exe
2014-01-03 18:45 - 2011-04-13 03:47 - 00000000 ____D C:\Program Files (x86)\ASUS
2014-01-03 18:44 - 2014-01-03 18:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Google
2014-01-03 18:44 - 2011-11-11 19:25 - 00000000 ____D C:\Users\*****\AppData\Local\Google
2014-01-03 18:41 - 2013-12-05 21:21 - 01625724 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-12-29 16:06 - 2013-12-29 16:06 - 00000000 _____ C:\Users\*****\.airinstall.log
2013-12-29 16:06 - 2011-11-11 19:28 - 00000000 ____D C:\Users\*****\AppData\Roaming\Adobe
2013-12-29 16:06 - 2011-11-11 10:22 - 00000000 ____D C:\Users\*****
2013-12-29 16:04 - 2013-12-29 16:03 - 63772080 _____ C:\Users\*****\Downloads\myphotobook.ch-1.5.3.exe
2013-12-26 11:48 - 2011-11-12 08:22 - 00000000 ____D C:\Users\*****\AppData\Local\MAGIX_AG
2013-12-25 12:39 - 2011-11-12 08:05 - 00000000 ___RD C:\Users\*****\Documents\MAGIX
2013-12-25 12:38 - 2013-12-25 12:38 - 00001158 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2014 Plus.lnk
2013-12-25 12:38 - 2013-12-25 12:38 - 00000000 ____D C:\Users\Public\Documents\MAGIX
2013-12-25 12:38 - 2011-11-12 08:04 - 00000000 ____D C:\Users\*****\AppData\Roaming\MAGIX
2013-12-25 12:38 - 2011-11-12 08:04 - 00000000 ____D C:\Users\*****\AppData\Local\MAGIX
2013-12-25 12:36 - 2011-11-12 08:02 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-25 12:36 - 2011-09-15 07:38 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-25 12:25 - 2013-12-25 12:25 - 02849256 _____ (MAGIX AG) C:\Users\*****\Downloads\videodeluxe2014plus_dlm.exe
2013-12-25 11:57 - 2012-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 23:13 - 2013-12-21 23:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-21 21:02 - 2012-08-31 20:11 - 00000000 ____D C:\Users\*****\Documents\My Digital Editions
2013-12-18 17:04 - 2013-05-08 19:14 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-18 17:04 - 2013-03-29 15:49 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 17:04 - 2013-03-29 15:49 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-14 01:13

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

mein avira email-schutz ist jetzt nicht gegeben. soll ich die aufgaben von der seite 1 unten noch lösen? hab jetzt einfach das TFC und FRST gemacht wie hier in deinem letzten post beschrieben.

DANKE

daa windows explorer problem besteht immer noch.

danke für deine hilfe!

schrauber 16.01.2014 16:13
Avira neu installieren.

Windows DVD zur Hand?

drud 16.01.2014 16:43
Avira neu installieren geht okay, werde ich morgen abend tun.

eine Windows DVD habe ich meines wissens nicht? was soll ich nun tun?

DANKE!

schrauber 17.01.2014 12:43
War WIndows vorinstalliert? Kannste eine baugleiche DVD irgendwo leihen?

drud 17.01.2014 19:04
ja, war vorinstalliert.

habe windows 7. keine ahnung, wo ich so eine DVD herkriegen kann:( was kann ich tun?

avira hab ich nun neuinstalliert. hat bestens geklappt.

nun laufen noch windows updates.

bezüglich windows dvd. hab wirklich nichts :( so eine ISO erstellen?

schrauber 18.01.2014 08:12
Jap :)
http://www.chip.de/artikel/Windows-7..._46353107.html

drud 18.01.2014 11:42
ok. auf dvd brennen? und dann?

wo finde ich meine windows lizenz nummer?

merci :-)

schrauber 19.01.2014 09:28
Auf DVD brennen. Key sollte auf einem Aufkleber auf dem Rechner sein.

drud 19.01.2014 20:08
key habe ich gefunden. ISO dvd gebrannt :) danke.
was muss ich nun tun mit der DVD? nehme an, dass windows irgendwie repariert werden muss?

MERCI

schrauber 20.01.2014 21:51
Guggst Du :)

"In Place Upgrade"

drud 20.01.2014 22:28
oh mein gott! hab das soeben durchgelesen. hoffentlich kann ich das alles..!werde als erstes noch wie empfohlen eine sicherung der daten anlegen. der eine satz da gefällt mir.nämlich nicht...

schrauber 21.01.2014 12:17
ok :)

drud 23.01.2014 20:47
hey schrauber
ich dann die aufgabe erst am wochenende erledigen (liege mit fieber im bett).
danke für deine hilfe und dein verständnis.
lg

schrauber 24.01.2014 12:28
ok. gute Besserung :)

drud 26.01.2014 20:02
huuhuu schrauber. die datensicherung ist immer noch am laufen. keine ahnung warum das so lange dauert :-( ist nicht normal und ich hab extra das löschen weggelassen. ich muss das jetzt erstmal zuende laufen lassen, bevor ich die windows reparatur machen kann :-( lg

schrauber 27.01.2014 15:47
ok :)

drud 27.01.2014 18:34
himmel, jetzt hab ich angefangen und nun meldet der mir, er könne das upgrade nicht durchführen, weil die version neuer ist, die ich habe, als das upgrade.

Zitat:
Die aktuelle Windows-Version ist neuer als die Version, auf die Sie ein Upgrade durchführen möchten. Das Upgrade kann nicht abgeschlossen werden.
Zitat Ende

Was nun? ich kann dann nur auf schliessen klicken.

schrauber 28.01.2014 15:05
die DVD ist bestimmt ohne Sp1.

http://www.chip.de/downloads/Windows..._46355794.html
Lad Dir dieses Iso und brenn es auf nen Rohling, dann kannste auch das benutzen.

drud 28.01.2014 18:58
ich glaub das ist aber das, was ich runtergerladen haben :( hiess jedenfalls auch home 64.... ich machs also nochmal. danke :)

also ich hab den download nicht nocmal gemacht. der filename ist derselbe wie ich schon runtergeladen habe. komischerweise steht dort etwa von vista drin?

hxxp://x.chip.de/downloads/extern/desktop/?bid=10143191&c=bfd393aadcb63474b2928f1f6202d1e7&url=http%3A%2F%2Fmsft-dnl.digitalrivercontent.net%2Fmsvista%2Fpub%2FX15-65741%2FX15-65741.iso

ich habe aber wirklich genau diesen link den du mir angegeben hast benutzt, beide male. wenn ich den pfad hinter dem download link kopiere, kommt eben der obgenannte pfad. erstmal muss ich ja auf download klicken. dann geht ein neues fenster auf, da muss ich wieder anwählen und dann nochnmal auf download klicken.

von mir aus gesehen steckt da also ein falsches file dahinter, hinter dem download-link.

schrauber 29.01.2014 11:59
dann versuchen wir mal den:

http://msft.digitalrivercontent.net/win/X17-58997.iso

drud 29.01.2014 20:34
ich glaubs nicht... als ich heute nachmittag das mail sah und kurz draufklickte, öffnte sich ein downloadfenster. und nun wo ich es zuhause runterladen will, kommt eine fehlermeldung :(

es tut mir so leid, dass ich so umstände bereite :(

aber der link funktioniert nicht mehr :(

schrauber 30.01.2014 16:27
Windows 7downloard

Aus diesem Thread bitte auf den Link für win7 Home premium 64bit SP1 klicken.

drud 02.02.2014 18:36
hallo schrauber
dieser link geht zwar, konnte die iso brennen, aber ich kann das upgrade nicht machen, weil die version auf der disk nicht mit der sprache meines computers übereinstimmt. so die meldung. die nun gebrannte iso ist englisch. mein pc deutsch. die sprache kann ich nirgends einstellen beim setup. das ist automatisch so.
ich hab dann auf der windows seite ncoh deutsch eingestellt, nochmals gedownloadet udn gebrannt, aber das hat nichts gändert. der dowonload-link ist englisch :(
ich brauche also einen download-link der auf eine deutsche iso zeigt.
es tut mir so leid, dass ich keinen besseren bericht geben kann. ich hoffe, du hilfst mir noch weiter!!
lg

schrauber 03.02.2014 16:26
Dann versuchen wir mal die:
UNAWAVE - Downloads von Windows 7 ISO-Image-Dateien

drud 05.02.2014 20:32
also das geht auch nicht :( es kommt wieder die meldung, dass mein windows neuer ist als das da, das ich installieren/reparieren will.

beim googlen habe ich gefunden, dass es kein deutsches win 64bit home premium inkl. SP1 gibt und dass man das irgendwie anders lösen muss, aber nich begreif nicht wie.

offenbar muss man windows downloaden, wo alle versionen drauf sind, und dann irgendwie so ein file entfernen, damit man das dann auswählen kann, wo man braucht. aber ich schnalls (noch) nicht.

ich hoffe, du kannst mir weiterhin helfen. sonst weiss ich nicht weiter.

ich danke dir!

lg

edit: da steht auch noch etwas dazu http://www.trojaner-board.de/100776-...-download.html aber ich schnalls trotzdem noch nicht ganz...

ich lad das windows 64bit professional deutsch nun von dem link hier im trojaner-board runter, dann ist das schon mal aufm pc. aber danach brauch ich wohl hilfe zum anpassen dieser ISO, damit ich dann meine benötigte home premium version auswählen kann. DANKE :)

ui, das EDIT wollte ich nicht so gross ;)

schrauber 06.02.2014 14:35
Gib mal nen Link zu dem Text was man anpassen muss, also was Du gelesen hast :)

drud 07.02.2014 13:41
das steht unter anderem dan in dem link von hier, vom trojaner-board, den ich unter EDIT reinkopiert habe.

schrauber 08.02.2014 11:23
ahja, ok. Wo genau brauchste jetzt HIlfe bei dem Text? :)

drud 08.02.2014 16:19
ich hab ja das windows 64bit professional deutsch runtergeladen.
aber ich begreif nicht ganz was ich jetzt tun muss. ich muss ja diese eine datei wegmachen, damit ich dann gefragt werde welche ich installieren will. aber gleichzeitig muss ich ja damit auch eine neue iso machen. mir ist die anleitung hier im trojaner-board auf der seite wo ich verlinkt habe zu kompliziert. ich begreif nicht was ich jetzt weiter schritt für schritt tun muss. (vielleicht hab ich auch zu viel angst und traue mich nicht...)

schrauber 09.02.2014 09:29
Du lädst die ISO
Du lädst das kleine Removal ZIP und lässt es laufen
Dann kannst Du die ISO auf die DVD brennen :)

drud 09.02.2014 20:53
danke :-) ich versuch das morgen abend!

schrauber 10.02.2014 17:13
ok :)

drud 11.02.2014 09:22
so, das upgrade läuft :-) hoffe ich hab nun das richtige windows erwischt. aber ich denke sonst hätt er wieder reklamiert. hab mich irgendwie relativ flüchtig durchgeklickt, weil ich ja schon do oft angefangen hatte. es hatte dann vier zur auswahl. könnt mich höchstens verklickt haben. aber das glaub ich nicht. ich denk das kommt jetzt gut. eben sonst hät er sicher wieder reklamiert wenns eine andere version gewesen wär... mal gucken wie es dann morgen aussieht. läuft jetzt über nacht...

gute Nachrichten :)

Es scheint geklappt zu haben mit der ISO und dem windows upgrade :)

nun bin ich gespannt, wie es weitergeht. ich denke wir müssen irgendwie noch prüfen ob nun von dem pup.optional zeugs wirklich alles weg ist.

also her mit neuen aufgaben :applaus:

:dankeschoen:

schrauber 11.02.2014 19:03
nice job :)

dann bitte mal ein frisches FRST Logfile, und bitte mal aufzählen was noch an Problemen da ist :)

drud 11.02.2014 22:28
also normalerweise gehe ich ja mit firefox ins netz. da jetzt die symbole anders sind, kam ich vorher zufällig auf internet explorer. da meldet mir secure banking malware.

windows explorer bleibt immer noch hängen :( das ist unverändert, trotz windwos reparatur.

frst-log folgt nachher. muss erst was fertig machen. aber wollte das vorab schreiben, nicht dass ich es aufs mal noch vergesse...

so sachen wie lautstärkeanzeige (mitten auf dem bilschirm, nicht unten rechts) oder anzeige von ein-/ausschalten des touchpads gehen auch nicht.


