Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Win32:Propper-gen [Drp] (https://www.trojaner-board.de/151180-win32-propper-gen-drp.html)

Werscout 17.03.2014 21:34
Win32:Propper-gen [Drp]
 
Wünsche einen schönen abend
Avast meldtete mir grad den oben genannten Trojaner, und hat diesen in den Container geschoben. Zeitgleich hatte plötzlich in Fierefox jedemege blinkende toolbars.
Schuld war vermutlich ein nicht seriöser download des Flusch players. (genauer sagen kann ich es nicht).
Name: MegaBrowseUnistall.exe
Ort: C:\Progarmm Files (x86)\Mega Browse

Bertriebssystem Win 7 Prof 64 bit

Da ich thunderbid rumgesponnen hab (benutzer fehler^^) hatte ich schon eien systhemwieder herstellung gemacht.
So weit sogut Das systehm ist grade erst neu aufgestezt- auser auf angesteckten wechelsmedien sind noch Keien Daten auf dem rechner die wollte ich erst rüberziehen.
Programme sind schon ein parr drauf.

Kirege ich den Trojaner so wieder runter oder sollte ich einfach neu aufsetzen? Besteht dann die gefahr das ich den über googel sync wieder einschelppe?



Gruß Werscout

cosinus 17.03.2014 21:57
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Werscout 17.03.2014 22:10
Bevor ich mich an die Arbeit mache: Weiteres logs habe ich nicht.
Danke dir schonmal ich melde mich wenn ich mehr hab


