Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Nach Trojanerbefall keine Netzwerkverbindung möglich (ping allgemeiner Fehler, kein DHCP) (https://www.trojaner-board.de/153940-trojanerbefall-keine-netzwerkverbindung-moeglich-ping-allgemeiner-fehler-kein-dhcp.html)

suppenhuhn12 16.05.2014 10:58
Nach Trojanerbefall keine Netzwerkverbindung möglich (ping allgemeiner Fehler, kein DHCP)
 
Mahlzeit!

Ich lese schön länger mit und vieles hat mir schon geholfen. Aber jetzt ist es vorbei.

Nach einem Trojanerbefall (unten näheres) habe ich folgendes Problem:

- Beim Verbinden mit einem Netzwerk (egal ob Lan oder WLan) bekomme ich keine Kommunikation über TCP IP v4 zum laufen.
- ist DHCP aktiviert wird keine IP vom Router bezogen
- ist eine Statische IP konfiguriert, bekomme ich keine Antwort aus dem Netz
- Ping auf 127.0.0.1, eigene IP oder Router -> allgemeiner Fehler
- Meldung im Netzwerk und Freigabecenter: Nicht identifiziertes Netzwerk, IPv4 keine Internetverbindung, IPv6 keine Verbindung
- Fehlereintrag im Ereignisprotokoll: LMS has a Problem in achieving Network resources.
- Fehlereintrag im Ereignisprotokoll: UNS failed to bind to localhost.
- Fehlereintrag im Ereignisprotokoll: NetBT Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.
- Fehlereintrag im Ereignisprotokoll: Server Der Server konnte zu der Transportschicht \Device\NetbiosSmb keine Verbindung herstellen.
- Fehlereintrag im Ereignisprotokoll:
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
- Fehlereintrag im Ereignisprotokoll: Der zugrunde liegende Transport für [::]:5357 kann nicht gebunden werden. Möglicherweise enthält die Liste nur zum Abhören von IP einen Verweis auf eine Schnittstelle, die gegebenenfalls auf diesem Computer nicht vorhanden ist. Das Datenfeld enthält die Fehlernummer.


Was habe ich gemacht?
ich habe einen Trojanerbefall bemerkt und mit den oft erwähnten Tools bekämpft (wobei natürlich immer nur eine Lösung am Rechner war, diese aktuell, und die anderen entfernt):
- Avast Internet Security Professional (ursprünglich am Rechner)
- Norton Anti Virus 2014
- Malwarebytes Antimalware
- Superantispyware
- EmsisoftEmergencyKit 4.0.0.17
- Rougekiller

Davor war es nicht möglich Hardware zu installieren (zb USB Sticks)

Danach konnte ich keine Probleme ausser der oben beschriebenen Netzwerkproblematik mehr feststellen.

Danach habe ich mit
- Sysinternals AutoRuns 11.70 alle verdächtigen Start Einträge gekillt.
- Ein Windows InPlace Upgrade durchgeführt
- Winfuter Update Pack installiert
- alle Netzwerkkarten entfernt und neu installiert
- Winsock und Co lt gängigen Anleitungen zurückgesetzt.

Ein Fehler der mir aufgefallen ist: der IKE IPSec Dienst lässt sich nicht starten - Fehlermeldung:

kein Erfolg.

System:
Windows 7 professional 64 Bit
auf Toshiba Tecra mit Intel CoreI5 und 4 GB Ram

Google und Co haben mir nicht geholfen.

Ich freue mich über jeden Tipp - die Logs der Hilfsprogramme im nächsten Post!

danke daniel

Emsisoft Emergency Kit - Version 4.0
Letztes Update: N/A
Benutzerkonto: Susanns-TOSHIBA\Susann

Scan Einstellungen:

Scan Methode: Detail Scan
Objekte: Rootkits, Speicher, Traces, C:\

PUPs-Erkennung: An
Archiv Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan Beginn: 15.05.2014 10:12:00
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} gefunden: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-20\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} gefunden: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-19\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} gefunden: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-18\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} gefunden: Application.AdGenie (A)
C:\Program Files (x86)\free video converter gefunden: Application.AppInstall (A)
Key: HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\DATAMNGRCOORDINATOR gefunden: Application.AdServ (A)

Gescannt 270027
Gefunden 6

Scan Ende: 15.05.2014 11:25:34
Scan Zeit: 1:13:34

Emsisoft Emergency Kit - Version 4.0
Letztes Update: N/A
Benutzerkonto: Susanns-TOSHIBA\Susann