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01
Ran by ***** (administrator) on *****-PC on 11-02-2014 22:27:07
Running from C:\Users\*****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Splashtop Inc.) C:\ASUS.SYS\SIONExportService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] ()
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\TrayServer.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4073853582-3472843793-526417432-1001\...\Run: [Free Download Manager] - C:\Program Files (x86)\Free Download Manager\fdm.exe [6950400 2013-10-25] (FreeDownloadManager.ORG)
HKU\S-1-5-21-4073853582-3472843793-526417432-1001\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-06] (Secure Banking)
HKU\S-1-5-21-4073853582-3472843793-526417432-1001\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Users\*****\AppData\Local\phase-6\phase-6-compendio\reminder\reminder.exe (phase-6)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {FAD6394E-D719-45AD-8C59-99A8E90A359C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default
FF Homepage: hxxp://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-23]
FF Extension: WOT - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-28]
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-06]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [249856 2011-02-15] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Splashtop MDES; C:\ASUS.SYS\SIONExportService.exe [338208 2011-05-10] (Splashtop Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-11-14] (NVIDIA Corporation)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-11 20:57 - 2014-02-11 20:57 - 00183920 _____ () C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-11 07:09 - 2014-02-11 07:09 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-11 07:03 - 2014-02-11 07:03 - 00001407 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-11 07:02 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-11 07:02 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-11 07:02 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-11 07:02 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-02-11 07:02 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-02-11 07:02 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-11 07:01 - 2014-02-11 07:03 - 00001441 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-11 07:00 - 2014-02-11 07:00 - 00000020 ___SH () C:\Users\*****\ntuser.ini
2014-02-11 07:00 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-02-11 07:00 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-11 01:13 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-11 01:13 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-11 01:13 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-11 01:13 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-11 01:07 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-11 01:07 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-11 01:07 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-11 01:07 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-11 01:07 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-11 01:07 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-11 01:07 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-11 01:07 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-11 01:07 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-11 00:37 - 2014-02-11 00:37 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-02-10 23:32 - 2014-02-11 07:00 - 00000000 ____D () C:\Users\*****
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Vorlagen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Startmenü
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Netzwerkumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Lokale Einstellungen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Eigene Dateien
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Druckumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Musik
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Bilder
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Verlauf
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Anwendungsdaten
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Anwendungsdaten
2014-02-10 23:32 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-10 23:32 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-10 23:31 - 2014-02-10 23:31 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____D () C:\Program Files\Synaptics
2014-02-10 23:29 - 2014-02-11 20:57 - 01572853 _____ () C:\Windows\WindowsUpdate.log
2014-02-10 23:29 - 2014-02-11 00:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-10 23:29 - 2014-02-10 23:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-10 23:29 - 2014-02-10 23:35 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-10 23:29 - 2014-02-10 23:29 - 00000000 ____D () C:\ProgramData\SonicFocus
2014-02-10 23:29 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-10 23:29 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 03467927 _____ () C:\Windows\system32\nvcoproc.bin
2014-02-10 23:29 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 01065248 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-10 23:29 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Program Files\Realtek
2014-02-10 23:24 - 2014-02-11 06:59 - 00000000 ____D () C:\Windows\Panther
2014-02-10 23:21 - 2014-02-10 23:21 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-02-10 23:07 - 2014-02-11 00:39 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-02-10 22:47 - 2014-02-10 23:00 - 00000000 ___HD () C:\$INPLACE.~TR
2014-02-10 22:04 - 2014-02-11 00:39 - 00006165 _____ () C:\Windows\comsetup.log
2014-02-10 21:24 - 2014-02-11 00:28 - 00000000 ____D () C:\Users\*****\Downloads\eicfg_removal_utility
2014-02-10 21:24 - 2014-02-10 21:24 - 00005347 _____ () C:\Users\*****\Downloads\eicfg_removal_utility.zip
2014-02-10 21:23 - 2014-02-11 00:28 - 00000000 ____D () C:\Users\*****\Documents\Iso alt
2014-02-10 21:23 - 2014-02-10 21:23 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner (2)
2014-02-10 21:22 - 2014-02-10 21:22 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner
2014-02-10 21:13 - 2014-02-11 00:27 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-02-02 17:31 - 2014-02-02 18:33 - 00002020 _____ () C:\Users\*****\Desktop\Windows Compatibility Report.htm
2014-01-27 18:27 - 2014-02-05 19:51 - 00003320 _____ () C:\Users\*****\Desktop\Windows-Kompatibilitätsbericht.htm
2014-01-27 18:25 - 2014-02-10 21:49 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-01-27 18:25 - 2014-02-10 21:49 - 00001890 _____ () C:\Windows\diagerr.xml
2014-01-19 18:22 - 2014-02-11 00:26 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Free Download Manager
2014-01-19 18:22 - 2014-02-10 23:56 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-01-19 18:22 - 2014-02-10 23:41 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-01-19 18:22 - 2014-01-19 18:22 - 00001069 _____ () C:\Users\*****\Desktop\Free Download Manager.lnk
2014-01-19 18:20 - 2014-01-19 18:20 - 00614784 _____ (Chip Digital GmbH) C:\Users\*****\Desktop\Free Download Manager - CHIP-Downloader.exe
2014-01-17 19:01 - 2014-02-11 00:26 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Avira
2014-01-17 19:00 - 2014-02-10 23:36 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-17 19:00 - 2014-01-17 19:00 - 00002068 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-17 19:00 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-17 19:00 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-17 19:00 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-17 19:00 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-17 18:53 - 2014-01-17 18:58 - 140300048 _____ () C:\Users\*****\Downloads\avira_antivirus_suite_de.exe
2014-01-15 20:27 - 2014-01-15 20:27 - 00448512 _____ (OldTimer Tools) C:\Users\*****\Desktop\TFC.exe
2014-01-14 06:45 - 2014-01-14 06:45 - 00987410 _____ () C:\Users\*****\Desktop\SecurityCheck.exe
2014-01-13 21:04 - 2014-01-13 21:05 - 02347384 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_enu.exe
2014-01-13 20:21 - 2014-01-13 20:45 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-01-13 20:17 - 2014-01-13 20:17 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-*****-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-01-13 20:17 - 2014-01-13 20:17 - 00000000 ____D () C:\RegBackup
2014-01-13 19:32 - 2014-02-11 00:27 - 00000000 ____D () C:\Users\*****\Desktop\tweaking.com_windows_repair_aio
2014-01-13 19:31 - 2014-01-13 19:31 - 02903255 _____ () C:\Users\*****\Desktop\tweaking.com_windows_repair_aio.zip