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Thorsten (administrator) on THORSTEN-LAPTOP on 17-03-2014 22:02:53
Running from C:\Users\Thorsten\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-07] (Intel Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-03-15] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1337982190-155651177-3300109034-1000\...\MountPoints2: {7c92a6c7-ac25-11e3-9491-806e6f6e6963} - E:\InstAll.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default
FF DefaultSearchEngine: Mysearchdial
FF SelectedSearchEngine: Mysearchdial
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: mysearchdial.com - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\ffxtlbr@mysearchdial.com [2014-03-17]
FF Extension: Garmin Communicator - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-03-15]
FF Extension: AVG Do Not Track - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{F53C93F1-07D5-430c-86D4-C9531B27DFAF} [2014-03-15]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-03-15]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2014-03-15]
FF Extension: MySearchDial - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-03-17]
FF Extension: Adblock Plus - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-15]
FF Extension: BetterPrivacy - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-03-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-15]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-15] (AVAST Software)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-03-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-03-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-03-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-03-15] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-03-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-03-15] ()
R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [17280 2012-08-05] ( )
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104560 2012-04-25] (Qualcomm Atheros Co., Ltd.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-17 22:02 - 2014-03-17 22:03 - 00011506 _____ () C:\Users\Thorsten\Downloads\FRST.txt
2014-03-17 22:02 - 2014-03-17 22:02 - 00000000 ____D () C:\FRST
2014-03-17 22:01 - 2014-03-17 22:01 - 02157056 _____ (Farbar) C:\Users\Thorsten\Downloads\FRST64.exe
2014-03-17 19:14 - 2014-03-17 19:14 - 00000000 ____D () C:\Users\Thorsten\Documents\PC Speed Maximizer
2014-03-17 19:14 - 2014-03-17 19:14 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\PC Speed Maximizer
2014-03-17 19:09 - 2014-03-17 20:43 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-03-17 19:09 - 2014-03-17 20:43 - 00000000 ____D () C:\Program Files (x86)\Mega Browse
2014-03-17 19:09 - 2014-03-17 19:09 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\mysearchdial
2014-03-17 19:09 - 2014-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\Mysearchdial
2014-03-16 19:20 - 2014-03-16 19:20 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\vlc
2014-03-16 17:08 - 2014-03-16 20:02 - 00000000 ____D () C:\ProgramData\Avira
2014-03-16 16:07 - 2014-03-17 20:43 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-16 16:07 - 2014-03-16 16:07 - 04051048 _____ (Avira Operations GmbH & Co. KG) C:\Users\Thorsten\Downloads\avira_de_av___ws.exe
2014-03-16 16:07 - 2014-03-16 16:07 - 00000000 ___HT () C:\Windows\wusa.lock
2014-03-16 12:35 - 2014-03-17 20:43 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-03-16 12:35 - 2014-03-16 12:35 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-03-16 12:35 - 2014-03-16 12:35 - 00001780 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-03-16 12:34 - 2014-03-16 12:39 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-03-16 12:34 - 2014-03-16 12:35 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-03-16 12:32 - 2014-03-16 12:33 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Thorsten\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-03-15 19:37 - 2014-03-15 19:37 - 00000000 ____D () C:\Hotfix
2014-03-15 19:37 - 2014-03-15 11:50 - 00000000 ____D () C:\Windows\Panther
2014-03-15 19:37 - 2011-02-16 03:16 - 00000029 ___RH () C:\Windows\version
2014-03-15 19:37 - 2011-02-16 03:16 - 00000013 ____R () C:\Windows\csup.txt
2014-03-15 19:36 - 2014-03-17 20:57 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-03-15 19:36 - 2014-03-17 20:57 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-03-15 19:36 - 2014-03-15 19:35 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-03-15 19:36 - 2014-03-15 19:35 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\0407
2014-03-15 14:37 - 2014-03-15 14:38 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\ProgramData\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Program Files (x86)\MediaMonkey
2014-03-15 14:36 - 2014-03-15 14:36 - 15170864 _____ (Ventis Media Inc. ) C:\Users\Thorsten\Downloads\MediaMonkey_4.1.0.1691.exe
2014-03-15 14:36 - 2014-03-15 14:36 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-15 14:35 - 2014-03-15 14:34 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-15 14:35 - 2014-03-15 14:34 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-15 14:35 - 2014-03-15 14:34 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-15 14:35 - 2014-03-15 14:34 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-15 14:34 - 2014-03-15 14:35 - 25531584 _____ () C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe
2014-03-15 14:34 - 2014-03-15 14:34 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-15 14:34 - 2014-03-15 14:34 - 00000000 ____D () C:\Program Files\Java
2014-03-15 14:33 - 2014-03-15 14:33 - 30796712 _____ (Oracle Corporation) C:\Users\Thorsten\Downloads\jre-7u51-windows-x64.exe
2014-03-15 14:33 - 2014-03-15 14:33 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-15 14:30 - 2014-03-15 14:30 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\OpenOffice
2014-03-15 14:29 - 2014-03-15 14:29 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-15 14:28 - 2014-03-15 14:33 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-15 14:27 - 2014-03-15 14:34 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Adobe
2014-03-15 14:16 - 2014-03-15 14:16 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-15 13:36 - 2014-03-15 13:37 - 00000000 ____D () C:\Program Files\Office
2014-03-15 13:36 - 2014-03-15 13:36 - 00000000 ____D () C:\Neuer Ordner
2014-03-15 13:32 - 2014-03-15 13:35 - 163606685 _____ () C:\Users\Thorsten\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-15 13:00 - 2014-03-15 13:00 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-15 12:59 - 2014-03-15 12:59 - 21987088 _____ (Mozilla) C:\Users\Thorsten\Downloads\Thunderbird Setup 24.3.0.exe
2014-03-15 12:55 - 2014-03-15 13:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-15 12:55 - 2014-03-15 12:55 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-15 12:46 - 2014-03-17 20:52 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-15 12:46 - 2014-03-15 12:46 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\AVAST Software
2014-03-15 12:45 - 2014-03-17 20:52 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-15 12:45 - 2014-03-15 12:45 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-15 12:45 - 2014-03-15 12:45 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-15 12:45 - 2014-03-15 12:45 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-15 12:44 - 2014-03-15 12:44 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-15 12:40 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-03-15 12:40 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-03-15 12:40 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-03-15 12:40 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-03-15 12:37 - 2014-03-15 12:37 - 00003110 _____ () C:\Windows\System32\Tasks\ASUS Wireless Console 3
2014-03-15 12:37 - 2014-03-15 12:37 - 00000714 _____ () C:\Users\Public\Desktop\eManual.Lnk
2014-03-15 12:37 - 2014-03-15 12:37 - 00000000 ____D () C:\eSupport
2014-03-15 12:36 - 2014-03-17 20:43 - 00000000 ____D () C:\ProgramData\P4G
2014-03-15 12:36 - 2014-03-15 12:36 - 00003230 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-03-15 12:36 - 2014-03-15 12:36 - 00003056 _____ () C:\Windows\System32\Tasks\ASUS P4G
2014-03-15 12:36 - 2014-03-15 12:36 - 00000000 ____D () C:\Program Files\ASUS
2014-03-15 12:34 - 2014-03-15 12:34 - 00002978 _____ () C:\Windows\System32\Tasks\ATKOSD2
2014-03-15 12:34 - 2012-08-05 13:17 - 00017280 _____ ( ) C:\Windows\system32\Drivers\kbfiltr.sys
2014-03-15 12:32 - 2014-03-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation
2014-03-15 12:32 - 2012-01-15 08:37 - 00072526 _____ () C:\Windows\system32\athrextx.cat
2014-03-15 12:32 - 2012-01-10 21:38 - 02801664 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-03-15 12:32 - 2012-01-10 21:38 - 02801664 _____ (Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2014-03-15 12:31 - 2014-03-15 12:31 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-03-15 12:31 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-03-15 12:31 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-03-15 12:31 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-03-15 12:31 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-03-15 12:30 - 2014-03-15 12:30 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2014-03-15 12:30 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-03-15 12:30 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-03-15 12:30 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-03-15 12:30 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-03-15 12:30 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-03-15 12:30 - 2012-04-25 08:07 - 00104560 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Program Files\Realtek
2014-03-15 12:29 - 2013-04-10 06:59 - 00000016 ____R () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-03-15 12:29 - 2013-03-29 14:42 - 03379272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-15 12:29 - 2013-03-29 11:04 - 21170176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-15 12:29 - 2013-03-29 10:52 - 00914992 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-15 12:29 - 2013-03-29 10:10 - 00449481 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-15 12:29 - 2013-03-27 09:57 - 00135240 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-15 12:29 - 2013-03-26 10:06 - 02797128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-15 12:29 - 2013-03-26 08:40 - 03693128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-15 12:29 - 2013-03-26 07:38 - 01659464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-15 12:29 - 2013-03-25 10:32 - 03180264 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-15 12:29 - 2013-03-20 06:16 - 02102040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-15 12:29 - 2013-03-15 12:34 - 04957976 _____ (A-volute) C:\Windows\system32\RTKSMlfx.dll
2014-03-15 12:29 - 2013-03-15 12:33 - 00887640 _____ (A-Volute) C:\Windows\system32\RTKSMSettingsIPC.dll
2014-03-15 12:29 - 2013-03-12 11:16 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00823072 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00633632 _____ (SRS Labs, Inc.) C:\Windows\system32\sltech64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00517408 _____ (SRS Labs, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00213792 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-15 12:29 - 2013-02-21 10:26 - 00858032 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-03-15 12:29 - 2013-02-21 10:26 - 00148912 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-03-15 12:29 - 2013-02-21 10:25 - 00569256 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-03-15 12:29 - 2013-02-20 11:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-15 12:29 - 2013-02-19 11:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-15 12:29 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-03-15 12:29 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-03-15 12:29 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-03-15 12:29 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-03-15 12:29 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-03-15 12:29 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-03-15 12:29 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-03-15 12:29 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-03-15 12:29 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-03-15 12:29 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-03-15 12:29 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-03-15 12:28 - 2014-03-15 12:29 - 00002295 _____ () C:\RHDSetup.log
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\ProgramData\AmUStor
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-03-15 12:28 - 2013-03-26 10:04 - 02734624 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-15 12:28 - 2013-03-22 20:43 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-03-15 12:28 - 2013-03-20 06:17 - 09123608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-15 12:28 - 2013-03-20 06:16 - 01900312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-15 12:28 - 2013-03-20 06:16 - 00910104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-15 12:28 - 2013-03-08 05:51 - 00904752 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-03-15 12:28 - 2013-02-28 06:10 - 14021912 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-15 12:28 - 2013-02-28 06:10 - 02032408 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-15 12:28 - 2013-01-17 12:32 - 00719640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-15 12:28 - 2013-01-16 09:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-03-15 12:28 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-03-15 12:28 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-03-15 12:28 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-03-15 12:28 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-03-15 12:28 - 2012-09-10 13:06 - 00612728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-15 12:28 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-03-15 12:28 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-03-15 12:28 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-03-15 12:28 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-03-15 12:28 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-03-15 12:28 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-03-15 12:25 - 2014-03-15 12:37 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-03-15 12:25 - 2014-03-15 12:25 - 00004906 _____ () C:\Windows\DPINST.LOG
2014-03-15 12:25 - 2014-03-15 12:25 - 00003540 _____ () C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____D () C:\Program Files\DIFX
2014-03-15 12:25 - 2012-02-07 05:12 - 00016152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-03-15 12:24 - 2012-02-07 05:12 - 00787736 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-03-15 12:24 - 2012-02-07 05:12 - 00356120 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-03-15 12:23 - 2014-03-15 12:32 - 00000224 _____ () C:\setup.log
2014-03-15 12:23 - 2014-03-15 12:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\ProgramData\Intel
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\Program Files\Intel
2014-03-15 12:23 - 2012-07-02 15:16 - 00062784 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-03-15 12:23 - 2012-06-25 10:42 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-03-15 12:22 - 2014-03-15 12:22 - 00015830 _____ () C:\Windows\system32\results.xml
2014-03-15 12:22 - 2014-03-15 12:22 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\InstallShield
2014-03-15 12:15 - 2014-03-15 12:15 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-03-15 12:15 - 2012-02-22 08:18 - 28979200 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 23463424 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 17213440 _____ () C:\Windows\system32\ig7icd64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 14692224 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-03-15 12:15 - 2012-02-22 08:18 - 13020160 _____ () C:\Windows\SysWOW64\ig7icd32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 09605632 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 08086528 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 07794688 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 06120960 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 05886232 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 03747840 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 02967040 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 02866688 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 02321408 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 01981696 _____ () C:\Windows\system32\iglhxa64.cpa
2014-03-15 12:15 - 2012-02-22 08:18 - 00735796 _____ () C:\Windows\SysWOW64\igkrng700.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00735796 _____ () C:\Windows\system32\igkrng700.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00588800 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00561508 _____ () C:\Windows\SysWOW64\igfcg700m.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00561508 _____ () C:\Windows\system32\igfcg700m.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00524800 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00519680 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00516608 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00511768 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00440600 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00430592 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00430080 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00398616 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00386048 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00321024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00276248 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00250136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00237056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00236032 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00221099 _____ () C:\Windows\system32\Gfxres.th-TH.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00213504 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00193024 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00188416 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00177152 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00172032 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00170264 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00143155 _____ () C:\Windows\system32\Gfxres.tr-TR.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2014-03-15 12:15 - 2012-02-22 08:18 - 00124962 _____ () C:\Windows\system32\Gfxres.zh-TW.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00123467 _____ () C:\Windows\system32\Gfxres.zh-CN.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2653.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00079360 _____ () C:\Windows\system32\igdde64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00059425 _____ () C:\Windows\system32\iglhxo64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00059398 _____ () C:\Windows\system32\iglhxg64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00059230 _____ () C:\Windows\system32\iglhxc64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00059104 _____ () C:\Windows\system32\iglhxc64_dev.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00058880 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00058796 _____ () C:\Windows\system32\iglhxg64_dev.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00058109 _____ () C:\Windows\system32\iglhxo64_dev.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00052736 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00051200 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00018520 _____ () C:\Windows\system32\iglhxs64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00009216 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2014-03-15 12:15 - 2012-02-22 08:17 - 00207830 _____ () C:\Windows\system32\Gfxres.el-GR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00191775 _____ () C:\Windows\system32\Gfxres.ru-RU.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00184600 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-03-15 12:15 - 2012-02-22 08:17 - 00164334 _____ () C:\Windows\system32\Gfxres.ar-SA.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00161613 _____ () C:\Windows\system32\Gfxres.ja-JP.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00157226 _____ () C:\Windows\system32\Gfxres.he-IL.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00148033 _____ () C:\Windows\system32\Gfxres.it-IT.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00146675 _____ () C:\Windows\system32\Gfxres.ko-KR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00145687 _____ () C:\Windows\system32\Gfxres.es-ES.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00145579 _____ () C:\Windows\system32\Gfxres.de-DE.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00144338 _____ () C:\Windows\system32\Gfxres.ro-RO.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00143805 _____ () C:\Windows\system32\Gfxres.fr-FR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00142664 _____ () C:\Windows\system32\Gfxres.pt-BR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00142335 _____ () C:\Windows\system32\Gfxres.nl-NL.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00142189 _____ () C:\Windows\system32\Gfxres.hu-HU.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00141644 _____ () C:\Windows\system32\Gfxres.pt-PT.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00141435 _____ () C:\Windows\system32\Gfxres.sv-SE.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140923 _____ () C:\Windows\system32\Gfxres.pl-PL.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140885 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140549 _____ () C:\Windows\system32\Gfxres.fi-FI.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140122 _____ () C:\Windows\system32\Gfxres.sk-SK.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00139487 _____ () C:\Windows\system32\Gfxres.hr-HR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00136451 _____ () C:\Windows\system32\Gfxres.sl-SI.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00136369 _____ () C:\Windows\system32\Gfxres.nb-NO.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00135868 _____ () C:\Windows\system32\Gfxres.da-DK.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00131317 _____ () C:\Windows\system32\Gfxres.en-US.resources
2014-03-15 12:15 - 2012-02-20 03:31 - 00331264 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-03-15 12:15 - 2012-02-20 03:31 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2014-03-15 12:10 - 2014-03-15 12:24 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-15 12:10 - 2012-02-02 05:58 - 00053248 ____R (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-03-15 12:09 - 2014-03-15 12:41 - 01391948 _____ () C:\Windows\AsDebug.log
2014-03-15 12:09 - 2014-03-15 12:41 - 00417258 _____ () C:\Windows\AsCDProc.log
2014-03-15 12:09 - 2014-03-15 12:14 - 00000000 ____D () C:\Intel
2014-03-15 11:58 - 2014-03-17 21:35 - 00063568 _____ () C:\Users\Thorsten\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Easeware
2014-03-15 11:50 - 2014-03-17 20:51 - 00000000 ____D () C:\Users\Thorsten
2014-03-15 11:50 - 2014-03-17 20:43 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-15 11:50 - 2014-03-17 20:43 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-15 11:50 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\VirtualStore
2014-03-15 11:50 - 2014-03-15 11:50 - 00001439 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00001405 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00000020 ___SH () C:\Users\Thorsten\ntuser.ini
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 __SHD () C:\Recovery
2014-03-15 11:50 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-15 11:50 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-15 10:41 - 2014-03-17 21:19 - 01526951 _____ () C:\Windows\WindowsUpdate.log
2014-03-15 10:41 - 2014-03-15 10:41 - 00001355 _____ () C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