Scan Einstellungen:

Scan Methode: Detail Scan
Objekte: Rootkits, Speicher, Traces, C:\

PUPs-Erkennung: An
Archiv Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan Beginn: 15.05.2014 22:21:25
Key: HKEY_USERS\S-1-5-21-2252115965-1886336526-2189544158-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} gefunden: Application.Win32.WSearch (A)
C:\ProgramData\InstallMate\{319D334C-2D53-40C5-A22E-6571EA7E11BA}\Custom.dll gefunden: Gen:Variant.Application.Kazy.365295 (B)
C:\ProgramData\InstallMate\{DC55A157-18C4-4264-A08F-50E607B683A1}\Custom.dll gefunden: Gen:Variant.Application.Kazy.365295 (B)
C:\Users\Susann\Downloads\events\Music\Filme\be independent - deutsch.exe gefunden: Trojan.Generic.11156795 (B)

Gescannt 258726
Gefunden 4

Scan Ende: 16.05.2014 09:25:03
Scan Zeit: 11:03:38

C:\Users\Susann\Downloads\events\Music\Filme\be independent - deutsch.exe Gelöscht Trojan.Generic.11156795 (B)
C:\ProgramData\InstallMate\{319D334C-2D53-40C5-A22E-6571EA7E11BA}\Custom.dll Gelöscht Gen:Variant.Application.Kazy.365295 (B)
C:\ProgramData\InstallMate\{DC55A157-18C4-4264-A08F-50E607B683A1}\Custom.dll Gelöscht Gen:Variant.Application.Kazy.365295 (B)
Key: HKEY_USERS\S-1-5-21-2252115965-1886336526-2189544158-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} Gelöscht Application.Win32.WSearch (A)

Gelöscht 4
AdwCleaner Logfile:
Code:
# AdwCleaner v3.208 - Bericht erstellt am 15/05/2014 um 09:50:38
# Aktualisiert 11/05/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Susann - SUSANNS-TOSHIBA
# Gestartet von : E:\adwcleaner_3.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\DiGGiCoUPon
Ordner Gelöscht : C:\ProgramData\ssAve Neto
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader
Ordner Gelöscht : C:\Program Files (x86)\Movies Toolbar
Ordner Gelöscht : C:\Program Files (x86)\ssAve Neto
Ordner Gelöscht : C:\Users\Susann\AppData\Local\jZip
Ordner Gelöscht : C:\Users\Susann\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Susann\AppData\Local\torch
Ordner Gelöscht : C:\Users\Susann\AppData\Local\Temp\jZip
Ordner Gelöscht : C:\Users\Susann\AppData\LocalLow\DataMngr
Ordner Gelöscht : C:\Users\Susann\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\Extensions\iuf_mrqa@oab-xb.edu
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfpfekpeleljonedmknjmnlhnncppad
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfpfekpeleljonedmknjmnlhnncppad
Ordner Gelöscht : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfpfekpeleljonedmknjmnlhnncppad
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbjnhnooobmlnippkbhhijkaoggjgnp
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbjnhnooobmlnippkbhhijkaoggjgnp
Ordner Gelöscht : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbjnhnooobmlnippkbhhijkaoggjgnp
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjmkpimpkpleocgfgecnhgngoljojnic
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjmkpimpkpleocgfgecnhgngoljojnic
Ordner Gelöscht : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjmkpimpkpleocgfgecnhgngoljojnic
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombjndkilglemokkpneanjnpjefpbmdb
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombjndkilglemokkpneanjnpjefpbmdb
Ordner Gelöscht : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombjndkilglemokkpneanjnpjefpbmdb
Ordner Gelöscht : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjjalcnahngbokiineilafhgcehchdm
Datei Gelöscht : C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\searchplugins\Ask.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml
Datei Gelöscht : C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\searchplugins\WebSearch.xml
Datei Gelöscht : C:\windows\System32\Tasks\Advanced System Protector_startup