==================== One Month Modified Files and Folders =======

2014-02-11 22:27 - 2014-01-04 09:34 - 00019717 _____ () C:\Users\*****\Desktop\FRST.txt
2014-02-11 22:27 - 2014-01-04 09:34 - 00000000 ____D () C:\FRST
2014-02-11 22:26 - 2014-01-07 22:03 - 00000000 ____D () C:\Users\*****\Desktop\FRST-OlderVersion
2014-02-11 22:26 - 2014-01-04 09:29 - 02151424 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-02-11 22:23 - 2009-07-14 05:45 - 00018224 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-11 22:23 - 2009-07-14 05:45 - 00018224 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-11 22:22 - 2012-09-29 21:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-11 21:18 - 2014-02-10 23:29 - 01572853 _____ () C:\Windows\WindowsUpdate.log
2014-02-11 20:58 - 2011-11-11 10:23 - 00000000 ____D () C:\Users\*****\AppData\Local\VirtualStore
2014-02-11 20:57 - 2014-02-11 20:57 - 00183920 _____ () C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-11 20:54 - 2010-11-21 07:50 - 00699342 _____ () C:\Windows\system32\perfh007.dat
2014-02-11 20:54 - 2010-11-21 07:50 - 00149450 _____ () C:\Windows\system32\perfc007.dat
2014-02-11 20:54 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-11 20:48 - 2011-11-11 10:23 - 00000000 ___HD () C:\ASUS.DAT
2014-02-11 20:48 - 2011-09-15 07:37 - 00000012 ____H () C:\dvmexp.idx
2014-02-11 20:47 - 2011-09-15 07:23 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-11 20:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-11 20:47 - 2009-07-14 05:51 - 00754607 _____ () C:\Windows\setupact.log
2014-02-11 07:16 - 2011-12-26 13:15 - 00000000 ____D () C:\Users\*****\Documents\Outlook-Dateien
2014-02-11 07:09 - 2014-02-11 07:09 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-11 07:05 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-11 07:03 - 2014-02-11 07:03 - 00001407 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-11 07:03 - 2014-02-11 07:01 - 00001441 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-11 07:03 - 2011-11-11 10:24 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-11 07:03 - 2011-11-11 10:24 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-11 07:00 - 2014-02-11 07:00 - 00000020 ___SH () C:\Users\*****\ntuser.ini
2014-02-11 07:00 - 2014-02-10 23:32 - 00000000 ____D () C:\Users\*****
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-11 06:59 - 2014-02-10 23:24 - 00000000 ____D () C:\Windows\Panther
2014-02-11 06:59 - 2009-07-29 06:10 - 00000000 ____D () C:\Recovery
2014-02-11 06:59 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-11 06:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-02-11 06:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-11 06:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-11 01:07 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-11 01:00 - 2010-11-21 04:47 - 00011170 _____ () C:\Windows\PFRO.log
2014-02-11 00:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Registration
2014-02-11 00:39 - 2014-02-10 23:07 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-02-11 00:39 - 2014-02-10 22:04 - 00006165 _____ () C:\Windows\comsetup.log
2014-02-11 00:37 - 2014-02-11 00:37 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-02-11 00:36 - 2012-11-27 07:19 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-02-11 00:36 - 2011-12-25 20:04 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-02-11 00:33 - 2009-07-14 05:45 - 00585064 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-02-11 00:30 - 2009-07-14 05:46 - 00005157 _____ () C:\Windows\DtcInstall.log
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 00:28 - 2014-02-10 21:24 - 00000000 ____D () C:\Users\*****\Downloads\eicfg_removal_utility
2014-02-11 00:28 - 2014-02-10 21:23 - 00000000 ____D () C:\Users\*****\Documents\Iso alt
2014-02-11 00:28 - 2013-08-03 14:45 - 00000000 ____D () C:\Users\*****\Documents\MAGIX Speed
2014-02-11 00:28 - 2013-01-26 23:58 - 00000000 ____D () C:\Users\*****\Documents\MAGIX_Video_deluxe_17_Plus_Sonderedition
2014-02-11 00:28 - 2012-08-31 20:11 - 00000000 ____D () C:\Users\*****\Documents\My Digital Editions
2014-02-11 00:28 - 2011-11-24 21:07 - 00000000 ____D () C:\Users\*****\Documents\ifolor Designer Dateien
2014-02-11 00:28 - 2011-11-12 08:05 - 00000000 ___RD () C:\Users\*****\Documents\MAGIX
2014-02-11 00:27 - 2014-02-10 21:13 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-02-11 00:27 - 2014-01-13 19:32 - 00000000 ____D () C:\Users\*****\Desktop\tweaking.com_windows_repair_aio
2014-02-11 00:27 - 2013-05-24 19:32 - 00000000 ____D () C:\Users\*****\Desktop\Sprachen
2014-02-11 00:27 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Phase6
2014-02-11 00:27 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\phase-6
2014-02-11 00:27 - 2013-01-08 19:38 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\digital publishing
2014-02-11 00:27 - 2012-12-05 19:49 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Opera
2014-02-11 00:27 - 2012-10-05 18:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Mozilla
2014-02-11 00:27 - 2012-09-23 16:54 - 00000000 ____D () C:\Users\*****\Desktop\Ricardo Bilder
2014-02-11 00:27 - 2012-04-06 10:39 - 00000000 ____D () C:\Users\*****\AppData\Roaming\XMedia Recode
2014-02-11 00:27 - 2012-03-23 22:01 - 00000000 ____D () C:\Users\*****\Documents\ifolor
2014-02-11 00:27 - 2012-01-14 18:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Sync App Settings
2014-02-11 00:27 - 2011-12-26 18:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-11 00:27 - 2011-11-27 17:09 - 00000000 ____D () C:\Users\*****\Documents\CyberLink
2014-02-11 00:27 - 2011-11-24 20:23 - 00000000 ____D () C:\Users\*****\AppData\Roaming\TuneUp Software
2014-02-11 00:27 - 2011-11-23 20:05 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Skype
2014-02-11 00:27 - 2011-11-13 20:19 - 00000000 ____D () C:\Users\*****\AppData\Roaming\OpenOffice.org
2014-02-11 00:27 - 2011-11-11 10:25 - 00000000 ____D () C:\Users\*****\Documents\Bluetooth Folder
2014-02-11 00:27 - 2011-11-11 10:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:27 - 2011-11-11 10:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:26 - 2014-01-19 18:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Free Download Manager
2014-02-11 00:26 - 2014-01-17 19:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Avira
2014-02-11 00:26 - 2014-01-05 17:32 - 00000000 ____D () C:\Users\*****\AppData\Local\NVIDIA Corporation
2014-02-11 00:26 - 2014-01-05 17:30 - 00000000 ____D () C:\Users\*****\AppData\Local\NVIDIA
2014-02-11 00:26 - 2014-01-03 18:44 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Google
2014-02-11 00:26 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\AppData\Local\phase-6
2014-02-11 00:26 - 2013-01-11 19:25 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Langenscheidt
2014-02-11 00:26 - 2013-01-11 19:15 - 00000000 ____D () C:\Users\*****\AppData\Roaming\lingDIALOG
2014-02-11 00:26 - 2013-01-11 18:30 - 00000000 ____D () C:\Users\*****\AppData\Roaming\conkeror.mozdev.org
2014-02-11 00:26 - 2012-12-05 19:49 - 00000000 ____D () C:\Users\*****\AppData\Local\Opera
2014-02-11 00:26 - 2012-11-26 19:34 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Malwarebytes
2014-02-11 00:26 - 2012-08-27 19:16 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Garmin
2014-02-11 00:26 - 2012-08-14 17:47 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ACD Systems
2014-02-11 00:26 - 2012-07-29 13:01 - 00000000 ____D () C:\Users\*****\AppData\Local\Mozilla
2014-02-11 00:26 - 2012-04-21 09:30 - 00000000 ____D () C:\Users\*****\AppData\Roaming\FileZilla
2014-02-11 00:26 - 2012-04-06 10:49 - 00000000 ____D () C:\Users\*****\AppData\Roaming\DVDVideoSoft
2014-02-11 00:26 - 2012-01-19 21:42 - 00000000 ____D () C:\Users\*****\AppData\Local\Windows Live Writer
2014-02-11 00:26 - 2011-12-19 21:42 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Apple Computer
2014-02-11 00:26 - 2011-11-26 10:49 - 00000000 ____D () C:\Users\*****\AppData\Local\mquadr.at
2014-02-11 00:26 - 2011-11-24 20:54 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ifolor
2014-02-11 00:26 - 2011-11-13 12:50 - 00000000 ____D () C:\Users\*****\AppData\Roaming\CyberLink
2014-02-11 00:26 - 2011-11-13 12:25 - 00000000 ____D () C:\Users\*****\AppData\Local\OLYMPUS
2014-02-11 00:26 - 2011-11-12 08:04 - 00000000 ____D () C:\Users\*****\AppData\Roaming\MAGIX
2014-02-11 00:26 - 2011-11-12 08:04 - 00000000 ____D () C:\Users\*****\AppData\Local\Xara
2014-02-11 00:26 - 2011-11-11 19:43 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ASUS WebStorage
2014-02-11 00:26 - 2011-11-11 19:36 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Macromedia
2014-02-11 00:26 - 2011-11-11 19:28 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Adobe
2014-02-11 00:26 - 2011-11-11 19:16 - 00000000 ____D () C:\Users\*****\AppData\Local\Power2Go
2014-02-11 00:26 - 2011-11-11 12:33 - 00000000 ____D () C:\Users\*****\AppData\Roaming\FLEXnet
2014-02-11 00:21 - 2012-09-29 21:34 - 00000000 ____D () C:\Users\*****\AppData\Local\Macromedia
2014-02-11 00:21 - 2011-12-25 20:01 - 00000000 ____D () C:\Users\*****\AppData\Local\Microsoft Help
2014-02-11 00:21 - 2011-11-26 10:41 - 00000000 ____D () C:\Users\*****\AppData\Local\IM
2014-02-11 00:21 - 2011-11-12 08:22 - 00000000 ____D () C:\Users\*****\AppData\Local\MAGIX_AG
2014-02-11 00:21 - 2011-11-12 08:04 - 00000000 ____D () C:\Users\*****\AppData\Local\MAGIX
2014-02-11 00:21 - 2011-11-11 12:39 - 00000000 ____D () C:\Users\*****\AppData\Local\Microsoft Games
2014-02-11 00:20 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\.swt
2014-02-11 00:20 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\.phase-6
2014-02-11 00:20 - 2013-01-11 19:15 - 00000000 ____D () C:\Users\*****\.pknowledge
2014-02-11 00:20 - 2013-01-11 18:30 - 00000000 ____D () C:\Users\*****\AppData\Local\conkeror.mozdev.org
2014-02-11 00:20 - 2013-01-08 19:42 - 00000000 ____D () C:\Users\*****\AppData\Local\digital publishing
2014-02-11 00:20 - 2012-08-14 17:47 - 00000000 ____D () C:\Users\*****\AppData\Local\ACD Systems
2014-02-11 00:20 - 2012-08-14 17:44 - 00000000 ____D () C:\Users\*****\AppData\Local\Downloaded Installations
2014-02-11 00:20 - 2012-04-20 18:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Fujifilm
2014-02-11 00:20 - 2011-12-20 22:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Cyberlink
2014-02-11 00:20 - 2011-12-19 21:42 - 00000000 ____D () C:\Users\*****\AppData\Local\Apple Computer
2014-02-11 00:20 - 2011-12-19 21:39 - 00000000 ____D () C:\Users\*****\AppData\Local\Apple
2014-02-11 00:20 - 2011-11-20 13:19 - 00000000 ____D () C:\Users\*****\AppData\Local\BMExplorer
2014-02-11 00:20 - 2011-11-13 20:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Adobe
2014-02-11 00:20 - 2011-11-11 20:57 - 00000000 ____D () C:\Users\*****\AppData\Local\CrashDumps
2014-02-11 00:20 - 2011-11-11 19:25 - 00000000 ____D () C:\Users\*****\AppData\Local\Google
2014-02-11 00:20 - 2011-11-11 10:23 - 00000000 ____D () C:\Users\*****\AppData\Local\ASUS
2014-02-11 00:03 - 2014-01-05 17:20 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-02-11 00:03 - 2012-12-12 14:47 - 00000000 __SHD () C:\Windows\SysWOW64\%APPDATA%
2014-02-11 00:03 - 2011-04-13 03:47 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-11 00:03 - 2011-02-18 21:08 - 00000000 ____D () C:\Windows\system32\SPReview
2014-02-11 00:03 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-02-11 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-11 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-11 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-11 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-11 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-11 00:02 - 2014-01-05 17:20 - 00000000 ____D () C:\Windows\system32\NV
2014-02-11 00:02 - 2013-03-13 21:59 - 00000000 __SHD () C:\Windows\system32\%APPDATA%
2014-02-11 00:02 - 2012-02-17 20:10 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-11 00:02 - 2011-09-15 07:46 - 00000000 ____D () C:\Windows\system32\AsMakeLink
2014-02-11 00:02 - 2011-04-13 03:44 - 00000000 ____D () C:\Windows\ru
2014-02-11 00:02 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\nl
2014-02-11 00:02 - 2011-02-18 20:48 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-02-11 00:02 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\ShellNew
2014-02-11 00:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-02-11 00:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-11 00:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-11 00:01 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\it
2014-02-11 00:01 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\he
2014-02-11 00:01 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\fr
2014-02-11 00:01 - 2009-07-29 06:20 - 00000000 ____D () C:\Windows\Log
2014-02-11 00:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2014-02-11 00:00 - 2014-02-10 23:29 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-11 00:00 - 2014-01-03 20:49 - 00000000 ____D () C:\Windows\ERUNT
2014-02-11 00:00 - 2013-12-25 12:38 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-02-11 00:00 - 2013-07-07 20:44 - 00000000 ____D () C:\ProgramData\Magix Shared
2014-02-11 00:00 - 2013-05-14 13:59 - 00000000 ____D () C:\ProgramData\Phase6
2014-02-11 00:00 - 2013-02-19 19:34 - 00000000 ____D () C:\ProgramData\tmp
2014-02-11 00:00 - 2012-12-02 17:21 - 00000000 ____D () C:\Windows\erdnt
2014-02-11 00:00 - 2012-12-02 16:42 - 00000000 ____D () C:\Users\mõder
2014-02-11 00:00 - 2012-11-27 07:19 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-11 00:00 - 2012-11-26 19:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-11 00:00 - 2012-07-29 13:01 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-11 00:00 - 2012-03-20 21:51 - 00000000 __HDC () C:\ProgramData\{D3257C41-1D3A-407B-A943-682D251F5FD2}
2014-02-11 00:00 - 2012-02-18 18:40 - 00000000 ____D () C:\ProgramData\Photo Notifier and Animation Creator
2014-02-11 00:00 - 2012-01-14 17:55 - 00000000 ____D () C:\ProgramData\Sync App Settings
2014-02-11 00:00 - 2011-12-25 20:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-11 00:00 - 2011-12-19 21:40 - 00000000 ____D () C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2014-02-11 00:00 - 2011-11-26 10:49 - 00000000 ____D () C:\ProgramData\mquadr.at
2014-02-11 00:00 - 2011-11-24 20:21 - 00000000 __SHD () C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2014-02-11 00:00 - 2011-11-24 20:21 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-11 00:00 - 2011-11-23 20:05 - 00000000 ____D () C:\ProgramData\Skype
2014-02-11 00:00 - 2011-11-13 20:17 - 00000000 ____D () C:\ProgramData\Sun
2014-02-11 00:00 - 2011-11-13 12:50 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-11 00:00 - 2011-11-11 20:58 - 00000000 ____D () C:\ProgramData\NETGEAR
2014-02-11 00:00 - 2011-11-11 20:57 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-02-11 00:00 - 2011-09-15 07:49 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:00 - 2011-09-15 07:46 - 00000000 ____D () C:\ProgramData\USBChargerPlus
2014-02-11 00:00 - 2011-09-15 07:43 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:00 - 2011-09-15 07:38 - 00000000 ____D () C:\Users\Public\Documents\ASUS Music Maker
2014-02-11 00:00 - 2011-09-15 07:35 - 00000000 ____D () C:\ProgramData\P4G
2014-02-11 00:00 - 2011-09-15 07:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 00:00 - 2011-09-15 07:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 00:00 - 2011-04-13 03:51 - 00000000 ____D () C:\ProgramData\Trend Micro
2014-02-11 00:00 - 2011-04-13 03:48 - 00000000 ____D () C:\ProgramData\OberonGameConsole
2014-02-11 00:00 - 2011-04-13 03:46 - 00000000 ____D () C:\Windows\en
2014-02-11 00:00 - 2011-04-13 03:44 - 00000000 ____D () C:\Windows\de
2014-02-11 00:00 - 2011-04-13 03:44 - 00000000 ____D () C:\Windows\ar
2014-02-11 00:00 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\es
2014-02-11 00:00 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\el
2014-02-11 00:00 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-02-11 00:00 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\Nuance
2014-02-11 00:00 - 2010-11-21 08:00 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-11 00:00 - 2009-07-29 06:20 - 00000000 ____D () C:\Windows\ASUS
2014-02-11 00:00 - 2009-07-29 06:20 - 00000000 ____D () C:\Windows\ABLKSR
2014-02-11 00:00 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-02-10 23:58 - 2011-09-15 07:38 - 00000000 ____D () C:\ProgramData\MAGIX
2014-02-10 23:56 - 2014-01-19 18:22 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-02-10 23:56 - 2013-02-19 19:34 - 00000000 ____D () C:\ProgramData\hps
2014-02-10 23:56 - 2013-01-11 19:25 - 00000000 ____D () C:\ProgramData\Langenscheidt
2014-02-10 23:56 - 2011-11-26 10:40 - 00000000 ____D () C:\ProgramData\IncrediMail
2014-02-10 23:56 - 2011-11-26 10:40 - 00000000 ____D () C:\ProgramData\IM
2014-02-10 23:56 - 2011-11-24 20:54 - 00000000 ____D () C:\ProgramData\ifolor
2014-02-10 23:56 - 2011-11-11 20:25 - 00000000 ____D () C:\ProgramData\Avira
2014-02-10 23:56 - 2011-11-11 10:23 - 00000000 ____D () C:\ProgramData\FolderView
2014-02-10 23:56 - 2011-09-15 07:38 - 00000000 ____D () C:\ProgramData\CyberLink
2014-02-10 23:56 - 2011-09-15 07:38 - 00000000 ____D () C:\ProgramData\ASUS Music Maker
2014-02-10 23:56 - 2011-09-15 07:30 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-10 23:56 - 2011-09-15 07:22 - 00000000 ____D () C:\ProgramData\Intel
2014-02-10 23:56 - 2011-04-13 03:49 - 00000000 ____D () C:\ProgramData\ChangeFolderView
2014-02-10 23:56 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-02-10 23:56 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-10 23:55 - 2013-01-11 18:28 - 00000000 ____D () C:\Program Files (x86)\WEVOSYS
2014-02-10 23:55 - 2012-12-05 18:43 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-10 23:55 - 2012-12-05 18:38 - 00000000 ____D () C:\Program Files (x86)\WOT
2014-02-10 23:55 - 2012-08-14 17:46 - 00000000 ____D () C:\ProgramData\ACD Systems
2014-02-10 23:55 - 2012-02-18 10:09 - 00000000 ___HD () C:\ProgramData\.syncID
2014-02-10 23:55 - 2012-02-18 10:08 - 00000000 ___HD () C:\ProgramData\.Syncables
2014-02-10 23:55 - 2011-12-19 21:40 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-10 23:55 - 2011-12-19 21:38 - 00000000 ____D () C:\ProgramData\Apple
2014-02-10 23:55 - 2011-11-13 12:12 - 00000000 ____D () C:\Program Files (x86)\WebSite X5 v8 - Evolution
2014-02-10 23:55 - 2011-11-12 14:06 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-10 23:55 - 2011-09-15 07:28 - 00000000 ____D () C:\ProgramData\AmUStor
2014-02-10 23:55 - 2011-04-13 03:38 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-02-10 23:54 - 2014-02-10 23:29 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-10 23:54 - 2013-12-21 23:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-10 23:54 - 2013-03-20 20:55 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-10 23:54 - 2013-01-11 19:23 - 00000000 ____D () C:\Program Files (x86)\Vokabeltrainer 6
2014-02-10 23:54 - 2013-01-11 19:08 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-02-10 23:54 - 2012-12-09 09:53 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-02-10 23:54 - 2012-12-05 19:49 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-10 23:54 - 2012-12-05 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-10 23:54 - 2012-11-27 19:28 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-02-10 23:54 - 2012-11-27 07:19 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-02-10 23:54 - 2012-04-12 18:23 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-02-10 23:54 - 2012-02-18 18:40 - 00000000 ____D () C:\Program Files (x86)\Photo Notifier and Animation Creator
2014-02-10 23:54 - 2011-11-13 20:18 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3
2014-02-10 23:54 - 2011-11-11 11:18 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-10 23:54 - 2011-09-15 07:27 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-10 23:54 - 2011-04-13 03:49 - 00000000 ____D () C:\Program Files (x86)\syncables
2014-02-10 23:54 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Nuance
2014-02-10 23:54 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-02-10 23:52 - 2011-11-12 13:56 - 00000000 ____D () C:\Program Files (x86)\MotionStudios
2014-02-10 23:51 - 2013-02-19 19:29 - 00000000 ____D () C:\Program Files (x86)\Migros
2014-02-10 23:51 - 2012-12-04 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-02-10 23:51 - 2011-12-25 20:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-02-10 23:51 - 2011-12-25 20:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-02-10 23:51 - 2011-12-25 20:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-10 23:51 - 2011-04-13 03:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-02-10 23:51 - 2011-04-13 03:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-10 23:50 - 2012-11-26 19:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-10 23:50 - 2011-12-25 20:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-02-10 23:49 - 2011-11-12 08:02 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-02-10 23:45 - 2013-01-11 18:24 - 00000000 ____D () C:\Program Files (x86)\Langenscheidt
2014-02-10 23:41 - 2014-01-19 18:22 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-02-10 23:41 - 2013-07-21 17:31 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-02-10 23:41 - 2013-01-08 19:35 - 00000000 ____D () C:\Program Files (x86)\digital publishing
2014-02-10 23:41 - 2012-04-21 09:30 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-02-10 23:41 - 2012-04-06 10:49 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-10 23:41 - 2012-01-02 13:38 - 00000000 ____D () C:\Program Files (x86)\FreePDF_XP
2014-02-10 23:41 - 2011-11-26 10:40 - 00000000 ____D () C:\Program Files (x86)\IncrediMail
2014-02-10 23:41 - 2011-11-24 20:54 - 00000000 ____D () C:\Program Files (x86)\ifolor
2014-02-10 23:41 - 2011-11-13 20:17 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-10 23:41 - 2011-09-15 07:38 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-02-10 23:41 - 2011-09-15 07:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-10 23:41 - 2011-09-15 07:15 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-10 23:41 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-10 23:36 - 2014-01-17 19:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-10 23:36 - 2011-12-19 21:39 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-10 23:36 - 2011-09-15 07:38 - 00000000 ____D () C:\Program Files (x86)\ASUS Music Maker
2014-02-10 23:36 - 2011-09-15 07:32 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-02-10 23:36 - 2011-09-15 07:30 - 00000000 ____D () C:\Program Files (x86)\Atheros
2014-02-10 23:36 - 2011-04-13 03:47 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-02-10 23:35 - 2014-02-10 23:29 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-10 23:35 - 2012-12-05 18:38 - 00000000 ____D () C:\Program Files\WOT
2014-02-10 23:35 - 2012-08-14 17:46 - 00000000 ____D () C:\Program Files (x86)\ACD Systems
2014-02-10 23:35 - 2012-01-14 17:54 - 00000000 ____D () C:\Program Files (x86)\Allway Sync
2014-02-10 23:35 - 2011-11-12 14:07 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-10 23:35 - 2011-09-15 07:35 - 00000000 ____D () C:\Program Files\P4G
2014-02-10 23:35 - 2011-09-15 07:28 - 00000000 ____D () C:\Program Files (x86)\ASM104xUSB3
2014-02-10 23:35 - 2011-09-15 07:28 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-02-10 23:35 - 2011-04-13 03:36 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-10 23:34 - 2014-01-03 18:47 - 00000000 ____D () C:\Program Files\Java
2014-02-10 23:34 - 2012-12-30 12:31 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-10 23:34 - 2012-12-04 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-10 23:34 - 2012-01-02 13:37 - 00000000 ____D () C:\Program Files\gs
2014-02-10 23:34 - 2011-12-25 20:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-10 23:34 - 2011-12-19 21:39 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-10 23:34 - 2011-11-13 12:24 - 00000000 ____D () C:\Program Files\DIFX
2014-02-10 23:34 - 2011-09-15 07:36 - 00000000 ____D () C:\Program Files\ASUS
2014-02-10 23:34 - 2011-09-15 07:35 - 00000000 ____D () C:\Program Files\Intel
2014-02-10 23:34 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-02-10 23:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Vorlagen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Startmenü
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Netzwerkumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Lokale Einstellungen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Eigene Dateien
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Druckumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Musik
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Bilder
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Verlauf
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Anwendungsdaten
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Anwendungsdaten
2014-02-10 23:31 - 2014-02-10 23:31 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-10 23:31 - 2009-07-14 05:51 - 00000084 _____ () C:\Windows\setuperr.log
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____D () C:\Program Files\Synaptics
2014-02-10 23:29 - 2014-02-10 23:29 - 00000000 ____D () C:\ProgramData\SonicFocus
2014-02-10 23:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Program Files\Realtek
2014-02-10 23:24 - 2009-07-29 07:03 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-02-10 23:24 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-10 23:24 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-10 23:21 - 2014-02-10 23:21 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-02-10 23:00 - 2014-02-10 22:47 - 00000000 ___HD () C:\$INPLACE.~TR
2014-02-10 22:39 - 2011-09-15 07:11 - 02049309 _____ () C:\Windows\WindowsUpdate (1).log
2014-02-10 21:49 - 2014-01-27 18:25 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-02-10 21:49 - 2014-01-27 18:25 - 00001890 _____ () C:\Windows\diagerr.xml
2014-02-10 21:24 - 2014-02-10 21:24 - 00005347 _____ () C:\Users\*****\Downloads\eicfg_removal_utility.zip
2014-02-10 21:23 - 2014-02-10 21:23 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner (2)
2014-02-10 21:22 - 2014-02-10 21:22 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner
2014-02-05 20:22 - 2012-09-29 21:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 20:22 - 2012-09-29 21:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 20:22 - 2011-11-20 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 19:51 - 2014-01-27 18:27 - 00003320 _____ () C:\Users\*****\Desktop\Windows-Kompatibilitätsbericht.htm
2014-02-02 18:33 - 2014-02-02 17:31 - 00002020 _____ () C:\Users\*****\Desktop\Windows Compatibility Report.htm
2014-01-20 12:42 - 2011-09-15 07:36 - 00002638 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-01-19 18:22 - 2014-01-19 18:22 - 00001069 _____ () C:\Users\*****\Desktop\Free Download Manager.lnk
2014-01-19 18:20 - 2014-01-19 18:20 - 00614784 _____ (Chip Digital GmbH) C:\Users\*****\Desktop\Free Download Manager - CHIP-Downloader.exe
2014-01-17 19:05 - 2013-08-17 09:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-17 19:00 - 2014-01-17 19:00 - 00002068 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-17 18:58 - 2014-01-17 18:53 - 140300048 _____ () C:\Users\*****\Downloads\avira_antivirus_suite_de.exe
2014-01-15 20:27 - 2014-01-15 20:27 - 00448512 _____ (OldTimer Tools) C:\Users\*****\Desktop\TFC.exe
2014-01-14 06:45 - 2014-01-14 06:45 - 00987410 _____ () C:\Users\*****\Desktop\SecurityCheck.exe
2014-01-13 21:05 - 2014-01-13 21:04 - 02347384 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_enu.exe
2014-01-13 20:45 - 2014-01-13 20:21 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-01-13 20:44 - 2009-07-14 03:34 - 00000514 _____ () C:\Windows\win.ini
2014-01-13 20:17 - 2014-01-13 20:17 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-*****-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-01-13 20:17 - 2014-01-13 20:17 - 00000000 ____D () C:\RegBackup
2014-01-13 19:31 - 2014-01-13 19:31 - 02903255 _____ () C:\Users\*****\Desktop\tweaking.com_windows_repair_aio.zip