2014-03-17 22:03 - 2014-03-17 22:02 - 00011506 _____ () C:\Users\Thorsten\Downloads\FRST.txt
2014-03-17 22:02 - 2014-03-17 22:02 - 00000000 ____D () C:\FRST
2014-03-17 22:01 - 2014-03-17 22:01 - 02157056 _____ (Farbar) C:\Users\Thorsten\Downloads\FRST64.exe
2014-03-17 21:35 - 2014-03-15 11:58 - 00063568 _____ () C:\Users\Thorsten\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-17 21:19 - 2014-03-15 10:41 - 01526951 _____ () C:\Windows\WindowsUpdate.log
2014-03-17 20:57 - 2014-03-15 19:36 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-03-17 20:57 - 2014-03-15 19:36 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-03-17 20:57 - 2009-07-14 06:13 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-17 20:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-17 20:53 - 2009-07-14 05:45 - 00025008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-17 20:53 - 2009-07-14 05:45 - 00025008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-17 20:52 - 2014-03-15 12:46 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-17 20:52 - 2014-03-15 12:45 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-17 20:51 - 2014-03-15 11:50 - 00000000 ____D () C:\Users\Thorsten
2014-03-17 20:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-17 20:49 - 2009-07-14 05:51 - 00023844 _____ () C:\Windows\setupact.log
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-03-17 20:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-03-17 20:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing
2014-03-17 20:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-17 20:47 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-03-17 20:47 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-03-17 20:45 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-17 20:45 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-17 20:45 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-17 20:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-17 20:43 - 2014-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-03-17 20:43 - 2014-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\Mega Browse
2014-03-17 20:43 - 2014-03-16 16:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-17 20:43 - 2014-03-16 12:35 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-03-17 20:43 - 2014-03-15 12:36 - 00000000 ____D () C:\ProgramData\P4G
2014-03-17 20:43 - 2014-03-15 11:50 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-17 20:43 - 2014-03-15 11:50 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-17 20:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-17 19:14 - 2014-03-17 19:14 - 00000000 ____D () C:\Users\Thorsten\Documents\PC Speed Maximizer
2014-03-17 19:14 - 2014-03-17 19:14 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\PC Speed Maximizer
2014-03-17 19:09 - 2014-03-17 19:09 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\mysearchdial
2014-03-17 19:09 - 2014-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\Mysearchdial
2014-03-16 20:02 - 2014-03-16 17:08 - 00000000 ____D () C:\ProgramData\Avira
2014-03-16 19:20 - 2014-03-16 19:20 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\vlc
2014-03-16 17:05 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-03-16 17:05 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-03-16 16:07 - 2014-03-16 16:07 - 04051048 _____ (Avira Operations GmbH & Co. KG) C:\Users\Thorsten\Downloads\avira_de_av___ws.exe
2014-03-16 16:07 - 2014-03-16 16:07 - 00000000 ___HT () C:\Windows\wusa.lock
2014-03-16 14:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-03-16 12:39 - 2014-03-16 12:34 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-03-16 12:35 - 2014-03-16 12:35 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-03-16 12:35 - 2014-03-16 12:35 - 00001780 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-03-16 12:35 - 2014-03-16 12:34 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-03-16 12:35 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-03-16 12:33 - 2014-03-16 12:32 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Thorsten\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-03-15 19:37 - 2014-03-15 19:37 - 00000000 ____D () C:\Hotfix
2014-03-15 19:37 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-03-15 19:37 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-03-15 19:37 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup
2014-03-15 19:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-03-15 19:35 - 2014-03-15 19:36 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-03-15 19:35 - 2014-03-15 19:36 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\0407
2014-03-15 19:35 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-03-15 15:09 - 2009-07-14 05:45 - 00293320 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 14:38 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\ProgramData\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Program Files (x86)\MediaMonkey
2014-03-15 14:37 - 2014-03-15 11:50 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\VirtualStore
2014-03-15 14:36 - 2014-03-15 14:36 - 15170864 _____ (Ventis Media Inc. ) C:\Users\Thorsten\Downloads\MediaMonkey_4.1.0.1691.exe
2014-03-15 14:36 - 2014-03-15 14:36 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-15 14:35 - 2014-03-15 14:34 - 25531584 _____ () C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-15 14:34 - 2014-03-15 14:34 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-15 14:34 - 2014-03-15 14:34 - 00000000 ____D () C:\Program Files\Java
2014-03-15 14:34 - 2014-03-15 14:27 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Adobe
2014-03-15 14:33 - 2014-03-15 14:33 - 30796712 _____ (Oracle Corporation) C:\Users\Thorsten\Downloads\jre-7u51-windows-x64.exe
2014-03-15 14:33 - 2014-03-15 14:33 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-15 14:33 - 2014-03-15 14:28 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-15 14:30 - 2014-03-15 14:30 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\OpenOffice
2014-03-15 14:29 - 2014-03-15 14:29 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-15 14:16 - 2014-03-15 14:16 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-15 13:37 - 2014-03-15 13:36 - 00000000 ____D () C:\Program Files\Office
2014-03-15 13:36 - 2014-03-15 13:36 - 00000000 ____D () C:\Neuer Ordner
2014-03-15 13:35 - 2014-03-15 13:32 - 163606685 _____ () C:\Users\Thorsten\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-15 13:14 - 2014-03-15 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-15 13:14 - 2010-11-21 04:47 - 00004902 _____ () C:\Windows\PFRO.log
2014-03-15 13:00 - 2014-03-15 13:00 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-15 12:59 - 2014-03-15 12:59 - 21987088 _____ (Mozilla) C:\Users\Thorsten\Downloads\Thunderbird Setup 24.3.0.exe
2014-03-15 12:55 - 2014-03-15 12:55 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-15 12:46 - 2014-03-15 12:46 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\AVAST Software
2014-03-15 12:45 - 2014-03-15 12:45 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-15 12:45 - 2014-03-15 12:45 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-15 12:45 - 2014-03-15 12:45 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-15 12:44 - 2014-03-15 12:44 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-15 12:41 - 2014-03-15 12:09 - 01391948 _____ () C:\Windows\AsDebug.log
2014-03-15 12:41 - 2014-03-15 12:09 - 00417258 _____ () C:\Windows\AsCDProc.log
2014-03-15 12:37 - 2014-03-15 12:37 - 00003110 _____ () C:\Windows\System32\Tasks\ASUS Wireless Console 3
2014-03-15 12:37 - 2014-03-15 12:37 - 00000714 _____ () C:\Users\Public\Desktop\eManual.Lnk
2014-03-15 12:37 - 2014-03-15 12:37 - 00000000 ____D () C:\eSupport
2014-03-15 12:37 - 2014-03-15 12:25 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-03-15 12:36 - 2014-03-15 12:36 - 00003230 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-03-15 12:36 - 2014-03-15 12:36 - 00003056 _____ () C:\Windows\System32\Tasks\ASUS P4G
2014-03-15 12:36 - 2014-03-15 12:36 - 00000000 ____D () C:\Program Files\ASUS
2014-03-15 12:34 - 2014-03-15 12:34 - 00002978 _____ () C:\Windows\System32\Tasks\ATKOSD2
2014-03-15 12:32 - 2014-03-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation
2014-03-15 12:32 - 2014-03-15 12:23 - 00000224 _____ () C:\setup.log
2014-03-15 12:32 - 2014-03-15 12:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-15 12:31 - 2014-03-15 12:31 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-03-15 12:30 - 2014-03-15 12:30 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Program Files\Realtek
2014-03-15 12:29 - 2014-03-15 12:28 - 00002295 _____ () C:\RHDSetup.log
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\ProgramData\AmUStor
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-03-15 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-03-15 12:25 - 2014-03-15 12:25 - 00004906 _____ () C:\Windows\DPINST.LOG
2014-03-15 12:25 - 2014-03-15 12:25 - 00003540 _____ () C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____D () C:\Program Files\DIFX
2014-03-15 12:24 - 2014-03-15 12:10 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\ProgramData\Intel
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\Program Files\Intel
2014-03-15 12:22 - 2014-03-15 12:22 - 00015830 _____ () C:\Windows\system32\results.xml
2014-03-15 12:22 - 2014-03-15 12:22 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\InstallShield
2014-03-15 12:15 - 2014-03-15 12:15 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-03-15 12:14 - 2014-03-15 12:09 - 00000000 ____D () C:\Intel
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Easeware
2014-03-15 11:52 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-15 11:50 - 2014-03-15 19:37 - 00000000 ____D () C:\Windows\Panther
2014-03-15 11:50 - 2014-03-15 11:50 - 00001439 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00001405 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00000020 ___SH () C:\Users\Thorsten\ntuser.ini
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 __SHD () C:\Recovery
2014-03-15 11:50 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-03-15 11:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-15 10:42 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-03-15 10:41 - 2014-03-15 10:41 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-03-15 10:38 - 2010-11-21 08:17 - 00000000 ____D () C:\Windows\CSC