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Wert Gelöscht : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Wert Gelöscht : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Wert Gelöscht : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Wert Gelöscht : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Schlüssel Gelöscht : HKCU\Software\APN DTX
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\torch
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\torch
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename,S", "WebSearch");
Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51&l=1&q=");
Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com");
Zeile gelöscht : user_pref("browser.search.order.1,S", "WebSearch");
Zeile gelöscht : user_pref("browser.search.selectedEngine,S", "WebSearch");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?o=APN10649A&gct=hp&d=414-144&v=n12521-337&t=4");
Zeile gelöscht : user_pref("extensions.yUTWZ2F.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf(\"mindri.com\")>-1||url.indexOf(\[...]
Zeile gelöscht : user_pref("keyword.URL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=144&systemid=414&v=n12521-337&apn_dtid=BND414&apn_ptnrs=AGA&apn_uid=2370418331524594&o=APN10649&q=");

-\\ Google Chrome v34.0.1847.116

[ Datei : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Startup_urls] : hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51
Gelöscht [Homepage] : hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51
Gelöscht [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
Gelöscht [Extension] : fnjjalcnahngbokiineilafhgcehchdm
Gelöscht [Extension] : hphibigbodkkohoglgfkddblldpfohjl
Gelöscht [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
Gelöscht [Extension] : kincjchfokkeneeofpeefomkikfkiedl
Gelöscht [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
Gelöscht [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc

*************************

AdwCleaner[R0].txt - [11345 octets] - [15/05/2014 09:49:54]
AdwCleaner[S0].txt - [10312 octets] - [15/05/2014 09:50:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10373 octets] ##########
--- --- ---