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-10 23:26

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 12.02.2014 18:23
Trotz der Rep Installation? Irgendwas ist da total im Ars.....

Ich würde jetzt Daten sichern und dann einmal formatieren und neu aufsetzen, wenn dann immer noch Stress ist ist es die Hardware.

drud 12.02.2014 22:14
ja trotz der rep. das war eigentlcih nicht das, was ich von dir hören wollte :( aber da kannst du ja nichts dafür ;)

die programme kann ich nicht sichern oder, nur die daten, also fotos etc.? macht ev. auch nicht sinn, die software zu sichern?

wie formatiere ich?

und wie kann ich nachher windows installieren? mit dieser ISO-dvd die ich für die reparatur gemacht habe?

DANKE! :)

hab noch das sfc/scannow gemacht über start ausführen. da findet es nichts:

Der Windows-Ressourcenschutz hat keine Integritätsverletzungen gefunden.

ich hab nun beim googeln noch gefunden, dass asus web storage daran schuld sein könnte. so wie ich gelesen habe wird eine deinstallation empfohlen. bei anderen hat das offenbar genützt. soll/darf ich das probieren?

heute ist er nicht hängen geblieben.

schrauber 13.02.2014 21:48
Daten sichern, Programme nicht.

Einfach die vollwertige WIndows Scheibe rein (sollte auch mit der ISO gehen) von der booten und formatieren :)

drud 13.02.2014 23:24
ausser die gebrannte ISO-dvd hab ich ja eben keine windows cd :-( ?
hab das asus webstorage heute abend deinstalliert. ich guck jetzt bis samstag was passiert. formatieren könnt ich eh nicht vor dem wochenende. danke :-)

schrauber 14.02.2014 17:37
ok :)

drud 15.02.2014 11:19
hey, die windwos explorer meldung kommt tatsächlich nicht mehr :)

nur habe ich jetzt ein anderes problem. es geht ein fenster auf, zum aktivieren von windows. ich gebe also erneut meinen produkte key, der unten auf meinem laoptop aufgeklebt ist, ein. aber es heisst es sei "anscheinend kein gültiger windows 7 produkte key".was soll ich nun tun? ich hab ihn richtig abgeschrieben und eingegeben.

ah, hat sich erledigt :) konnte das über diese automatische telefon hotline aktivieren lassen von windows :) ist jetzt aktiviert und in ordnung.

nun bin ich gespannt auf die nächsten schritte. weiss gar nicht ob mein pc jetzt sauber ist oder nicht.

beim aufstarten ist er noch extrem langsam.

schrauber 16.02.2014 07:12
poste mal en frisches FRST Logfile, ich schaue mal drüber :)

drud 20.02.2014 10:18
hallöchen
ich kann das log-file spätestens morgen abend machen. hab extra noch ein bisschen zugewartet zum gucken, wie es sich entwickelt. bis jetzt alles i.o. habe treiber für die FN-tasten neu runtergeladen von asus sowie für das touch-pad, funktioniert alles. auch die explorer meldung kam definitiv nicht mehr.
nur langsam ist er beim aufstarten geworden. das passt mir noch nicht.
log-file kommt also heute oder wahrscheinlicher morgen abend!
danke & gruss

schrauber 21.02.2014 09:54
ok :)

drud 22.02.2014 17:38
das frst-log ist im anhang. war zu gross.

danke :)

schrauber 23.02.2014 15:21
Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.