Some content of TEMP:
====================
C:\Users\Thorsten\AppData\Local\Temp\_isE13A.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-16 14:13

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Thorsten at 2014-03-17 22:03:21
Running from C:\Users\Thorsten\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 1.2.0117.08443 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.0117.08443 - Alcor Micro Corp.) Hidden
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.1.3 - ASUS)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.15.16 - Atheros Communications Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0020 - ASUS)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2013 - Avast Software)
Avira (HKLM-x32\...\{b0281a65-bf49-4b99-9ba4-8bd5acf46421}) (Version: 1.0.5179.26566 - Avira Operations GmbH & Co. KG)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2653 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
MediaMonkey 4.1 (HKLM-x32\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.3.0 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.3.0 (x86 de)) (Version: 24.3.0 - Mozilla)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Windows-Treiberpaket - ASUS (ATP) Mouse  (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Wireless Console 3 (HKLM-x32\...\{19EA33FB-B34E-40EA-8B8A-61743AEB795A}) (Version: 3.0.38 - ASUS)

==================== Restore Points  =========================

17-03-2014 19:33:51 Wiederherstellungsvorgang
17-03-2014 19:49:56 avast! antivirus system restore point
17-03-2014 19:54:49 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1C773ECE-6223-4401-B3B4-69B3F26B4130} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-02-15] (ASUS)
Task: {59533B5B-BC73-42A2-8024-D545B2EB6BC9} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-06-25] (ASUSTek Computer Inc.)
Task: {872B75F6-C889-457F-B1DE-8C92850515B9} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-01-16] (AsusTek)
Task: {F0446F8F-9831-4EAC-AB56-AD8D544D1851} - System32\Tasks\ASUS Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2012-11-28] (ASUSTeK Computer Inc.)
Task: {FE07E81E-47DE-4050-8D99-2B3B49A142C4} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-03-15] (AVAST Software)

==================== Loaded Modules (whitelisted) =============

2010-07-14 16:11 - 2010-07-14 16:11 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-03-16 12:00 - 2014-03-16 10:14 - 02186752 _____ () C:\Program Files\AVAST Software\Avast\defs\14031600\algo.dll
2014-03-17 20:52 - 2014-03-17 10:20 - 02186752 _____ () C:\Program Files\AVAST Software\Avast\defs\14031700\algo.dll
2012-01-31 09:25 - 2012-01-31 09:25 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2014-03-15 12:45 - 2014-03-15 12:45 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-03-15 12:23 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-15 12:55 - 2014-02-13 01:36 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-15 13:00 - 2014-01-31 23:35 - 03019376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-03-15 13:00 - 2014-01-31 23:36 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-03-15 13:00 - 2014-01-31 23:36 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/17/2014 08:51:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 08:32:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 08:31:41 PM) (Source: System Restore) (User: )
Description: Die Systemwiederherstellung wurde wegen eines Stromausfalls oder eines Programmfehlers unerwartet beendet. Zusätzliche Informationen: (Windows Update).

Error: (03/17/2014 08:31:21 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/17/2014 08:01:33 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 08:00:14 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/17/2014 07:58:37 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/17/2014 06:47:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 05:30:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/16/2014 07:28:39 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.


System errors:
=============
Error: (03/17/2014 08:57:39 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2862966)

Error: (03/17/2014 08:56:34 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2798162)

Error: (03/17/2014 08:56:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2585542)

Error: (03/17/2014 08:56:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2868626)

Error: (03/17/2014 08:31:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064

Error: (03/17/2014 08:00:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064

Error: (03/17/2014 07:58:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064

Error: (03/17/2014 07:58:11 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎17.‎03.‎2014 um 19:56:54 unerwartet heruntergefahren.

Error: (03/17/2014 06:46:57 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.

Error: (03/17/2014 06:46:57 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x80080005


Microsoft Office Sessions:
=========================
Error: (03/17/2014 08:51:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 08:32:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 08:31:41 PM) (Source: System Restore)(User: )
Description: Windows Update

Error: (03/17/2014 08:31:21 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/17/2014 08:01:33 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 08:00:14 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/17/2014 07:58:37 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/17/2014 06:47:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/17/2014 05:30:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/16/2014 07:28:39 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.


==================== Memory info ===========================

Percentage of memory in use: 44%
Total physical RAM: 8077.68 MB
Available physical RAM: 4515.64 MB
Total Pagefile: 16153.57 MB
Available Pagefile: 12518.1 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:80 GB) (Free:46.15 GB) NTFS
Drive d: () (Fixed) (Total:385.54 GB) (Free:384.65 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 000DC0E2)

Partition: GPT Partition Type.

==================== End Of Log ============================

cosinus 17.03.2014 22:14
Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes Anti-Malware

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Werscout 17.03.2014 22:51
Code:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.17.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Thorsten :: THORSTEN-LAPTOP [Administrator]

Schutz: Aktiviert

17.03.2014 22:22:26
mbam-log-2014-03-17 (22-22-26).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | PUP | PUM
Deaktivierte Suchlaufeinstellungen: HeuristiKs/Shuriken | P2P
Durchsuchte Objekte: 211885
Laufzeit: 2 Minute(n), 18 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 6
C:\Users\Thorsten\AppData\Roaming\mysearchdial (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Thorsten\AppData\Roaming\mysearchdial\icons_2.18.2.0 (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Thorsten\AppData\Roaming\mysearchdial\UpdateProc (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Mysearchdial (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Mysearchdial\1.8.29.0 (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 4
C:\Users\Thorsten\AppData\Roaming\mysearchdial\UpdateProc\config.dat (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Thorsten\AppData\Roaming\mysearchdial\UpdateProc\STTL.DAT (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Thorsten\AppData\Roaming\mysearchdial\UpdateProc\TTL.DAT (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Mysearchdial\1.8.29.0\uninst.dat (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
Code:
# AdwCleaner v3.022 - Bericht erstellt am 17/03/2014 um 22:34:37
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Thorsten - THORSTEN-LAPTOP
# Gestartet von : C:\Users\Thorsten\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
Ordner Gelöscht : C:\Program Files (x86)\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Thorsten\AppData\Roaming\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Thorsten\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\ffxtlbr@mysearchdial.com
Datei Gelöscht : C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\searchplugins\Mysearchdial.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Mysearchdial");
Zeile gelöscht : user_pref("extensions.enabledAddons", "%7Bd40f5e7b-d2cf-4856-b441-cc613eeffbe3%7D:1.68,%7BF53C93F1-07D5-430c-86D4-C9531B27DFAF%7D:1.0.0.2,%7B20a82645-c095-46ed-80e3-08825760534b%7D:1.3.1,%7B195A3098-0[...]