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.DDS Logfile:
DDS Logfile:
Code:
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 01.11.2012 18:18:33
System Uptime: 15.05.2014 09:51:42 (1 hours ago)
.
Motherboard: TOSHIBA |  | Portable PC
Processor: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz | Socket rPGA988B | 2501/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 282 GiB total, 171,56 GiB free.
D: is CDROM ()
E: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: avast! Firewall NDIS Filter Miniport
Device ID: ROOT\SW_ASWNDISMP\0000
Manufacturer: ALWIL Software
Name: avast! Firewall NDIS Filter Miniport
PNP Device ID: ROOT\SW_ASWNDISMP\0000
Service: aswNdis
.
==== System Restore Points ===================
.
RP192: 13.05.2014 09:22:29 - Windows Update
RP193: 13.05.2014 11:35:03 - Wiederherstellungsvorgang
RP194: 13.05.2014 18:27:10 - avast! antivirus system restore point
RP195: 14.05.2014 08:38:12 - avast! antivirus system restore point
RP197: 14.05.2014 08:48:04 - Revo Uninstaller Pro's restore point - Google Toolbar for Internet Explorer
RP199: 14.05.2014 08:51:09 - Revo Uninstaller Pro's restore point - CCleaner
RP201: 14.05.2014 08:56:24 - Revo Uninstaller Pro's restore point - Free Video Converter V 3.2
RP203: 14.05.2014 09:00:11 - Revo Uninstaller Pro's restore point - TeamViewer 7
RP205: 14.05.2014 09:02:07 - Revo Uninstaller Pro's restore point - SW-Sustainer 1.80
RP206: 14.05.2014 09:38:51 - Removed Intel(R) Wireless Display.
RP207: 14.05.2014 10:38:28 - avast! Internet Security Setup
RP208: 14.05.2014 11:38:32 - Removed Intel(R) PROSet/Wireless WiFi-Software.
RP209: 14.05.2014 11:53:46 - avast! Internet Security Setup
RP211: 14.05.2014 11:56:10 - Revo Uninstaller Pro's restore point - avast! Internet Security
RP212: 14.05.2014 11:56:39 - avast! Internet Security Setup
RP213: 14.05.2014 12:28:34 - Installed Intel(R) PROSet/Wireless WiFi Software.
RP214: 14.05.2014 12:43:33 - Removed AuthenTec Fingerprint Software.
RP215: 14.05.2014 12:46:34 - Windows Update
RP216: 14.05.2014 13:01:02 - avast! Internet Security Setup
RP217: 14.05.2014 21:02:05 - Installiert RICOH Media Driver v2.14.17.02
RP218: 14.05.2014 21:33:44 - Installed Intel(R) Wireless Display.
RP219: 14.05.2014 21:39:07 - Removed TFPU
RP220: 14.05.2014 21:39:42 - Installed AuthenTec WinBio FingerPrint Software.
RP221: 14.05.2014 21:40:28 - Installed TOSHIBA Fingerprint Utility.
RP222: 15.05.2014 09:19:53 - avast! Internet Security Setup
.
==== Installed Programs ======================
.
Adobe Flash Player 13 ActiveX
Adobe Flash Player 13 Plugin
Adobe Reader XI (11.0.06) - Deutsch
ALPS Touch Pad Driver
ArcSoft PhotoStudio 5.5
AuthenTec WinBio FingerPrint Software
Bejeweled 2 Deluxe
Bejeweled 3
Bluetooth Stack for Windows by Toshiba
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MG2200 series Benutzerregistrierung
Canon MG2200 series MP Drivers
Canon MG2200 series On-screen Manual
Canon My Image Garden
Canon My Image Garden Design Files
Canon My Printer
Canon Quick Menu
CanoScan Toolbox Ver4.9
Chicken Invaders 3 - Revenge of the Yolk
Chuzzle Deluxe
Contrôle ActiveX Windows Live Mesh pour connexions à distance
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Diner Dash 2 Restaurant Rescue
FATE
Final Drive: Nitro
Galerie de photos Windows Live
Google Chrome
Google Update Helper
HappyFoto-Designer 4.5
Insaniquarium Deluxe
Intel PROSet Wireless
Intel(R) Management Engine Components
Intel(R) Network Connections Drivers
Intel(R) Processor Graphics
Intel(R) PROSet/Wireless WiFi-Software
Intel(R) Rapid Storage Technology
Intel(R) Wireless Display
Java Auto Updater
Java(TM) 6 Update 20
Junk Mail filter update
Manual CanoScan LiDE 25
Mesh Runtime
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft IntelliPoint 8.2
Microsoft Office Access MUI (German) 2010
Microsoft Office Excel MUI (German) 2010
Microsoft Office Home and Business 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (German) 2010