So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

drud 23.02.2014 15:22
es kam eben die meldung es sei zu lang und ich müsse ein zip machen? hm... also ich versuchs mit unterteilen.

schrauber 23.02.2014 15:23
ok :)

drud 23.02.2014 15:24
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01
Ran by ***** (administrator) on TANJA-PC on 22-02-2014 17:32:09
Running from C:\Users\*****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(ASUS) C:\Windows\AsScrPro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Splashtop Inc.) C:\ASUS.SYS\SIONExportService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [99128 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\TrayServer.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064 2012-09-14] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [178848 2012-07-17] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4073853582-3472843793-526417432-1001\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-06] (Secure Banking)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {FAD6394E-D719-45AD-8C59-99A8E90A359C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default
FF Homepage: hxxp://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-23]
FF Extension: WOT - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-28]
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\mpazrgl1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-06]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT

==================== Services (Whitelisted) =================

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [249856 2011-02-15] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Splashtop MDES; C:\ASUS.SYS\SIONExportService.exe [338208 2011-05-10] (Splashtop Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-11-14] (NVIDIA Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()

==================== NetSvcs (Whitelisted) ===================
Code:

==================== One Month Created Files and Folders ========

2014-02-16 13:54 - 2014-02-16 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-02-16 13:53 - 2014-02-16 13:55 - 00008102 _____ () C:\Windows\DPINST.LOG
2014-02-16 13:53 - 2014-02-16 13:53 - 00001410 _____ () C:\Windows\Synaptics.log
2014-02-16 11:59 - 2014-02-16 11:59 - 00002978 _____ () C:\Windows\System32\Tasks\ATKOSD2
2014-02-15 19:48 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 19:48 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-15 19:47 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-15 19:47 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-15 19:47 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-15 19:47 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-15 19:47 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-15 19:47 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-15 19:47 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-15 19:47 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-15 19:47 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-15 19:47 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-15 19:47 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-15 19:47 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-15 19:47 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-15 19:47 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-15 19:47 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-15 19:47 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-15 19:47 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-15 19:47 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-15 19:47 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-15 19:47 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-15 19:47 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-15 19:47 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-15 19:47 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-15 19:47 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-15 19:47 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-15 19:47 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-15 19:47 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-15 19:47 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-15 19:47 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-15 19:47 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-15 19:47 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-15 19:47 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-15 19:47 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-15 19:47 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-15 19:47 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-15 19:47 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-15 19:47 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-15 19:47 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-15 19:47 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-15 19:46 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-15 19:46 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-15 19:45 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-15 19:45 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-15 19:45 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-15 19:45 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-15 19:45 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-15 19:45 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-15 19:44 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-02-15 19:44 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-02-15 19:23 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-15 19:23 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-15 19:23 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-15 19:23 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-15 19:23 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-15 19:23 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-15 19:23 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-15 19:23 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-15 19:23 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-15 19:23 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-15 19:23 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-15 19:23 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-15 19:23 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-15 19:23 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-15 19:23 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-15 19:23 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-15 19:15 - 2014-02-15 19:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-15 19:15 - 2014-02-15 19:15 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-15 19:15 - 2014-02-15 19:15 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-15 19:15 - 2014-02-15 19:15 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-15 19:15 - 2014-02-15 19:15 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-15 19:15 - 2014-02-15 19:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-15 19:13 - 2014-02-15 19:23 - 00011001 _____ () C:\Windows\IE11_main.log
2014-02-15 19:12 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-15 19:12 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-15 19:12 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-02-15 19:12 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-15 19:12 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-02-15 19:12 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-15 19:12 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-15 19:04 - 2014-02-15 19:11 - 00010174 _____ () C:\Windows\IE10_main.log
2014-02-15 19:02 - 2013-01-13 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-15 19:02 - 2013-01-13 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-15 19:02 - 2013-01-13 20:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-15 19:02 - 2013-01-13 20:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-15 19:02 - 2013-01-04 07:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-15 19:02 - 2013-01-04 07:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-15 19:01 - 2013-01-13 22:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-15 19:01 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-15 19:01 - 2013-01-13 21:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-15 19:01 - 2013-01-13 21:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-15 19:01 - 2013-01-13 21:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-15 19:01 - 2013-01-13 20:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-15 19:01 - 2013-01-13 20:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-15 19:01 - 2013-01-13 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-15 19:01 - 2013-01-13 20:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-15 19:01 - 2013-01-13 20:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-15 19:01 - 2013-01-13 20:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-15 19:01 - 2013-01-13 20:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-15 19:01 - 2013-01-13 20:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-15 19:01 - 2013-01-13 20:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-15 19:01 - 2013-01-13 20:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-15 19:01 - 2013-01-13 20:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-15 19:01 - 2013-01-13 20:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-15 19:01 - 2013-01-13 20:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-15 19:01 - 2013-01-13 19:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-15 19:01 - 2013-01-13 19:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-15 19:01 - 2013-01-13 18:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-15 19:01 - 2013-01-13 18:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-15 19:00 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-15 19:00 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-15 19:00 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-15 19:00 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-15 12:22 - 2012-07-06 21:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-02-15 12:22 - 2011-04-28 04:54 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-02-15 12:22 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-02-15 12:22 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-02-15 12:21 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-02-15 12:21 - 2011-03-11 07:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-02-15 12:21 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-02-15 12:21 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-02-15 12:21 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-02-15 12:21 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-02-15 12:21 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-02-15 12:21 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-02-15 12:21 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-02-15 12:21 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-02-15 12:21 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-02-15 12:20 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-02-15 12:20 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-02-15 11:18 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-15 11:18 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-15 11:18 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-02-15 11:18 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-02-15 11:14 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-15 11:01 - 2014-02-15 11:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 10:41 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-02-15 10:38 - 2014-02-15 10:41 - 00004135 _____ () C:\Windows\IE9_main.log
2014-02-15 10:29 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-15 10:29 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-15 10:29 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-15 10:29 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-15 10:29 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-15 10:29 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-15 10:29 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-15 10:29 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-15 10:21 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-15 10:21 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-15 10:21 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-15 10:21 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-15 10:21 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-15 10:21 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-15 10:21 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-15 10:21 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-15 10:21 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-15 10:21 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-15 10:21 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-15 10:21 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-15 10:21 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-15 10:21 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-15 10:21 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-15 10:21 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-15 10:21 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-15 10:21 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-15 10:21 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-15 10:21 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-15 10:21 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-15 10:21 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-15 10:21 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-15 10:21 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-15 10:21 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-02-15 10:21 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-02-15 10:21 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-02-15 10:21 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-02-15 10:21 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-02-15 10:21 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-02-15 10:21 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-02-15 10:21 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-02-15 10:21 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-02-15 10:20 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-15 10:20 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-02-15 10:20 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-15 10:20 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-15 10:20 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-15 10:20 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-02-15 10:20 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-15 10:20 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-02-15 10:20 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-02-15 10:20 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-02-15 10:20 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-02-15 10:20 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-02-15 10:20 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-02-15 10:20 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-02-15 10:20 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-02-15 10:20 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-02-15 10:20 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-02-15 10:20 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-15 10:20 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-02-15 10:20 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-02-15 10:20 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-02-15 10:20 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-02-15 10:20 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-02-15 10:20 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-02-15 10:20 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-02-15 10:19 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-15 10:19 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-15 10:19 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-02-15 10:19 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-02-15 10:19 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-02-15 10:19 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-02-15 10:19 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-02-15 10:19 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-02-15 10:19 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-02-15 10:19 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-02-15 10:19 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-02-15 10:19 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-02-15 10:19 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-02-15 10:19 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-02-15 10:19 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-02-15 10:18 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-15 10:18 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-02-15 10:18 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-02-15 10:17 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-02-15 10:17 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-02-15 10:17 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-02-15 10:17 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-02-15 10:17 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-02-15 10:17 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-02-15 10:17 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-02-15 10:17 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-02-15 10:17 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-02-15 10:17 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-02-15 10:17 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-02-15 10:17 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-02-15 10:17 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-02-15 10:17 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-02-15 10:17 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-02-15 10:17 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-15 10:17 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-15 10:17 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-15 10:17 - 2012-11-28 23:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-15 10:17 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-02-15 10:17 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-02-15 10:17 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-02-15 10:17 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-02-15 10:17 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-02-15 10:17 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-02-15 10:17 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-02-15 10:17 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-02-15 10:17 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-02-15 10:17 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-02-15 10:17 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-02-15 10:17 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-02-15 10:17 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-02-15 10:17 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-02-15 10:17 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-02-15 10:17 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-02-15 10:17 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-02-15 10:17 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-02-15 10:17 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-02-15 10:17 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-02-15 10:17 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-02-15 10:17 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-02-15 10:17 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-02-15 10:17 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-02-15 10:17 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-02-15 10:17 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-02-15 10:17 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-02-15 10:17 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-02-15 10:17 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-02-15 10:17 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-02-15 10:17 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-02-15 10:17 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-02-15 10:17 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-02-15 10:17 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-02-15 10:17 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-02-15 10:17 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-02-15 10:17 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-02-15 10:16 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-02-15 10:16 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-02-15 10:15 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-15 10:15 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-15 10:15 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-15 10:15 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-15 10:15 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-15 10:15 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-15 10:15 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-15 10:15 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-15 10:15 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-02-15 10:15 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-02-15 10:15 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-02-15 10:15 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-02-15 10:15 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-15 10:15 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-15 10:15 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-15 10:15 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-15 10:15 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-15 10:15 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-15 10:15 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-02-15 10:15 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-02-15 10:15 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-02-15 10:15 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-02-15 10:15 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-02-15 10:14 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-02-15 10:14 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-02-15 10:14 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-02-15 10:14 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-15 10:14 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-02-15 10:14 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-15 10:14 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-02-15 10:14 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-02-15 10:14 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-02-15 10:14 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-15 10:14 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-02-15 10:14 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-02-15 10:14 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-02-15 10:14 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-02-15 10:14 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-02-15 10:14 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-02-15 10:14 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-02-15 10:14 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-02-15 10:14 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-02-15 10:14 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-02-15 10:14 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-02-15 10:13 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-15 10:13 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-15 10:13 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-15 10:13 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-15 10:13 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-15 10:13 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-15 10:13 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-15 10:13 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-15 10:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-15 10:13 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-15 10:13 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-02-15 10:13 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-02-15 10:13 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-02-15 10:13 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-02-15 10:13 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-02-15 10:13 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-02-15 10:13 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-02-15 10:13 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-02-15 10:13 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-02-15 10:13 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-02-15 10:13 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-02-15 10:13 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-02-15 10:13 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-02-15 10:13 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-02-15 10:13 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-02-15 10:13 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-02-15 10:13 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-02-15 10:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-02-15 10:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-15 10:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-02-15 10:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-02-15 10:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-15 10:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-02-15 10:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-02-15 10:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-02-15 10:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-15 10:12 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-15 10:12 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-02-15 10:12 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-02-15 10:12 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-02-15 10:12 - 2012-04-26 06:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-02-15 10:12 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-02-15 10:12 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-02-15 10:12 - 2011-04-22 23:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-02-15 10:12 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-02-15 10:12 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-02-15 10:12 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-02-15 10:12 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-02-15 10:12 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-02-15 10:11 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-15 10:11 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-15 10:11 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-02-15 10:11 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-02-15 10:11 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-02-15 10:11 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-02-15 10:11 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-02-15 10:11 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-02-15 10:11 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-02-15 10:11 - 2012-04-28 04:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-15 10:11 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-02-15 10:11 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-02-15 10:11 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-02-15 10:11 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-02-15 10:09 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-02-14 20:43 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-02-14 20:43 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-02-14 20:43 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-02-14 20:43 - 2012-08-11 01:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-02-14 20:43 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-02-14 20:43 - 2012-04-07 13:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-02-14 20:43 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-02-14 20:41 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-02-14 20:41 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-02-14 20:33 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-14 20:33 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-02-14 20:33 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-02-14 20:33 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-02-14 20:33 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-02-14 20:33 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-02-14 20:33 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-02-14 20:33 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-02-14 20:33 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-02-14 20:33 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-02-14 20:33 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-02-14 20:33 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-02-14 20:33 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-02-14 20:33 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-02-14 20:31 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-02-14 20:31 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-02-14 20:31 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-02-14 20:31 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-02-14 20:30 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-02-14 20:30 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-02-14 20:30 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-02-14 20:29 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-02-14 20:29 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-02-14 20:29 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-02-14 20:29 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-02-14 20:29 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-02-14 20:28 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-14 20:28 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-14 20:27 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-02-13 23:47 - 2014-02-13 23:47 - 00000000 ____D () C:\Windows\pss
2014-02-13 23:43 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-02-13 23:43 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-02-13 23:43 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-02-13 23:43 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-02-13 23:43 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-02-13 23:42 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-02-13 23:42 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-02-13 23:42 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-02-13 23:42 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-02-13 23:42 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-02-13 23:41 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-02-13 23:41 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-02-13 23:41 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-02-13 23:40 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-02-13 23:40 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-02-13 23:40 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-02-13 23:40 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-02-13 23:40 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-02-13 23:40 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-02-13 23:39 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-13 23:39 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-13 23:39 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-02-13 23:39 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-02-13 23:39 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-13 23:39 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-13 23:39 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-02-13 23:39 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-02-13 23:38 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-02-13 23:37 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-02-13 23:37 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-02-13 23:37 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-02-13 23:37 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-02-13 23:37 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-02-13 23:36 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-13 23:36 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-02-13 23:36 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-02-13 23:36 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-02-13 23:36 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-02-13 23:35 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-02-13 23:35 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-02-11 20:57 - 2014-02-18 20:30 - 00183920 _____ () C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-11 07:09 - 2014-02-15 10:43 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-11 07:02 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-11 07:02 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-11 07:02 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-11 07:02 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-02-11 07:02 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-02-11 07:02 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-11 07:01 - 2014-02-15 19:35 - 00001411 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-11 07:00 - 2014-02-11 07:00 - 00000020 ___SH () C:\Users\*****\ntuser.ini
2014-02-11 07:00 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-02-11 07:00 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-11 01:13 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-11 01:13 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-11 01:13 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-11 01:07 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-11 01:07 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-11 01:07 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-11 01:07 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-11 01:07 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-11 01:07 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-11 01:07 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-11 01:07 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-11 01:07 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-11 00:37 - 2014-02-11 00:37 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-02-10 23:32 - 2014-02-11 07:00 - 00000000 ____D () C:\Users\*****
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Vorlagen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Startmenü
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Netzwerkumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Lokale Einstellungen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Eigene Dateien
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Druckumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Musik
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Bilder
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Verlauf
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Anwendungsdaten
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Anwendungsdaten
2014-02-10 23:32 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-10 23:32 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-10 23:31 - 2014-02-10 23:31 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____D () C:\Program Files\Synaptics
2014-02-10 23:29 - 2014-02-21 22:09 - 01471039 _____ () C:\Windows\WindowsUpdate.log
2014-02-10 23:29 - 2014-02-11 00:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-10 23:29 - 2014-02-10 23:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-10 23:29 - 2014-02-10 23:35 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-10 23:29 - 2014-02-10 23:29 - 00000000 ____D () C:\ProgramData\SonicFocus
2014-02-10 23:29 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-10 23:29 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 03467927 _____ () C:\Windows\system32\nvcoproc.bin
2014-02-10 23:29 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 01065248 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-10 23:29 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-02-10 23:29 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Program Files\Realtek
2014-02-10 23:24 - 2014-02-11 06:59 - 00000000 ____D () C:\Windows\Panther
2014-02-10 23:21 - 2014-02-10 23:21 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-02-10 23:07 - 2014-02-11 00:39 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-02-10 22:47 - 2014-02-10 23:00 - 00000000 ___HD () C:\$INPLACE.~TR
2014-02-10 22:04 - 2014-02-11 00:39 - 00006165 _____ () C:\Windows\comsetup.log
2014-02-10 21:24 - 2014-02-11 00:28 - 00000000 ____D () C:\Users\*****\Downloads\eicfg_removal_utility
2014-02-10 21:24 - 2014-02-10 21:24 - 00005347 _____ () C:\Users\*****\Downloads\eicfg_removal_utility.zip
2014-02-10 21:23 - 2014-02-11 00:28 - 00000000 ____D () C:\Users\*****\Documents\Iso alt
2014-02-10 21:23 - 2014-02-10 21:23 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner (2)
2014-02-10 21:22 - 2014-02-10 21:22 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner
2014-02-10 21:13 - 2014-02-11 00:27 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-02-02 17:31 - 2014-02-02 18:33 - 00002020 _____ () C:\Users\*****\Desktop\Windows Compatibility Report.htm
2014-01-27 18:27 - 2014-02-05 19:51 - 00003320 _____ () C:\Users\*****\Desktop\Windows-Kompatibilitätsbericht.htm
2014-01-27 18:25 - 2014-02-10 21:49 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-01-27 18:25 - 2014-02-10 21:49 - 00001890 _____ () C:\Windows\diagerr.xml