*************************

AdwCleaner[R0].txt - [1745 octets] - [17/03/2014 22:28:11]
AdwCleaner[S0].txt - [1674 octets] - [17/03/2014 22:34:37]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1734 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Professional x64
Ran by Thorsten on 17.03.2014 at 22:40:18,30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.03.2014 at 22:48:28,69
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Thorsten (administrator) on THORSTEN-LAPTOP on 17-03-2014 22:50:17
Running from C:\Users\Thorsten\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-07] (Intel Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-03-15] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1337982190-155651177-3300109034-1000\...\MountPoints2: {7c92a6c7-ac25-11e3-9491-806e6f6e6963} - E:\InstAll.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-03-15]
FF Extension: AVG Do Not Track - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{F53C93F1-07D5-430c-86D4-C9531B27DFAF} [2014-03-15]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-03-15]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2014-03-15]
FF Extension: MySearchDial - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-03-17]
FF Extension: Adblock Plus - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-15]
FF Extension: BetterPrivacy - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\wces324c.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-03-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-15]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-15] (AVAST Software)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-03-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-03-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-03-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-03-15] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-03-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-03-15] ()
R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [17280 2012-08-05] ( )
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104560 2012-04-25] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-17 22:48 - 2014-03-17 22:48 - 00000628 _____ () C:\Users\Thorsten\Desktop\JRT.txt
2014-03-17 22:40 - 2014-03-17 22:40 - 00000000 ____D () C:\Windows\ERUNT
2014-03-17 22:39 - 2014-03-17 22:39 - 01037734 _____ (Thisisu) C:\Users\Thorsten\Downloads\JRT.exe
2014-03-17 22:27 - 2014-03-17 22:34 - 00000000 ____D () C:\AdwCleaner
2014-03-17 22:27 - 2014-03-17 22:27 - 01950720 _____ () C:\Users\Thorsten\Downloads\adwcleaner.exe
2014-03-17 22:18 - 2014-03-17 22:18 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-17 22:18 - 2014-03-17 22:18 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Malwarebytes
2014-03-17 22:18 - 2014-03-17 22:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-17 22:18 - 2014-03-17 22:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-17 22:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-17 22:17 - 2014-03-17 22:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Thorsten\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-17 22:03 - 2014-03-17 22:03 - 00016604 _____ () C:\Users\Thorsten\Downloads\Addition.txt
2014-03-17 22:02 - 2014-03-17 22:50 - 00011704 _____ () C:\Users\Thorsten\Downloads\FRST.txt
2014-03-17 22:02 - 2014-03-17 22:50 - 00000000 ____D () C:\FRST
2014-03-17 22:01 - 2014-03-17 22:01 - 02157056 _____ (Farbar) C:\Users\Thorsten\Downloads\FRST64.exe
2014-03-17 19:09 - 2014-03-17 20:43 - 00000000 ____D () C:\Program Files (x86)\Mega Browse
2014-03-16 19:20 - 2014-03-16 19:20 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\vlc
2014-03-16 17:08 - 2014-03-16 20:02 - 00000000 ____D () C:\ProgramData\Avira
2014-03-16 16:07 - 2014-03-17 20:43 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-16 16:07 - 2014-03-16 16:07 - 04051048 _____ (Avira Operations GmbH & Co. KG) C:\Users\Thorsten\Downloads\avira_de_av___ws.exe
2014-03-16 16:07 - 2014-03-16 16:07 - 00000000 ___HT () C:\Windows\wusa.lock
2014-03-16 12:35 - 2014-03-17 20:43 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-03-16 12:35 - 2014-03-16 12:35 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-03-16 12:35 - 2014-03-16 12:35 - 00001780 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-03-16 12:34 - 2014-03-16 12:39 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-03-16 12:34 - 2014-03-16 12:35 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-03-16 12:32 - 2014-03-16 12:33 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Thorsten\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-03-15 19:37 - 2014-03-15 19:37 - 00000000 ____D () C:\Hotfix
2014-03-15 19:37 - 2014-03-15 11:50 - 00000000 ____D () C:\Windows\Panther
2014-03-15 19:37 - 2011-02-16 03:16 - 00000029 ___RH () C:\Windows\version
2014-03-15 19:37 - 2011-02-16 03:16 - 00000013 ____R () C:\Windows\csup.txt
2014-03-15 19:36 - 2014-03-17 22:43 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-03-15 19:36 - 2014-03-17 22:43 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-03-15 19:36 - 2014-03-15 19:35 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-03-15 19:36 - 2014-03-15 19:35 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\0407
2014-03-15 14:37 - 2014-03-15 14:38 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\ProgramData\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Program Files (x86)\MediaMonkey
2014-03-15 14:36 - 2014-03-15 14:36 - 15170864 _____ (Ventis Media Inc. ) C:\Users\Thorsten\Downloads\MediaMonkey_4.1.0.1691.exe
2014-03-15 14:36 - 2014-03-15 14:36 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-15 14:35 - 2014-03-15 14:34 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-15 14:35 - 2014-03-15 14:34 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-15 14:35 - 2014-03-15 14:34 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-15 14:35 - 2014-03-15 14:34 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-15 14:34 - 2014-03-15 14:35 - 25531584 _____ () C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe
2014-03-15 14:34 - 2014-03-15 14:34 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-15 14:34 - 2014-03-15 14:34 - 00000000 ____D () C:\Program Files\Java
2014-03-15 14:33 - 2014-03-15 14:33 - 30796712 _____ (Oracle Corporation) C:\Users\Thorsten\Downloads\jre-7u51-windows-x64.exe
2014-03-15 14:33 - 2014-03-15 14:33 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-15 14:30 - 2014-03-15 14:30 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\OpenOffice
2014-03-15 14:29 - 2014-03-15 14:29 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-15 14:28 - 2014-03-15 14:33 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-15 14:27 - 2014-03-15 14:34 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Adobe
2014-03-15 14:16 - 2014-03-15 14:16 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-15 13:36 - 2014-03-15 13:37 - 00000000 ____D () C:\Program Files\Office
2014-03-15 13:36 - 2014-03-15 13:36 - 00000000 ____D () C:\Neuer Ordner
2014-03-15 13:32 - 2014-03-15 13:35 - 163606685 _____ () C:\Users\Thorsten\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-15 13:00 - 2014-03-15 13:00 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-15 12:59 - 2014-03-15 12:59 - 21987088 _____ (Mozilla) C:\Users\Thorsten\Downloads\Thunderbird Setup 24.3.0.exe
2014-03-15 12:55 - 2014-03-15 13:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-15 12:55 - 2014-03-15 12:55 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-15 12:46 - 2014-03-17 20:52 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-15 12:46 - 2014-03-15 12:46 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\AVAST Software
2014-03-15 12:45 - 2014-03-17 20:52 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-15 12:45 - 2014-03-15 12:45 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-15 12:45 - 2014-03-15 12:45 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-15 12:45 - 2014-03-15 12:45 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-15 12:44 - 2014-03-15 12:44 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-15 12:40 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-03-15 12:40 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-03-15 12:40 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-03-15 12:40 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-03-15 12:37 - 2014-03-15 12:37 - 00003110 _____ () C:\Windows\System32\Tasks\ASUS Wireless Console 3
2014-03-15 12:37 - 2014-03-15 12:37 - 00000714 _____ () C:\Users\Public\Desktop\eManual.Lnk
2014-03-15 12:37 - 2014-03-15 12:37 - 00000000 ____D () C:\eSupport
2014-03-15 12:36 - 2014-03-17 20:43 - 00000000 ____D () C:\ProgramData\P4G
2014-03-15 12:36 - 2014-03-15 12:36 - 00003230 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-03-15 12:36 - 2014-03-15 12:36 - 00003056 _____ () C:\Windows\System32\Tasks\ASUS P4G
2014-03-15 12:36 - 2014-03-15 12:36 - 00000000 ____D () C:\Program Files\ASUS
2014-03-15 12:34 - 2014-03-15 12:34 - 00002978 _____ () C:\Windows\System32\Tasks\ATKOSD2
2014-03-15 12:34 - 2012-08-05 13:17 - 00017280 _____ ( ) C:\Windows\system32\Drivers\kbfiltr.sys
2014-03-15 12:32 - 2014-03-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation
2014-03-15 12:32 - 2012-01-15 08:37 - 00072526 _____ () C:\Windows\system32\athrextx.cat
2014-03-15 12:32 - 2012-01-10 21:38 - 02801664 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-03-15 12:32 - 2012-01-10 21:38 - 02801664 _____ (Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2014-03-15 12:31 - 2014-03-15 12:31 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-03-15 12:31 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-03-15 12:31 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-03-15 12:31 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-03-15 12:31 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-03-15 12:30 - 2014-03-15 12:30 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2014-03-15 12:30 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-03-15 12:30 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-03-15 12:30 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-03-15 12:30 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-03-15 12:30 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-03-15 12:30 - 2012-04-25 08:07 - 00104560 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Program Files\Realtek
2014-03-15 12:29 - 2013-04-10 06:59 - 00000016 ____R () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-03-15 12:29 - 2013-03-29 14:42 - 03379272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-15 12:29 - 2013-03-29 11:04 - 21170176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-15 12:29 - 2013-03-29 10:52 - 00914992 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-15 12:29 - 2013-03-29 10:10 - 00449481 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-15 12:29 - 2013-03-27 09:57 - 00135240 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-15 12:29 - 2013-03-26 10:06 - 02797128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-15 12:29 - 2013-03-26 08:40 - 03693128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-15 12:29 - 2013-03-26 07:38 - 01659464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-15 12:29 - 2013-03-25 10:32 - 03180264 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-15 12:29 - 2013-03-20 06:16 - 02102040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-15 12:29 - 2013-03-15 12:34 - 04957976 _____ (A-volute) C:\Windows\system32\RTKSMlfx.dll
2014-03-15 12:29 - 2013-03-15 12:33 - 00887640 _____ (A-Volute) C:\Windows\system32\RTKSMSettingsIPC.dll
2014-03-15 12:29 - 2013-03-12 11:16 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00823072 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00633632 _____ (SRS Labs, Inc.) C:\Windows\system32\sltech64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00517408 _____ (SRS Labs, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-15 12:29 - 2013-02-26 22:37 - 00213792 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-15 12:29 - 2013-02-21 10:26 - 00858032 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-03-15 12:29 - 2013-02-21 10:26 - 00148912 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-03-15 12:29 - 2013-02-21 10:25 - 00569256 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-03-15 12:29 - 2013-02-20 11:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-15 12:29 - 2013-02-19 11:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-15 12:29 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-03-15 12:29 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-03-15 12:29 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-03-15 12:29 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-03-15 12:29 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-03-15 12:29 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-03-15 12:29 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-03-15 12:29 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-03-15 12:29 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-03-15 12:29 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-03-15 12:29 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-03-15 12:29 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-03-15 12:29 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-03-15 12:28 - 2014-03-15 12:29 - 00002295 _____ () C:\RHDSetup.log