Microsoft Office Outlook MUI (German) 2010
Microsoft Office PowerPoint MUI (German) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Italian) 2010
Microsoft Office Proofing (German) 2010
Microsoft Office Publisher MUI (German) 2010
Microsoft Office Shared 64-bit MUI (German) 2010
Microsoft Office Shared MUI (German) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (German) 2010
Microsoft Primary Interoperability Assemblies 2005
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Mozilla Firefox 28.0 (x86 de)
Mozilla Maintenance Service
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 10 Movie ThemePack Basic
Nero 12 Content Pack
Nero Abstract Themes
Nero BackItUp 10
Nero BackItUp 10 Help (CHM)
Nero Backup Drivers
Nero Blu-ray Player
Nero BurnRights 10
Nero BurnRights 10 Help (CHM)
Nero Cliparts
Nero Control Center 10
Nero ControlCenter 10 Help (CHM)
Nero Core Components 10
Nero Disc Menus 1
Nero Disc Menus 2
Nero Disc Menus 3
Nero Disc Menus Basic
Nero Effects Basic
Nero Express 10
Nero Express 10 Help (CHM)
Nero Family and Events Themes
Nero Football (Soccer) Themes
Nero Holiday and Sports Themes
Nero Image Samples
Nero InfoTool 10
Nero InfoTool 10 Help (CHM)
Nero Kwik Media
Nero Kwik Media Help (CHM)
Nero Kwik Themes Basic
Nero Multimedia Suite 10 Essentials
Nero PiP Effects 1
Nero PiP Effects Basic
Nero Platinum Effects 12
Nero RescueAgent 10
Nero RescueAgent 10 Help (CHM)
Nero Retro Film Themes
Nero StartSmart 10
Nero StartSmart 10 Help (CHM)
Nero Update
Nero Video Samples
Nero Video Transitions 1
O2Micro OZ776 SCR Driver
Penguins!
PL-2303 USB-to-Serial
Plants vs. Zombies - Game of the Year
PlayReady PC Runtime amd64
Polar Bowler
PowerDVD
Prerequisite installer
Raccolta foto di Windows Live
Realtek High Definition Audio Driver
Renesas Electronics USB 3.0 Host Controller Driver
Revo Uninstaller Pro 3.0.7
RICOH Media Driver v2.14.17.02
ScanSoft OmniPage SE 4.0
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2863926) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype™ 6.14
Slingo Deluxe
Smiley Sync
TOSHIBA Assist
TOSHIBA Bulletin Board
TOSHIBA ConfigFree
TOSHIBA Disc Creator
TOSHIBA eco Utility
TOSHIBA Face Recognition
TOSHIBA Fingerprint Utility
TOSHIBA HDD Protection
TOSHIBA HDD/SSD Alert
Toshiba Manuals
TOSHIBA Media Controller
TOSHIBA Media Controller Plug-in
TOSHIBA Mobile Broadband Device
TOSHIBA Online Product Information
TOSHIBA PC Health Monitor
TOSHIBA Places Icon Utility
TOSHIBA Recovery Media Creator
TOSHIBA Recovery Media Creator Reminder
TOSHIBA ReelTime
TOSHIBA Security Assist
TOSHIBA Service Station
TOSHIBA Sleep Utility
TOSHIBA Sync Utility
TOSHIBA TEMPRO
TOSHIBA Value Added Package
TOSHIBA Web Camera Application
TOSHIBA Wireless Display Monitor
TOSHIBA Wireless LAN Indicator
TOSHIBA Wireless Manager
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update Installer for WildTangent Games App
VLC media player 2.0.7
Wedding Dash 2 - Rings Around the World
WildTangent Games
WildTangent Games App (Toshiba Games)
Windows Live
Windows Live Communications Platform
Windows Live Essentials
Windows Live Fotogalerie
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
Windows Live Mesh ActiveX control for remote connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Mobile Device Updater Component
Wissen für Kinder - Der Körper
Zuma Deluxe
Zune
Zune Language Pack (CHS)
Zune Language Pack (CHT)
Zune Language Pack (CSY)
Zune Language Pack (DAN)
Zune Language Pack (DEU)
Zune Language Pack (ELL)
Zune Language Pack (ESP)
Zune Language Pack (FIN)
Zune Language Pack (FRA)
Zune Language Pack (HUN)
Zune Language Pack (IND)
Zune Language Pack (ITA)
Zune Language Pack (JPN)
Zune Language Pack (KOR)
Zune Language Pack (MSL)
Zune Language Pack (NLD)
Zune Language Pack (NOR)
Zune Language Pack (PLK)
Zune Language Pack (PTB)
Zune Language Pack (PTG)
Zune Language Pack (RUS)
Zune Language Pack (SVE)
.
==== End Of File ===========================


DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041
Run by Susann at 10:04:49 on 2014-05-15
Microsoft Windows 7 Professional  6.1.7601.1.1252.43.1031.18.3975.2333 [GMT 2:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\System32\WUDFHost.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\taskeng.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\alg.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
C:\windows\system32\ThpSrv.exe
C:\windows\system32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\TOSHIBA\TECO\TecoService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\unsecapp.exe
C:\windows\System32\svchost.exe -k secsvcs
C:\windows\System32\WUDFHost.exe
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\taskhost.exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\TOSHIBA\TECO\Teco.exe
C:\Windows\System32\ThpSrv.exe
C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\windows\system32\wbem\unsecapp.exe
C:\windows\system32\SearchIndexer.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Users\Susann\Desktop\mbar\mbar.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
C:\windows\system32\igfxsrvc.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mStart Page = hxxp://www.google.com
BHO: TOSHIBA Fingerprint Utility Automatic Password Input: {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBankBHO.dll
BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} -
EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
mRun: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
mRun: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60
mRun: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
mRun: [TSUScheduler] C:\Program Files (x86)\TOSHIBA\Sync Utility\TosSyncScheduler.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SSBkgdUpdate] "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
mRun: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
mRun: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
x64-Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
x64-Run: [HSON] C:\Program Files (x86)\TOSHIBA\TBS\HSON.exe
x64-Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
x64-Run: [Teco] "C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe" /r
x64-Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
x64-Run: [ThpSrv] C:\windows\System32\thpsrv /logon
x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
x64-Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
x64-Run: [TosNC] C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe
x64-Run: [TosReelTimeMonitor] C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
x64-Run: [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
x64-Run: [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe
x64-Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
x64-Run: [Zune Launcher] "C:\Program Files\Zune\ZuneLauncher.exe"
x64-Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
x64-Run: [IgfxTray] C:\windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\windows\System32\igfxpers.exe
x64-Run: [TFPUPWDBankService] C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe /start
x64-Run: [TFPUService] C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe /start
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-IE: {97F922BD-8563-4184-87EE-8C4ACA438823} - {5D29E593-73A5-400A-B3BD-6B7A1AF05A31} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom64.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\
FF - plugin: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\npBrowserPlugin.dll
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll
.
============= SERVICES / DRIVERS ===============
.
R0 NBVol;Nero Backup Volume Filter Driver;C:\windows\System32\drivers\NBVol.sys [2012-11-2 72240]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver;C:\windows\System32\drivers\NBVolUp.sys [2012-11-2 15920]
R0 Thpdrv;TOSHIBA HDD Protection Driver;C:\windows\System32\drivers\thpdrv.sys [2009-6-29 34880]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;C:\windows\System32\drivers\Thpevm.sys [2009-6-29 14784]
R2 cfWiMAXService;ConfigFree WiMAX Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-1-28 249200]
R2 ConfigFree Service;ConfigFree Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-3-10 46448]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-7-13 769432]
R2 risdxc;risdxc;C:\windows\System32\drivers\risdxc64.sys [2011-10-7 101376]
R2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2011-2-10 112080]
R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\TOSHIBA\TECO\TecoService.exe [2011-4-7 294328]
R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\drivers\TVALZFL.sys [2009-6-19 14472]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2014-5-14 2656280]
R3 ATSwpWDF;AuthenTec TruePrint WBF Driver;C:\windows\System32\drivers\ATSwpWDF.sys [2012-1-27 1073200]
R3 ecnssndis; Mobile Broadband Driver;C:\windows\System32\drivers\wwuss64.sys [2011-10-7 26664]
R3 ecnssndisfltr; Mobile Broadband Driver Filter;C:\windows\System32\drivers\wwussf64.sys [2011-10-7 30248]
R3 IntcDAud;Intel(R) Display-Audio;C:\windows\System32\drivers\IntcDAud.sys [2011-8-23 317440]
R3 mbamchameleon;mbamchameleon;C:\windows\System32\drivers\mbamchameleon.sys [2014-5-15 91352]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\windows\System32\drivers\MBAMSwissArmy.sys [2014-5-14 119000]
R3 Mbm3CBus;Ericsson F5521gw for TOSHIBA Mobile Broadband Device (WDM);C:\windows\System32\drivers\Mbm3CBus.sys [2011-10-7 411208]