drud 23.02.2014 15:25
Code:
==================== One Month Modified Files and Folders =======

2014-02-22 17:32 - 2014-02-10 23:29 - 01471039 _____ () C:\Windows\WindowsUpdate.log
2014-02-22 17:32 - 2014-01-07 22:03 - 00000000 ____D () C:\Users\*****\Desktop\FRST-OlderVersion
2014-02-22 17:32 - 2014-01-04 09:34 - 00016960 _____ () C:\Users\*****\Desktop\FRST.txt
2014-02-22 17:32 - 2014-01-04 09:34 - 00000000 ____D () C:\FRST
2014-02-22 17:32 - 2014-01-04 09:29 - 02154496 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-02-22 17:26 - 2011-09-15 07:37 - 00000012 ____H () C:\dvmexp.idx
2014-02-22 17:25 - 2011-09-15 07:23 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-22 17:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-22 17:25 - 2009-07-14 05:51 - 00866615 _____ () C:\Windows\setupact.log
2014-02-21 21:23 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-21 21:23 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-21 21:22 - 2012-09-29 21:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-20 21:22 - 2012-09-29 21:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-20 21:22 - 2012-09-29 21:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-20 21:22 - 2011-11-20 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-18 20:30 - 2014-02-11 20:57 - 00183920 _____ () C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-16 13:55 - 2014-02-16 13:53 - 00008102 _____ () C:\Windows\DPINST.LOG
2014-02-16 13:54 - 2014-02-16 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-02-16 13:53 - 2014-02-16 13:53 - 00001410 _____ () C:\Windows\Synaptics.log
2014-02-16 11:59 - 2014-02-16 11:59 - 00002978 _____ () C:\Windows\System32\Tasks\ATKOSD2
2014-02-16 11:59 - 2011-04-13 03:47 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-02-15 20:02 - 2010-11-21 07:50 - 00699342 _____ () C:\Windows\system32\perfh007.dat
2014-02-15 20:02 - 2010-11-21 07:50 - 00149450 _____ () C:\Windows\system32\perfc007.dat
2014-02-15 20:02 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-15 19:35 - 2014-02-11 07:01 - 00001411 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-15 19:35 - 2014-01-05 17:20 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-02-15 19:35 - 2014-01-05 17:20 - 00000000 ____D () C:\Windows\system32\NV
2014-02-15 19:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-15 19:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-15 19:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-15 19:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-15 19:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-15 19:23 - 2014-02-15 19:13 - 00011001 _____ () C:\Windows\IE11_main.log
2014-02-15 19:15 - 2014-02-15 19:15 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-15 19:15 - 2014-02-15 19:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-15 19:15 - 2014-02-15 19:15 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-15 19:15 - 2014-02-15 19:15 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-15 19:15 - 2014-02-15 19:15 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-15 19:15 - 2014-02-15 19:15 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-15 19:15 - 2014-02-15 19:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-15 19:15 - 2014-02-15 19:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-15 19:15 - 2014-02-15 19:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-15 19:11 - 2014-02-15 19:04 - 00010174 _____ () C:\Windows\IE10_main.log
2014-02-15 18:49 - 2012-12-05 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 12:14 - 2011-11-11 10:24 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-15 12:14 - 2011-11-11 10:24 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-15 12:05 - 2010-11-21 04:47 - 00017058 _____ () C:\Windows\PFRO.log
2014-02-15 12:05 - 2009-07-14 05:45 - 00585008 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-15 11:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-15 11:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-02-15 11:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-15 11:42 - 2010-11-21 08:00 - 00000000 ____D () C:\Program Files\Windows Journal
2014-02-15 11:20 - 2011-12-25 20:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-15 11:16 - 2013-08-17 09:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-15 11:01 - 2014-02-15 11:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 10:43 - 2014-02-11 07:09 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-15 10:41 - 2014-02-15 10:38 - 00004135 _____ () C:\Windows\IE9_main.log
2014-02-15 10:31 - 2009-07-14 03:34 - 00000514 _____ () C:\Windows\win.ini
2014-02-13 23:47 - 2014-02-13 23:47 - 00000000 ____D () C:\Windows\pss
2014-02-13 23:27 - 2011-12-26 13:15 - 00000000 ____D () C:\Users\*****\Documents\Outlook-Dateien
2014-02-13 23:26 - 2011-11-11 10:23 - 00000000 ___HD () C:\ASUS.DAT
2014-02-11 20:58 - 2011-11-11 10:23 - 00000000 ____D () C:\Users\*****\AppData\Local\VirtualStore
2014-02-11 07:05 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-11 07:00 - 2014-02-11 07:00 - 00000020 ___SH () C:\Users\*****\ntuser.ini
2014-02-11 07:00 - 2014-02-10 23:32 - 00000000 ____D () C:\Users\*****
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Programme
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-11 06:59 - 2014-02-11 06:59 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-11 06:59 - 2014-02-10 23:24 - 00000000 ____D () C:\Windows\Panther
2014-02-11 06:59 - 2009-07-29 06:10 - 00000000 ____D () C:\Recovery
2014-02-11 06:59 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-11 06:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-02-11 06:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-11 06:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-11 01:07 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-11 00:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Registration
2014-02-11 00:39 - 2014-02-10 23:07 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-02-11 00:39 - 2014-02-10 22:04 - 00006165 _____ () C:\Windows\comsetup.log
2014-02-11 00:37 - 2014-02-11 00:37 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-02-11 00:36 - 2012-11-27 07:19 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-02-11 00:36 - 2011-12-25 20:04 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\ifolor
2014-02-11 00:30 - 2014-02-11 00:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-02-11 00:30 - 2009-07-14 05:46 - 00005157 _____ () C:\Windows\DtcInstall.log
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 00:30 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 00:28 - 2014-02-10 21:24 - 00000000 ____D () C:\Users\*****\Downloads\eicfg_removal_utility
2014-02-11 00:28 - 2014-02-10 21:23 - 00000000 ____D () C:\Users\*****\Documents\Iso alt
2014-02-11 00:28 - 2013-08-03 14:45 - 00000000 ____D () C:\Users\*****\Documents\MAGIX Speed
2014-02-11 00:28 - 2013-01-26 23:58 - 00000000 ____D () C:\Users\*****\Documents\MAGIX_Video_deluxe_17_Plus_Sonderedition
2014-02-11 00:28 - 2012-08-31 20:11 - 00000000 ____D () C:\Users\*****\Documents\My Digital Editions
2014-02-11 00:28 - 2011-11-24 21:07 - 00000000 ____D () C:\Users\*****\Documents\ifolor Designer Dateien
2014-02-11 00:28 - 2011-11-12 08:05 - 00000000 ___RD () C:\Users\*****\Documents\MAGIX
2014-02-11 00:27 - 2014-02-10 21:13 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-02-11 00:27 - 2014-01-13 19:32 - 00000000 ____D () C:\Users\*****\Desktop\tweaking.com_windows_repair_aio
2014-02-11 00:27 - 2013-05-24 19:32 - 00000000 ____D () C:\Users\*****\Desktop\Sprachen
2014-02-11 00:27 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Phase6
2014-02-11 00:27 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\phase-6
2014-02-11 00:27 - 2013-01-08 19:38 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\digital publishing
2014-02-11 00:27 - 2012-12-05 19:49 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Opera
2014-02-11 00:27 - 2012-10-05 18:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Mozilla
2014-02-11 00:27 - 2012-09-23 16:54 - 00000000 ____D () C:\Users\*****\Desktop\Ricardo Bilder
2014-02-11 00:27 - 2012-04-06 10:39 - 00000000 ____D () C:\Users\*****\AppData\Roaming\XMedia Recode
2014-02-11 00:27 - 2012-03-23 22:01 - 00000000 ____D () C:\Users\*****\Documents\ifolor
2014-02-11 00:27 - 2012-01-14 18:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Sync App Settings
2014-02-11 00:27 - 2011-12-26 18:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-11 00:27 - 2011-11-27 17:09 - 00000000 ____D () C:\Users\*****\Documents\CyberLink
2014-02-11 00:27 - 2011-11-24 20:23 - 00000000 ____D () C:\Users\*****\AppData\Roaming\TuneUp Software
2014-02-11 00:27 - 2011-11-23 20:05 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Skype
2014-02-11 00:27 - 2011-11-13 20:19 - 00000000 ____D () C:\Users\*****\AppData\Roaming\OpenOffice.org
2014-02-11 00:27 - 2011-11-11 10:25 - 00000000 ____D () C:\Users\*****\Documents\Bluetooth Folder
2014-02-11 00:27 - 2011-11-11 10:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:27 - 2011-11-11 10:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:26 - 2014-01-19 18:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Free Download Manager
2014-02-11 00:26 - 2014-01-17 19:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Avira
2014-02-11 00:26 - 2014-01-05 17:32 - 00000000 ____D () C:\Users\*****\AppData\Local\NVIDIA Corporation
2014-02-11 00:26 - 2014-01-05 17:30 - 00000000 ____D () C:\Users\*****\AppData\Local\NVIDIA
2014-02-11 00:26 - 2014-01-03 18:44 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Google
2014-02-11 00:26 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\AppData\Local\phase-6
2014-02-11 00:26 - 2013-01-11 19:25 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Langenscheidt
2014-02-11 00:26 - 2013-01-11 19:15 - 00000000 ____D () C:\Users\*****\AppData\Roaming\lingDIALOG
2014-02-11 00:26 - 2013-01-11 18:30 - 00000000 ____D () C:\Users\*****\AppData\Roaming\conkeror.mozdev.org
2014-02-11 00:26 - 2012-12-05 19:49 - 00000000 ____D () C:\Users\*****\AppData\Local\Opera
2014-02-11 00:26 - 2012-11-26 19:34 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Malwarebytes
2014-02-11 00:26 - 2012-08-27 19:16 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Garmin
2014-02-11 00:26 - 2012-08-14 17:47 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ACD Systems
2014-02-11 00:26 - 2012-07-29 13:01 - 00000000 ____D () C:\Users\*****\AppData\Local\Mozilla
2014-02-11 00:26 - 2012-04-21 09:30 - 00000000 ____D () C:\Users\*****\AppData\Roaming\FileZilla
2014-02-11 00:26 - 2012-04-06 10:49 - 00000000 ____D () C:\Users\*****\AppData\Roaming\DVDVideoSoft
2014-02-11 00:26 - 2012-01-19 21:42 - 00000000 ____D () C:\Users\*****\AppData\Local\Windows Live Writer
2014-02-11 00:26 - 2011-12-19 21:42 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Apple Computer
2014-02-11 00:26 - 2011-11-26 10:49 - 00000000 ____D () C:\Users\*****\AppData\Local\mquadr.at
2014-02-11 00:26 - 2011-11-24 20:54 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ifolor
2014-02-11 00:26 - 2011-11-13 12:50 - 00000000 ____D () C:\Users\*****\AppData\Roaming\CyberLink
2014-02-11 00:26 - 2011-11-13 12:25 - 00000000 ____D () C:\Users\*****\AppData\Local\OLYMPUS
2014-02-11 00:26 - 2011-11-12 08:04 - 00000000 ____D () C:\Users\*****\AppData\Roaming\MAGIX
2014-02-11 00:26 - 2011-11-12 08:04 - 00000000 ____D () C:\Users\*****\AppData\Local\Xara
2014-02-11 00:26 - 2011-11-11 19:43 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ASUS WebStorage
2014-02-11 00:26 - 2011-11-11 19:36 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Macromedia
2014-02-11 00:26 - 2011-11-11 19:28 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Adobe
2014-02-11 00:26 - 2011-11-11 19:16 - 00000000 ____D () C:\Users\*****\AppData\Local\Power2Go
2014-02-11 00:26 - 2011-11-11 12:33 - 00000000 ____D () C:\Users\*****\AppData\Roaming\FLEXnet
2014-02-11 00:21 - 2012-09-29 21:34 - 00000000 ____D () C:\Users\*****\AppData\Local\Macromedia
2014-02-11 00:21 - 2011-12-25 20:01 - 00000000 ____D () C:\Users\*****\AppData\Local\Microsoft Help
2014-02-11 00:21 - 2011-11-26 10:41 - 00000000 ____D () C:\Users\*****\AppData\Local\IM
2014-02-11 00:21 - 2011-11-12 08:22 - 00000000 ____D () C:\Users\*****\AppData\Local\MAGIX_AG
2014-02-11 00:21 - 2011-11-12 08:04 - 00000000 ____D () C:\Users\*****\AppData\Local\MAGIX
2014-02-11 00:21 - 2011-11-11 12:39 - 00000000 ____D () C:\Users\*****\AppData\Local\Microsoft Games
2014-02-11 00:20 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\.swt
2014-02-11 00:20 - 2013-05-14 13:59 - 00000000 ____D () C:\Users\*****\.phase-6
2014-02-11 00:20 - 2013-01-11 19:15 - 00000000 ____D () C:\Users\*****\.pknowledge
2014-02-11 00:20 - 2013-01-11 18:30 - 00000000 ____D () C:\Users\*****\AppData\Local\conkeror.mozdev.org
2014-02-11 00:20 - 2013-01-08 19:42 - 00000000 ____D () C:\Users\*****\AppData\Local\digital publishing
2014-02-11 00:20 - 2012-08-14 17:47 - 00000000 ____D () C:\Users\*****\AppData\Local\ACD Systems
2014-02-11 00:20 - 2012-08-14 17:44 - 00000000 ____D () C:\Users\*****\AppData\Local\Downloaded Installations
2014-02-11 00:20 - 2012-04-20 18:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Fujifilm
2014-02-11 00:20 - 2011-12-20 22:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Cyberlink
2014-02-11 00:20 - 2011-12-19 21:42 - 00000000 ____D () C:\Users\*****\AppData\Local\Apple Computer
2014-02-11 00:20 - 2011-12-19 21:39 - 00000000 ____D () C:\Users\*****\AppData\Local\Apple
2014-02-11 00:20 - 2011-11-20 13:19 - 00000000 ____D () C:\Users\*****\AppData\Local\BMExplorer
2014-02-11 00:20 - 2011-11-13 20:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Adobe
2014-02-11 00:20 - 2011-11-11 20:57 - 00000000 ____D () C:\Users\*****\AppData\Local\CrashDumps
2014-02-11 00:20 - 2011-11-11 19:25 - 00000000 ____D () C:\Users\*****\AppData\Local\Google
2014-02-11 00:20 - 2011-11-11 10:23 - 00000000 ____D () C:\Users\*****\AppData\Local\ASUS
2014-02-11 00:03 - 2012-12-12 14:47 - 00000000 __SHD () C:\Windows\SysWOW64\%APPDATA%
2014-02-11 00:03 - 2011-04-13 03:47 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-11 00:03 - 2011-02-18 21:08 - 00000000 ____D () C:\Windows\system32\SPReview
2014-02-11 00:03 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-02-11 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-11 00:02 - 2013-03-13 21:59 - 00000000 __SHD () C:\Windows\system32\%APPDATA%
2014-02-11 00:02 - 2012-02-17 20:10 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-11 00:02 - 2011-09-15 07:46 - 00000000 ____D () C:\Windows\system32\AsMakeLink
2014-02-11 00:02 - 2011-04-13 03:44 - 00000000 ____D () C:\Windows\ru
2014-02-11 00:02 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\nl
2014-02-11 00:02 - 2011-02-18 20:48 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-02-11 00:02 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\ShellNew
2014-02-11 00:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-02-11 00:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-11 00:01 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\it
2014-02-11 00:01 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\he
2014-02-11 00:01 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\fr
2014-02-11 00:01 - 2009-07-29 06:20 - 00000000 ____D () C:\Windows\Log
2014-02-11 00:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2014-02-11 00:00 - 2014-02-10 23:29 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-11 00:00 - 2014-01-03 20:49 - 00000000 ____D () C:\Windows\ERUNT
2014-02-11 00:00 - 2013-12-25 12:38 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-02-11 00:00 - 2013-07-07 20:44 - 00000000 ____D () C:\ProgramData\Magix Shared