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\ProgramData\AmUStor
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-03-15 12:28 - 2013-03-26 10:04 - 02734624 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-15 12:28 - 2013-03-22 20:43 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-03-15 12:28 - 2013-03-20 06:17 - 09123608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-15 12:28 - 2013-03-20 06:16 - 01900312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-15 12:28 - 2013-03-20 06:16 - 00910104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-15 12:28 - 2013-03-08 05:51 - 00904752 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-03-15 12:28 - 2013-02-28 06:10 - 14021912 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-15 12:28 - 2013-02-28 06:10 - 02032408 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-15 12:28 - 2013-01-17 12:32 - 00719640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-15 12:28 - 2013-01-16 09:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-03-15 12:28 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-03-15 12:28 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-03-15 12:28 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-03-15 12:28 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-03-15 12:28 - 2012-09-10 13:06 - 00612728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-15 12:28 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-03-15 12:28 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-03-15 12:28 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-03-15 12:28 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-03-15 12:28 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-03-15 12:28 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-03-15 12:28 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-03-15 12:28 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-03-15 12:25 - 2014-03-15 12:37 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-03-15 12:25 - 2014-03-15 12:25 - 00004906 _____ () C:\Windows\DPINST.LOG
2014-03-15 12:25 - 2014-03-15 12:25 - 00003540 _____ () C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____D () C:\Program Files\DIFX
2014-03-15 12:25 - 2012-02-07 05:12 - 00016152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-03-15 12:24 - 2012-02-07 05:12 - 00787736 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-03-15 12:24 - 2012-02-07 05:12 - 00356120 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-03-15 12:23 - 2014-03-15 12:32 - 00000224 _____ () C:\setup.log
2014-03-15 12:23 - 2014-03-15 12:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\ProgramData\Intel
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\Program Files\Intel
2014-03-15 12:23 - 2012-07-02 15:16 - 00062784 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-03-15 12:23 - 2012-06-25 10:42 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-03-15 12:22 - 2014-03-15 12:22 - 00015830 _____ () C:\Windows\system32\results.xml
2014-03-15 12:22 - 2014-03-15 12:22 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\InstallShield
2014-03-15 12:15 - 2014-03-15 12:15 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-03-15 12:15 - 2012-02-22 08:18 - 28979200 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 23463424 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 17213440 _____ () C:\Windows\system32\ig7icd64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 14692224 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-03-15 12:15 - 2012-02-22 08:18 - 13020160 _____ () C:\Windows\SysWOW64\ig7icd32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 09605632 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 08086528 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 07794688 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 06120960 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 05886232 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 03747840 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 02967040 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 02866688 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 02321408 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 01981696 _____ () C:\Windows\system32\iglhxa64.cpa
2014-03-15 12:15 - 2012-02-22 08:18 - 00735796 _____ () C:\Windows\SysWOW64\igkrng700.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00735796 _____ () C:\Windows\system32\igkrng700.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00588800 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00561508 _____ () C:\Windows\SysWOW64\igfcg700m.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00561508 _____ () C:\Windows\system32\igfcg700m.bin
2014-03-15 12:15 - 2012-02-22 08:18 - 00524800 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00519680 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00516608 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00511768 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00440600 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00430592 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00430080 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00398616 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00386048 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00321024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2014-03-15 12:15 - 2012-02-22 08:18 - 00276248 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00250136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00237056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00236032 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00221099 _____ () C:\Windows\system32\Gfxres.th-TH.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00213504 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00193024 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00188416 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00177152 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00172032 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00170264 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2014-03-15 12:15 - 2012-02-22 08:18 - 00143155 _____ () C:\Windows\system32\Gfxres.tr-TR.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2014-03-15 12:15 - 2012-02-22 08:18 - 00124962 _____ () C:\Windows\system32\Gfxres.zh-TW.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00123467 _____ () C:\Windows\system32\Gfxres.zh-CN.resources
2014-03-15 12:15 - 2012-02-22 08:18 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2653.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00079360 _____ () C:\Windows\system32\igdde64.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00059425 _____ () C:\Windows\system32\iglhxo64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00059398 _____ () C:\Windows\system32\iglhxg64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00059230 _____ () C:\Windows\system32\iglhxc64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00059104 _____ () C:\Windows\system32\iglhxc64_dev.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00058880 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00058796 _____ () C:\Windows\system32\iglhxg64_dev.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00058109 _____ () C:\Windows\system32\iglhxo64_dev.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00052736 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00051200 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-03-15 12:15 - 2012-02-22 08:18 - 00018520 _____ () C:\Windows\system32\iglhxs64.vp
2014-03-15 12:15 - 2012-02-22 08:18 - 00009216 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2014-03-15 12:15 - 2012-02-22 08:17 - 00207830 _____ () C:\Windows\system32\Gfxres.el-GR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00191775 _____ () C:\Windows\system32\Gfxres.ru-RU.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00184600 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-03-15 12:15 - 2012-02-22 08:17 - 00164334 _____ () C:\Windows\system32\Gfxres.ar-SA.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00161613 _____ () C:\Windows\system32\Gfxres.ja-JP.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00157226 _____ () C:\Windows\system32\Gfxres.he-IL.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00148033 _____ () C:\Windows\system32\Gfxres.it-IT.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00146675 _____ () C:\Windows\system32\Gfxres.ko-KR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00145687 _____ () C:\Windows\system32\Gfxres.es-ES.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00145579 _____ () C:\Windows\system32\Gfxres.de-DE.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00144338 _____ () C:\Windows\system32\Gfxres.ro-RO.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00143805 _____ () C:\Windows\system32\Gfxres.fr-FR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00142664 _____ () C:\Windows\system32\Gfxres.pt-BR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00142335 _____ () C:\Windows\system32\Gfxres.nl-NL.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00142189 _____ () C:\Windows\system32\Gfxres.hu-HU.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00141644 _____ () C:\Windows\system32\Gfxres.pt-PT.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00141435 _____ () C:\Windows\system32\Gfxres.sv-SE.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140923 _____ () C:\Windows\system32\Gfxres.pl-PL.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140885 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140549 _____ () C:\Windows\system32\Gfxres.fi-FI.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00140122 _____ () C:\Windows\system32\Gfxres.sk-SK.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00139487 _____ () C:\Windows\system32\Gfxres.hr-HR.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00136451 _____ () C:\Windows\system32\Gfxres.sl-SI.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00136369 _____ () C:\Windows\system32\Gfxres.nb-NO.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00135868 _____ () C:\Windows\system32\Gfxres.da-DK.resources
2014-03-15 12:15 - 2012-02-22 08:17 - 00131317 _____ () C:\Windows\system32\Gfxres.en-US.resources
2014-03-15 12:15 - 2012-02-20 03:31 - 00331264 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-03-15 12:15 - 2012-02-20 03:31 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2014-03-15 12:10 - 2014-03-15 12:24 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-15 12:10 - 2012-02-02 05:58 - 00053248 ____R (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-03-15 12:09 - 2014-03-15 12:41 - 01391948 _____ () C:\Windows\AsDebug.log
2014-03-15 12:09 - 2014-03-15 12:41 - 00417258 _____ () C:\Windows\AsCDProc.log
2014-03-15 12:09 - 2014-03-15 12:14 - 00000000 ____D () C:\Intel
2014-03-15 11:58 - 2014-03-17 21:35 - 00063568 _____ () C:\Users\Thorsten\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Easeware
2014-03-15 11:50 - 2014-03-17 20:51 - 00000000 ____D () C:\Users\Thorsten
2014-03-15 11:50 - 2014-03-17 20:43 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-15 11:50 - 2014-03-17 20:43 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-15 11:50 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\VirtualStore
2014-03-15 11:50 - 2014-03-15 11:50 - 00001439 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00001405 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00000020 ___SH () C:\Users\Thorsten\ntuser.ini
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 __SHD () C:\Recovery
2014-03-15 11:50 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-15 11:50 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-15 10:41 - 2014-03-17 22:35 - 01585855 _____ () C:\Windows\WindowsUpdate.log
2014-03-15 10:41 - 2014-03-15 10:41 - 00001355 _____ () C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