R3 Mbm3DevMt;TOSHIBA  Mobile Broadband Device Management Driver (WDM);C:\windows\System32\drivers\Mbm3DevMt.sys [2011-10-7 419912]
R3 Mbm3mdfl;TOSHIBA  Mobile Broadband Modem Filter;C:\windows\System32\drivers\Mbm3mdfl.sys [2011-10-7 19528]
R3 Mbm3Mdm;TOSHIBA  Mobile Broadband Modem Driver;C:\windows\System32\drivers\Mbm3Mdm.sys [2011-10-7 472648]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\windows\System32\drivers\nusb3hub.sys [2011-2-10 82432]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\windows\System32\drivers\nusb3xhc.sys [2011-2-10 181760]
R3 PGEffect;Pangu effect driver;C:\windows\System32\drivers\PGEffect.sys [2011-10-7 35008]
R3 t36wgps;TOSHIBA  Mobile Broadband GPS Port;C:\windows\System32\drivers\t36wgps64.sys [2011-10-7 101416]
R3 TMachInfo;TMachInfo;C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2011-10-7 54136]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-12-8 137632]
R3 TPCHSrv;TPCH Service;C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2011-4-5 828336]
R3 wdkmd;Intel WiDi KMD;C:\windows\System32\drivers\WDKMD.sys [2010-12-25 42392]
R3 WwanUsbServ;Mobile Broadband Driver;C:\windows\System32\drivers\WwanUsbMp64.sys [2011-10-7 276008]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 WMCoreService;Mobile Broadband Service;C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe servicemode --> C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe servicemode [?]
S3 dmvsc;dmvsc;C:\windows\System32\drivers\dmvsc.sys [2010-11-21 71168]
S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\windows\System32\ieetwcollector.exe [2014-4-23 111616]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-1-5 340240]
S3 Revoflt;Revoflt;C:\windows\System32\drivers\revoflt.sys [2014-5-14 31800]
S3 StorSvc;Speicherdienst;C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2011-8-5 27648]
S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WatAdminSvc;Windows-Aktivierungstechnologieservice;C:\windows\System32\Wat\WatAdminSvc.exe [2012-11-1 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2014-05-15 07:55:04        --------        d-----w-        C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 07:54:27        91352        ----a-w-        C:\windows\System32\drivers\mbamchameleon.sys
2014-05-15 07:49:52        --------        d-----w-        C:\AdwCleaner
2014-05-15 06:38:14        --------        d---a-w-        C:\windows\System32\System32
2014-05-14 19:46:37        8192        ----a-w-        C:\windows\System32\drivers\IntelMEFWVer.dll
2014-05-14 19:39:22        --------        d-----w-        C:\Users\Susann\AppData\Roaming\TFPU
2014-05-14 11:34:13        --------        d-----w-        C:\windows\System32\EventProviders
2014-05-14 10:50:56        --------        d-----w-        C:\Users\Susann\AppData\Local\CrashDumps
2014-05-14 10:24:14        314568        ----a-w-        C:\windows\System32\PROUnstl.exe
2014-05-14 10:24:08        92352        ----a-w-        C:\windows\System32\NicInstC.dll
2014-05-14 10:24:08        68264        ----a-w-        C:\windows\System32\e1cmsg.dll
2014-05-14 10:24:08        36472        ----a-w-        C:\windows\System32\NicCo36.dll
2014-05-14 10:24:08        315568        ----a-w-        C:\windows\System32\drivers\e1c62x64.sys
2014-05-14 09:51:56        31800        ----a-w-        C:\windows\System32\drivers\revoflt.sys
2014-05-14 09:51:55        --------        d-----w-        C:\Program Files\VS Revo Group
2014-05-14 08:38:46        --------        d-----w-        C:\Program Files\AVAST Software
2014-05-14 07:34:13        --------        d-----w-        C:\Intel
2014-05-14 06:46:20        --------        d-----w-        C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-14 06:46:13        --------        d-----w-        C:\ProgramData\VS Revo Group
2014-05-14 06:39:06        --------        d-s---w-        C:\windows\SysWow64\Microsoft
2014-05-14 05:47:17        --------        d-----w-        C:\ec
2014-05-14 05:17:40        --------        d-----w-        C:\SUPERDelete
2014-05-14 05:15:51        119000        ----a-w-        C:\windows\System32\drivers\MBAMSwissArmy.sys
2014-05-14 05:14:19        --------        d-----w-        C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 05:13:53        --------        d-----w-        C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-14 05:13:45        --------        d-----w-        C:\ProgramData\Malwarebytes
2014-05-13 16:27:32        10651704        ----a-w-        C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{84B590E5-3258-46A7-A35F-C3BE291FA4B3}\mpengine.dll
2014-05-09 07:36:27        --------        d-----w-        C:\ProgramData\PC Drivers HeadQuarters
2014-05-09 07:36:11        --------        d-----w-        C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-09 04:41:29        --------        d-----w-        C:\ProgramData\UAB
2014-05-09 04:41:28        --------        d-----w-        C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-09 04:39:33        --------        d-----w-        C:\ProgramData\Driver Restore
2014-05-09 04:39:13        --------        d-----w-        C:\Program Files (x86)\Driver Restore
2014-05-07 05:31:32        --------        d-s---w-        C:\windows\System32\CompatTel
2014-05-04 13:20:56        1664        ----a-w-        C:\windows\System32\ASOROSet.bin