2014-02-11 00:00 - 2013-05-14 13:59 - 00000000 ____D () C:\ProgramData\Phase6
2014-02-11 00:00 - 2013-02-19 19:34 - 00000000 ____D () C:\ProgramData\tmp
2014-02-11 00:00 - 2012-12-02 17:21 - 00000000 ____D () C:\Windows\erdnt
2014-02-11 00:00 - 2012-12-02 16:42 - 00000000 ____D () C:\Users\mõder
2014-02-11 00:00 - 2012-11-27 07:19 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-11 00:00 - 2012-11-26 19:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-11 00:00 - 2012-07-29 13:01 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-11 00:00 - 2012-03-20 21:51 - 00000000 __HDC () C:\ProgramData\{D3257C41-1D3A-407B-A943-682D251F5FD2}
2014-02-11 00:00 - 2012-02-18 18:40 - 00000000 ____D () C:\ProgramData\Photo Notifier and Animation Creator
2014-02-11 00:00 - 2012-01-14 17:55 - 00000000 ____D () C:\ProgramData\Sync App Settings
2014-02-11 00:00 - 2011-12-19 21:40 - 00000000 ____D () C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2014-02-11 00:00 - 2011-11-26 10:49 - 00000000 ____D () C:\ProgramData\mquadr.at
2014-02-11 00:00 - 2011-11-24 20:21 - 00000000 __SHD () C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2014-02-11 00:00 - 2011-11-24 20:21 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-11 00:00 - 2011-11-23 20:05 - 00000000 ____D () C:\ProgramData\Skype
2014-02-11 00:00 - 2011-11-13 20:17 - 00000000 ____D () C:\ProgramData\Sun
2014-02-11 00:00 - 2011-11-13 12:50 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-11 00:00 - 2011-11-11 20:58 - 00000000 ____D () C:\ProgramData\NETGEAR
2014-02-11 00:00 - 2011-11-11 20:57 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-02-11 00:00 - 2011-09-15 07:49 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-02-11 00:00 - 2011-09-15 07:46 - 00000000 ____D () C:\ProgramData\USBChargerPlus
2014-02-11 00:00 - 2011-09-15 07:43 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-02-11 00:00 - 2011-09-15 07:38 - 00000000 ____D () C:\Users\Public\Documents\ASUS Music Maker
2014-02-11 00:00 - 2011-09-15 07:35 - 00000000 ____D () C:\ProgramData\P4G
2014-02-11 00:00 - 2011-09-15 07:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-11 00:00 - 2011-09-15 07:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-11 00:00 - 2011-04-13 03:51 - 00000000 ____D () C:\ProgramData\Trend Micro
2014-02-11 00:00 - 2011-04-13 03:48 - 00000000 ____D () C:\ProgramData\OberonGameConsole
2014-02-11 00:00 - 2011-04-13 03:46 - 00000000 ____D () C:\Windows\en
2014-02-11 00:00 - 2011-04-13 03:44 - 00000000 ____D () C:\Windows\de
2014-02-11 00:00 - 2011-04-13 03:44 - 00000000 ____D () C:\Windows\ar
2014-02-11 00:00 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\es
2014-02-11 00:00 - 2011-04-13 03:43 - 00000000 ____D () C:\Windows\el
2014-02-11 00:00 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-02-11 00:00 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\Nuance
2014-02-11 00:00 - 2010-11-21 08:00 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-11 00:00 - 2009-07-29 06:20 - 00000000 ____D () C:\Windows\ASUS
2014-02-11 00:00 - 2009-07-29 06:20 - 00000000 ____D () C:\Windows\ABLKSR
2014-02-11 00:00 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-02-10 23:58 - 2011-09-15 07:38 - 00000000 ____D () C:\ProgramData\MAGIX
2014-02-10 23:56 - 2014-01-19 18:22 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-02-10 23:56 - 2013-02-19 19:34 - 00000000 ____D () C:\ProgramData\hps
2014-02-10 23:56 - 2013-01-11 19:25 - 00000000 ____D () C:\ProgramData\Langenscheidt
2014-02-10 23:56 - 2011-11-26 10:40 - 00000000 ____D () C:\ProgramData\IncrediMail
2014-02-10 23:56 - 2011-11-26 10:40 - 00000000 ____D () C:\ProgramData\IM
2014-02-10 23:56 - 2011-11-24 20:54 - 00000000 ____D () C:\ProgramData\ifolor
2014-02-10 23:56 - 2011-11-11 20:25 - 00000000 ____D () C:\ProgramData\Avira
2014-02-10 23:56 - 2011-11-11 10:23 - 00000000 ____D () C:\ProgramData\FolderView
2014-02-10 23:56 - 2011-09-15 07:38 - 00000000 ____D () C:\ProgramData\CyberLink
2014-02-10 23:56 - 2011-09-15 07:38 - 00000000 ____D () C:\ProgramData\ASUS Music Maker
2014-02-10 23:56 - 2011-09-15 07:30 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-10 23:56 - 2011-09-15 07:22 - 00000000 ____D () C:\ProgramData\Intel
2014-02-10 23:56 - 2011-04-13 03:49 - 00000000 ____D () C:\ProgramData\ChangeFolderView
2014-02-10 23:56 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-02-10 23:56 - 2011-04-13 03:33 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-10 23:55 - 2013-01-11 18:28 - 00000000 ____D () C:\Program Files (x86)\WEVOSYS
2014-02-10 23:55 - 2012-12-05 18:43 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-10 23:55 - 2012-12-05 18:38 - 00000000 ____D () C:\Program Files (x86)\WOT
2014-02-10 23:55 - 2012-08-14 17:46 - 00000000 ____D () C:\ProgramData\ACD Systems
2014-02-10 23:55 - 2012-02-18 10:09 - 00000000 ___HD () C:\ProgramData\.syncID
2014-02-10 23:55 - 2012-02-18 10:08 - 00000000 ___HD () C:\ProgramData\.Syncables
2014-02-10 23:55 - 2011-12-19 21:40 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-10 23:55 - 2011-12-19 21:38 - 00000000 ____D () C:\ProgramData\Apple
2014-02-10 23:55 - 2011-11-13 12:12 - 00000000 ____D () C:\Program Files (x86)\WebSite X5 v8 - Evolution
2014-02-10 23:55 - 2011-11-12 14:06 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-10 23:55 - 2011-09-15 07:28 - 00000000 ____D () C:\ProgramData\AmUStor
2014-02-10 23:55 - 2011-04-13 03:38 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-02-10 23:54 - 2014-02-10 23:29 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-10 23:54 - 2013-03-20 20:55 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-10 23:54 - 2013-01-11 19:23 - 00000000 ____D () C:\Program Files (x86)\Vokabeltrainer 6
2014-02-10 23:54 - 2013-01-11 19:08 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-02-10 23:54 - 2012-12-09 09:53 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-02-10 23:54 - 2012-12-05 19:49 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-10 23:54 - 2012-11-27 19:28 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-02-10 23:54 - 2012-11-27 07:19 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-02-10 23:54 - 2012-04-12 18:23 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-02-10 23:54 - 2012-02-18 18:40 - 00000000 ____D () C:\Program Files (x86)\Photo Notifier and Animation Creator
2014-02-10 23:54 - 2011-11-13 20:18 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3
2014-02-10 23:54 - 2011-11-11 11:18 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-02-10 23:54 - 2011-09-15 07:27 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-10 23:54 - 2011-04-13 03:49 - 00000000 ____D () C:\Program Files (x86)\syncables
2014-02-10 23:54 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Nuance
2014-02-10 23:54 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-02-10 23:52 - 2011-11-12 13:56 - 00000000 ____D () C:\Program Files (x86)\MotionStudios
2014-02-10 23:51 - 2013-02-19 19:29 - 00000000 ____D () C:\Program Files (x86)\Migros
2014-02-10 23:51 - 2012-12-04 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-02-10 23:51 - 2011-12-25 20:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-02-10 23:51 - 2011-12-25 20:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-02-10 23:51 - 2011-12-25 20:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-10 23:51 - 2011-04-13 03:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-02-10 23:51 - 2011-04-13 03:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-10 23:50 - 2012-11-26 19:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-10 23:50 - 2011-12-25 20:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-02-10 23:49 - 2011-11-12 08:02 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-02-10 23:45 - 2013-01-11 18:24 - 00000000 ____D () C:\Program Files (x86)\Langenscheidt
2014-02-10 23:41 - 2014-01-19 18:22 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-02-10 23:41 - 2013-07-21 17:31 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-02-10 23:41 - 2013-01-08 19:35 - 00000000 ____D () C:\Program Files (x86)\digital publishing
2014-02-10 23:41 - 2012-04-21 09:30 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-02-10 23:41 - 2012-04-06 10:49 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-10 23:41 - 2012-01-02 13:38 - 00000000 ____D () C:\Program Files (x86)\FreePDF_XP
2014-02-10 23:41 - 2011-11-26 10:40 - 00000000 ____D () C:\Program Files (x86)\IncrediMail
2014-02-10 23:41 - 2011-11-24 20:54 - 00000000 ____D () C:\Program Files (x86)\ifolor
2014-02-10 23:41 - 2011-11-13 20:17 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-10 23:41 - 2011-09-15 07:38 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-02-10 23:41 - 2011-09-15 07:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-10 23:41 - 2011-09-15 07:15 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-10 23:41 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-10 23:36 - 2014-01-17 19:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-10 23:36 - 2011-12-19 21:39 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-10 23:36 - 2011-09-15 07:38 - 00000000 ____D () C:\Program Files (x86)\ASUS Music Maker
2014-02-10 23:36 - 2011-09-15 07:32 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-02-10 23:36 - 2011-09-15 07:30 - 00000000 ____D () C:\Program Files (x86)\Atheros
2014-02-10 23:35 - 2014-02-10 23:29 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-10 23:35 - 2012-12-05 18:38 - 00000000 ____D () C:\Program Files\WOT
2014-02-10 23:35 - 2012-08-14 17:46 - 00000000 ____D () C:\Program Files (x86)\ACD Systems
2014-02-10 23:35 - 2012-01-14 17:54 - 00000000 ____D () C:\Program Files (x86)\Allway Sync
2014-02-10 23:35 - 2011-11-12 14:07 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-10 23:35 - 2011-09-15 07:35 - 00000000 ____D () C:\Program Files\P4G
2014-02-10 23:35 - 2011-09-15 07:28 - 00000000 ____D () C:\Program Files (x86)\ASM104xUSB3
2014-02-10 23:35 - 2011-09-15 07:28 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-02-10 23:35 - 2011-04-13 03:36 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-10 23:34 - 2014-01-03 18:47 - 00000000 ____D () C:\Program Files\Java
2014-02-10 23:34 - 2012-12-30 12:31 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-10 23:34 - 2012-12-04 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-10 23:34 - 2012-01-02 13:37 - 00000000 ____D () C:\Program Files\gs
2014-02-10 23:34 - 2011-12-25 20:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-10 23:34 - 2011-12-19 21:39 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-10 23:34 - 2011-11-13 12:24 - 00000000 ____D () C:\Program Files\DIFX
2014-02-10 23:34 - 2011-09-15 07:36 - 00000000 ____D () C:\Program Files\ASUS
2014-02-10 23:34 - 2011-09-15 07:35 - 00000000 ____D () C:\Program Files\Intel
2014-02-10 23:34 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-02-10 23:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Vorlagen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Startmenü
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Netzwerkumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Lokale Einstellungen
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Eigene Dateien
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Druckumgebung
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Musik
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Bilder
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Verlauf
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Anwendungsdaten
2014-02-10 23:32 - 2014-02-10 23:32 - 00000000 _SHDL () C:\Users\*****\Anwendungsdaten
2014-02-10 23:31 - 2014-02-10 23:31 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-10 23:31 - 2009-07-14 05:51 - 00000084 _____ () C:\Windows\setuperr.log
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-02-10 23:30 - 2014-02-10 23:30 - 00000000 ____D () C:\Program Files\Synaptics
2014-02-10 23:29 - 2014-02-10 23:29 - 00000000 ____D () C:\ProgramData\SonicFocus
2014-02-10 23:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-10 23:28 - 2014-02-10 23:28 - 00000000 ____D () C:\Program Files\Realtek
2014-02-10 23:24 - 2009-07-29 07:03 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-02-10 23:24 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-10 23:24 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-10 23:21 - 2014-02-10 23:21 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-02-10 23:00 - 2014-02-10 22:47 - 00000000 ___HD () C:\$INPLACE.~TR
2014-02-10 22:39 - 2011-09-15 07:11 - 02049309 _____ () C:\Windows\WindowsUpdate (1).log
2014-02-10 21:49 - 2014-01-27 18:25 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-02-10 21:49 - 2014-01-27 18:25 - 00001890 _____ () C:\Windows\diagerr.xml
2014-02-10 21:24 - 2014-02-10 21:24 - 00005347 _____ () C:\Users\*****\Downloads\eicfg_removal_utility.zip
2014-02-10 21:23 - 2014-02-10 21:23 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner (2)
2014-02-10 21:22 - 2014-02-10 21:22 - 00000000 ____D () C:\Users\*****\Desktop\Neuer Ordner
2014-02-06 13:16 - 2014-02-15 19:47 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-15 19:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-15 19:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-15 19:47 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-15 19:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-15 19:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-15 19:47 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-15 19:47 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-15 19:47 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-15 19:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-15 19:47 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-15 19:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-15 19:47 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-15 19:47 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-15 19:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-15 19:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-15 19:47 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-15 19:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-15 19:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-15 19:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-15 19:47 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-15 19:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-15 19:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-15 19:47 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-15 19:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-15 19:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-15 19:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-15 19:47 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-15 19:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-15 19:47 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-15 19:47 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-15 19:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-15 19:47 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-15 19:47 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-15 19:47 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-15 19:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-15 19:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-15 19:47 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-15 19:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 19:51 - 2014-01-27 18:27 - 00003320 _____ () C:\Users\*****\Desktop\Windows-Kompatibilitätsbericht.htm
2014-02-04 19:09 - 2014-02-15 11:14 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-02 18:33 - 2014-02-02 17:31 - 00002020 _____ () C:\Users\*****\Desktop\Windows Compatibility Report.htm