2014-03-17 22:50 - 2014-03-17 22:02 - 00011704 _____ () C:\Users\Thorsten\Downloads\FRST.txt
2014-03-17 22:50 - 2014-03-17 22:02 - 00000000 ____D () C:\FRST
2014-03-17 22:48 - 2014-03-17 22:48 - 00000628 _____ () C:\Users\Thorsten\Desktop\JRT.txt
2014-03-17 22:43 - 2014-03-15 19:36 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-03-17 22:43 - 2014-03-15 19:36 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-03-17 22:43 - 2009-07-14 06:13 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-17 22:40 - 2014-03-17 22:40 - 00000000 ____D () C:\Windows\ERUNT
2014-03-17 22:39 - 2014-03-17 22:39 - 01037734 _____ (Thisisu) C:\Users\Thorsten\Downloads\JRT.exe
2014-03-17 22:39 - 2014-03-15 10:41 - 01585855 _____ () C:\Windows\WindowsUpdate.log
2014-03-17 22:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-17 22:36 - 2009-07-14 05:51 - 00023900 _____ () C:\Windows\setupact.log
2014-03-17 22:35 - 2009-07-14 05:45 - 00025008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-17 22:35 - 2009-07-14 05:45 - 00025008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-17 22:34 - 2014-03-17 22:27 - 00000000 ____D () C:\AdwCleaner
2014-03-17 22:27 - 2014-03-17 22:27 - 01950720 _____ () C:\Users\Thorsten\Downloads\adwcleaner.exe
2014-03-17 22:18 - 2014-03-17 22:18 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-17 22:18 - 2014-03-17 22:18 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Malwarebytes
2014-03-17 22:18 - 2014-03-17 22:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-17 22:18 - 2014-03-17 22:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-17 22:17 - 2014-03-17 22:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Thorsten\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-17 22:03 - 2014-03-17 22:03 - 00016604 _____ () C:\Users\Thorsten\Downloads\Addition.txt
2014-03-17 22:01 - 2014-03-17 22:01 - 02157056 _____ (Farbar) C:\Users\Thorsten\Downloads\FRST64.exe
2014-03-17 21:35 - 2014-03-15 11:58 - 00063568 _____ () C:\Users\Thorsten\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-17 20:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-17 20:52 - 2014-03-15 12:46 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-17 20:52 - 2014-03-15 12:45 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-17 20:51 - 2014-03-15 11:50 - 00000000 ____D () C:\Users\Thorsten
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-03-17 20:48 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-03-17 20:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-03-17 20:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing
2014-03-17 20:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-17 20:47 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-03-17 20:47 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-03-17 20:45 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-17 20:45 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-17 20:45 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-17 20:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-17 20:43 - 2014-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\Mega Browse
2014-03-17 20:43 - 2014-03-16 16:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-17 20:43 - 2014-03-16 12:35 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-03-17 20:43 - 2014-03-15 12:36 - 00000000 ____D () C:\ProgramData\P4G
2014-03-17 20:43 - 2014-03-15 11:50 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-17 20:43 - 2014-03-15 11:50 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-03-17 20:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2014-03-17 20:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-17 20:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-16 20:02 - 2014-03-16 17:08 - 00000000 ____D () C:\ProgramData\Avira
2014-03-16 19:20 - 2014-03-16 19:20 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\vlc
2014-03-16 17:05 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-03-16 17:05 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-03-16 16:07 - 2014-03-16 16:07 - 04051048 _____ (Avira Operations GmbH & Co. KG) C:\Users\Thorsten\Downloads\avira_de_av___ws.exe
2014-03-16 16:07 - 2014-03-16 16:07 - 00000000 ___HT () C:\Windows\wusa.lock
2014-03-16 14:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-03-16 12:39 - 2014-03-16 12:34 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-03-16 12:35 - 2014-03-16 12:35 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-03-16 12:35 - 2014-03-16 12:35 - 00001780 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-03-16 12:35 - 2014-03-16 12:34 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-03-16 12:35 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-03-16 12:33 - 2014-03-16 12:32 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Thorsten\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-03-15 19:37 - 2014-03-15 19:37 - 00000000 ____D () C:\Hotfix
2014-03-15 19:37 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-03-15 19:37 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-03-15 19:37 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup
2014-03-15 19:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-03-15 19:35 - 2014-03-15 19:36 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-03-15 19:35 - 2014-03-15 19:36 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\de
2014-03-15 19:35 - 2014-03-15 19:35 - 00000000 ____D () C:\Windows\system32\0407
2014-03-15 19:35 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-03-15 19:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-03-15 15:09 - 2009-07-14 05:45 - 00293320 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 14:38 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\ProgramData\MediaMonkey
2014-03-15 14:37 - 2014-03-15 14:37 - 00000000 ____D () C:\Program Files (x86)\MediaMonkey
2014-03-15 14:37 - 2014-03-15 11:50 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\VirtualStore
2014-03-15 14:36 - 2014-03-15 14:36 - 15170864 _____ (Ventis Media Inc. ) C:\Users\Thorsten\Downloads\MediaMonkey_4.1.0.1691.exe
2014-03-15 14:36 - 2014-03-15 14:36 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-15 14:35 - 2014-03-15 14:34 - 25531584 _____ () C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-15 14:34 - 2014-03-15 14:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-15 14:34 - 2014-03-15 14:34 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-15 14:34 - 2014-03-15 14:34 - 00000000 ____D () C:\Program Files\Java
2014-03-15 14:34 - 2014-03-15 14:27 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Adobe
2014-03-15 14:33 - 2014-03-15 14:33 - 30796712 _____ (Oracle Corporation) C:\Users\Thorsten\Downloads\jre-7u51-windows-x64.exe
2014-03-15 14:33 - 2014-03-15 14:33 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-15 14:33 - 2014-03-15 14:28 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-15 14:30 - 2014-03-15 14:30 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\OpenOffice
2014-03-15 14:29 - 2014-03-15 14:29 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-15 14:16 - 2014-03-15 14:16 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-15 13:37 - 2014-03-15 13:36 - 00000000 ____D () C:\Program Files\Office
2014-03-15 13:36 - 2014-03-15 13:36 - 00000000 ____D () C:\Neuer Ordner
2014-03-15 13:35 - 2014-03-15 13:32 - 163606685 _____ () C:\Users\Thorsten\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-15 13:14 - 2014-03-15 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-15 13:14 - 2010-11-21 04:47 - 00004902 _____ () C:\Windows\PFRO.log
2014-03-15 13:00 - 2014-03-15 13:00 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Thunderbird
2014-03-15 13:00 - 2014-03-15 13:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-15 12:59 - 2014-03-15 12:59 - 21987088 _____ (Mozilla) C:\Users\Thorsten\Downloads\Thunderbird Setup 24.3.0.exe
2014-03-15 12:55 - 2014-03-15 12:55 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-15 12:55 - 2014-03-15 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-15 12:46 - 2014-03-15 12:46 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\AVAST Software
2014-03-15 12:45 - 2014-03-15 12:45 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-15 12:45 - 2014-03-15 12:45 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-15 12:45 - 2014-03-15 12:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-15 12:45 - 2014-03-15 12:45 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-15 12:44 - 2014-03-15 12:44 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-15 12:41 - 2014-03-15 12:09 - 01391948 _____ () C:\Windows\AsDebug.log
2014-03-15 12:41 - 2014-03-15 12:09 - 00417258 _____ () C:\Windows\AsCDProc.log
2014-03-15 12:37 - 2014-03-15 12:37 - 00003110 _____ () C:\Windows\System32\Tasks\ASUS Wireless Console 3
2014-03-15 12:37 - 2014-03-15 12:37 - 00000714 _____ () C:\Users\Public\Desktop\eManual.Lnk
2014-03-15 12:37 - 2014-03-15 12:37 - 00000000 ____D () C:\eSupport
2014-03-15 12:37 - 2014-03-15 12:25 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-03-15 12:36 - 2014-03-15 12:36 - 00003230 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-03-15 12:36 - 2014-03-15 12:36 - 00003056 _____ () C:\Windows\System32\Tasks\ASUS P4G
2014-03-15 12:36 - 2014-03-15 12:36 - 00000000 ____D () C:\Program Files\ASUS
2014-03-15 12:34 - 2014-03-15 12:34 - 00002978 _____ () C:\Windows\System32\Tasks\ATKOSD2
2014-03-15 12:32 - 2014-03-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation
2014-03-15 12:32 - 2014-03-15 12:23 - 00000224 _____ () C:\setup.log
2014-03-15 12:32 - 2014-03-15 12:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-15 12:31 - 2014-03-15 12:31 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-03-15 12:30 - 2014-03-15 12:30 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-15 12:29 - 2014-03-15 12:29 - 00000000 ____D () C:\Program Files\Realtek
2014-03-15 12:29 - 2014-03-15 12:28 - 00002295 _____ () C:\RHDSetup.log
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\ProgramData\AmUStor
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-15 12:28 - 2014-03-15 12:28 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-03-15 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-03-15 12:25 - 2014-03-15 12:25 - 00004906 _____ () C:\Windows\DPINST.LOG
2014-03-15 12:25 - 2014-03-15 12:25 - 00003540 _____ () C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-03-15 12:25 - 2014-03-15 12:25 - 00000000 ____D () C:\Program Files\DIFX
2014-03-15 12:24 - 2014-03-15 12:10 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\ProgramData\Intel
2014-03-15 12:23 - 2014-03-15 12:23 - 00000000 ____D () C:\Program Files\Intel
2014-03-15 12:22 - 2014-03-15 12:22 - 00015830 _____ () C:\Windows\system32\results.xml
2014-03-15 12:22 - 2014-03-15 12:22 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\InstallShield
2014-03-15 12:15 - 2014-03-15 12:15 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-03-15 12:14 - 2014-03-15 12:09 - 00000000 ____D () C:\Intel
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-03-15 11:58 - 2014-03-15 11:58 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Easeware
2014-03-15 11:52 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-15 11:50 - 2014-03-15 19:37 - 00000000 ____D () C:\Windows\Panther
2014-03-15 11:50 - 2014-03-15 11:50 - 00001439 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00001405 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-03-15 11:50 - 2014-03-15 11:50 - 00000020 ___SH () C:\Users\Thorsten\ntuser.ini
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Thorsten\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Programme
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-15 11:50 - 2014-03-15 11:50 - 00000000 __SHD () C:\Recovery
2014-03-15 11:50 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-03-15 11:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-15 10:42 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-03-15 10:41 - 2014-03-15 10:41 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-03-15 10:38 - 2010-11-21 08:17 - 00000000 ____D () C:\Windows\CSC