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-10 23:26

==================== End Of Log ============================
so ich hoffe, das ist vollständig so :)

schrauber 24.02.2014 16:37
Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

drud 24.02.2014 16:50
huuhuu

D A N K E :applaus:

also kann ich wieder online-banking nutzen damit? candy pub zeugs weg?

noch etwas: nun schon zweimal hat er mir einfach abgestellt. beide male wenn der akku schwach war. überhaupt geht der jetzt extrem schnell zugrunde. hm, ev. muss ich das neu einstellen, weil das nach dem windows upgrade nicht übernommen wurde? jedenfalls hatte ich beide male die möglichkeit, normal oder im abgesicherte modus aufzustarten. kann ich dagegen noch etwas tun, gegen dieses "einfach abstellen"?

das andere versuche ich abzuarbeiten. werde berichten, wenn ich fertig bin.

ich danke dir herzlich!!

schrauber 25.02.2014 13:05
Schau mal in die Energieoptionen, stell das mal ein dort.

drud 04.03.2014 19:12
ich bringe das mit den energieeinstellungen nciht besser hin. er frisst einfach akku. naja...

aber nun zum vorgehen.

defogger hab ich nicht drauf.
aber combofix bring ich so nicht weg. habs umbenannt in uninstall.exe. aber er will dann wieder einen systemscan machen.
wie kann ich es sonst entfernen?

schrauber 05.03.2014 16:54
Liegt Combofix auf dem Desktop? Dann sollte der /Uninstall befehl gehen, aber denk an das Leerzeichen :)

drud 05.03.2014 21:38
ja auf dem desktop. aber er startet das volle programm?! also die kästchen gehen auf und so...

er fängt dann an zu scannen.

schrauber 06.03.2014 19:43
Meine Frage mit dem Leerzeichen? ;)

wenn nit versuch mal diesen Befehl:

"%userprofile%\desktop\Combofix.exe" /Uninstall

drud 07.03.2014 18:26
das leerzeichen hatte ich bereits berücksichtigt. und wenn ich es umbenenne, startet es genau so wie vorher und will scannen.

auch mit dem neuen vorschlag geht es nicht. das wird gar nicht gefunden.

schrauber 08.03.2014 16:37
Screenshot bitte von deinem Desktop. Du wärst der erste von einer Million wo das nicht klappt :)

drud 09.03.2014 11:28
die erste :)

also im anhang eine reihe printscreens mit entsprechenden kommentaren.

schrauber 10.03.2014 12:51
Sorry :)

Umbenennen in Combofix, nicht Combofix.exe, dann obigen Befehl nochmal:

"%userprofile%\desktop\Combofix.exe" /Uninstall

drud 10.03.2014 20:14
hurraa, es hat geklappt :) DANKE :)

nun versuche ich noch den rest zu machen!

ich habe nun alles erledigt und den rest gelöscht :)

das WinPatrol, gibt es das auch auf deutsch? wenn ja, wo kann ich das herunterladen? bin dem englischen nicht so mächtig.

D A N K E VIELMALS!!!

schrauber 11.03.2014 13:21
Nee nur auf Englisch, kannste aber auch weglassen. Nit so wichtig :)


Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 03:55 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131