Some content of TEMP:
====================
C:\Users\Thorsten\AppData\Local\Temp\Quarantine.exe
C:\Users\Thorsten\AppData\Local\Temp\_isE13A.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-16 14:13

==================== End Of Log ============================
--- --- ---

--- --- ---

cosinus 17.03.2014 23:12
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Werscout 17.03.2014 23:59
Code:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.17.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Thorsten :: THORSTEN-LAPTOP [Administrator]

Schutz: Aktiviert

17.03.2014 23:17:12
mbam-log-2014-03-17 (23-17-12).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | PUP | PUM
Deaktivierte Suchlaufeinstellungen: HeuristiKs/Shuriken | P2P
Durchsuchte Objekte: 211955
Laufzeit: 2 Minute(n), 10 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f297931bf5dfdf4aa1c1a7bc5a8ebbb6
# engine=17483
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-17 10:51:07
# local_time=2014-03-17 11:51:07 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 71 77 10712 216319 0 0
# compatibility_mode=5893 16776573 100 94 3756 146726517 0 0
# scanned=118223
# found=1
# cleaned=0
# scan_time=1654
sh=DE0F453AD7E45914C2F6E2A6BC782AFB6DB94B9D ft=1 fh=1f461786edf5f19c vn="NSIS/StartPage.CC trojan" ac=I fn="C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe"
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f297931bf5dfdf4aa1c1a7bc5a8ebbb6
# engine=17483
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-17 10:51:07
# local_time=2014-03-17 11:51:07 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 71 77 10712 216319 0 0
# compatibility_mode=5893 16776573 100 94 3756 146726517 0 0
# scanned=118223
# found=1
# cleaned=0
# scan_time=1654
sh=DE0F453AD7E45914C2F6E2A6BC782AFB6DB94B9D ft=1 fh=1f461786edf5f19c vn="NSIS/StartPage.CC trojan" ac=I fn="C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe"
Da der einen fund angezeigt hat vermute ich mal das da noch was zu tun ist, leider klingelt Morgen der Wecker wieder früh deswegen muss ich wohl erstmal ins bett, und ann weitere anweisungen erst morgen abend ausführen. Bis Hierhin erstmal ein fettes DANKE!! und Gut nacht

cosinus 17.03.2014 23:59
TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.




Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Werscout 18.03.2014 18:08
TFC hab ich nochmal durchlaufen lassen.
Von Weiteren funden weiß ich zumindest nix...
Aber eset hatte gestern 1 Fund angezeigt, dhaer wundert es mivch grade das Du sagst sieht Ok aus. Gefühl ist der rechner etwas langsam aber sonst ....

cosinus 19.03.2014 11:18
Vllt schaust du dir mal den Fund an?!

=> C:\Users\Thorsten\Downloads\vlc-2.1.3-win32.exe

Da ist nur was im Download-Ordner und dann handelt es sich um VLC!
Vllt achtest du mal in Zukunft besser darauf, aus welchen Quellen du dir Software besorgst, ich hab den Eindruck du hast dieses Setup aus der Müllquelle vlc.de die einem startseitenverändernde Setups unterjubeln will

Werscout 19.03.2014 20:45
Hm ICh kann micvh nicht erinner VLC runtergeladen zu haben- angefangen hat alles mit nem Fluschplayer download- da hab ich auch gemerkt das ich auf ner falschens site war ... leider nen tick zu spät.
Startseitenverändern passt auf jedenfall.

Na ja ber das hat sich jezt alles leider erledigt. Als ich vorhin den rechner machen wollte fuhr er nicht mehr hoch sondern bleib immer mitendrin stehn, daher hab ich jetzt doch zu Win CD gegriffen (hatte ja keine andere wahl). Jedenfalls ist das Systhem jetzt wieder suaber. Und ich achte jetzt noch mehr als vorher nur bei Chip runterzuladen.

Aber danke Trotzdem für die schenlle und freundliche Hilfe! (auch wenn nachträglich wohl umsonst) So schnelle antwort hätte ich nicht erwartet! :dankeschoen::dankeschoen:

cosinus 20.03.2014 00:39
Dann wären wir durch! :daumenhoc


Falls du noch Lob oder Kritik loswerden möchtest => Lob, Kritik und Wünsche - Trojaner-Board

Die Programme, die hier zum Einsatz kamen, können alle deinstalliert werden.

Helfen kann dir dabei delfix:


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.






Bitte abschließend noch die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate
Windows XP:Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.
Windows Vista/7: Start, Systemsteuerung, Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks findest du hier => Browsers and Plugins - FilePony.de

Alle Plugins im Firefox-Browser kannst du auch ganz einfach hier auf Aktualität prüfen => https://www.mozilla.org/de/plugincheck

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein großes Sicherheitsrisiko, daher solltest Du die alten Versionen deinstallieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software (bzw. Programme und Funktionen) und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:55 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131