2014-05-04 12:54:21        --------        d-----w-        C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-04 12:51:39        --------        d-----w-        C:\Program Files (x86)\Free Video Converter
2014-05-04 12:43:46        --------        d-----w-        C:\Users\Susann\AppData\Roaming\rightbackup
2014-05-04 12:43:43        16896        ----a-w-        C:\windows\System32\sasnative64.exe
2014-05-04 06:58:48        2724864        ----a-w-        C:\windows\System32\mshtml.tlb
2014-05-04 06:58:47        2724864        ----a-w-        C:\windows\SysWow64\mshtml.tlb
2014-04-24 15:37:10        --------        d-sh--w-        C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 15:37:10        --------        d-sh--w-        C:\Users\Susann\AppData\Local\EmieSiteList
2014-04-24 15:37:07        --------        d-----w-        C:\ProgramData\MyApps
2014-04-24 15:36:57        --------        d-----w-        C:\Users\Susann\AppData\Local\Programs
2014-04-24 15:27:01        --------        d-----w-        C:\ProgramData\acbd0c5fa87ad3ca
2014-04-24 15:26:08        --------        d-----w-        C:\ProgramData\InstallMate
2014-04-23 05:51:56        8011776        ----a-w-        C:\Program Files\Internet Explorer\F12Resources.dll
2014-04-23 05:49:12        --------        d-----w-        C:\Users\Susann\AppData\Local\{CE273929-4A2A-4888-BD77-B5D3D1C136F9}
2014-04-22 13:42:38        --------        d-----w-        C:\Users\Susann\AppData\Local\{9E0E4F24-674C-4569-9100-45ED02137C64}
2014-04-16 07:30:07        --------        d-----w-        C:\Users\Susann\AppData\Local\{6E9F298B-239A-49D9-ACBE-6CCAD8C0D705}
2014-04-15 13:54:01        --------        d-----w-        C:\Users\Susann\AppData\Local\{812D1B70-1926-4BC2-A6DD-284149EE9D32}
.
==================== Find3M  ====================
.
2014-04-29 13:40:25        70832        ----a-w-        C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-29 13:40:25        692400        ----a-w-        C:\windows\SysWow64\FlashPlayerApp.exe
2014-03-31 07:35:08        270496        ----a-w-        C:\windows\System32\MpSigStub.exe
2014-03-06 09:31:33        4096        ----a-w-        C:\windows\System32\ieetwcollectorres.dll
2014-03-06 08:59:04        66048        ----a-w-        C:\windows\System32\iesetup.dll
2014-03-06 08:57:34        548352        ----a-w-        C:\windows\System32\vbscript.dll
2014-03-06 08:57:20        48640        ----a-w-        C:\windows\System32\ieetwproxystub.dll
2014-03-06 08:29:40        139264        ----a-w-        C:\windows\System32\ieUnatt.exe
2014-03-06 08:29:14        111616        ----a-w-        C:\windows\System32\ieetwcollector.exe
2014-03-06 08:28:15        752640        ----a-w-        C:\windows\System32\jscript9diag.dll
2014-03-06 08:15:54        940032        ----a-w-        C:\windows\System32\MsSpellCheckingFacility.exe
2014-03-06 08:11:41        5784064        ----a-w-        C:\windows\System32\jscript9.dll
2014-03-06 08:02:34        61952        ----a-w-        C:\windows\SysWow64\iesetup.dll
2014-03-06 08:02:33        455168        ----a-w-        C:\windows\SysWow64\vbscript.dll
2014-03-06 08:01:01        51200        ----a-w-        C:\windows\SysWow64\ieetwproxystub.dll
2014-03-06 07:56:43        38400        ----a-w-        C:\windows\System32\JavaScriptCollectionAgent.dll
2014-03-06 07:46:36        4254720        ----a-w-        C:\windows\SysWow64\jscript9.dll
2014-03-06 07:38:13        112128        ----a-w-        C:\windows\SysWow64\ieUnatt.exe
2014-03-06 07:36:40        592896        ----a-w-        C:\windows\SysWow64\jscript9diag.dll
2014-03-06 07:13:43        32256        ----a-w-        C:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-03-06 07:11:15        2043904        ----a-w-        C:\windows\System32\inetcpl.cpl
2014-03-06 06:40:39        1967104        ----a-w-        C:\windows\SysWow64\inetcpl.cpl
2014-03-06 06:22:40        2260480        ----a-w-        C:\windows\System32\wininet.dll
2014-03-06 05:41:49        1789440        ----a-w-        C:\windows\SysWow64\wininet.dll
2014-03-04 09:44:21        362496        ----a-w-        C:\windows\System32\wow64win.dll
2014-03-04 09:44:21        243712        ----a-w-        C:\windows\System32\wow64.dll
2014-03-04 09:44:21        13312        ----a-w-        C:\windows\System32\wow64cpu.dll
2014-03-04 09:44:03        16384        ----a-w-        C:\windows\System32\ntvdm64.dll
2014-03-04 09:17:19        14336        ----a-w-        C:\windows\SysWow64\ntvdm64.dll
2014-03-04 09:17:05        44032        ----a-w-        C:\windows\apppatch\acwow64.dll
2014-03-04 09:16:54        25600        ----a-w-        C:\windows\SysWow64\setup16.exe
2014-03-04 09:16:18        5120        ----a-w-        C:\windows\SysWow64\wow32.dll
2014-03-04 08:09:30        7680        ----a-w-        C:\windows\SysWow64\instnm.exe
2014-03-04 08:09:29        2048        ----a-w-        C:\windows\SysWow64\user.exe
.
============= FINISH: 10:06:55,83 ===============
[/CODE]
--- --- ---
--- --- ---


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 14.05.2014
Scan Time: 07:47:29
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.03.04.09
Rootkit Database: v2014.02.20.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Susann

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 256559
Time Elapsed: 31 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 4
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe, 3932, , [68e17c835327a78f25397f2ae91a11ef]
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe, 1232, , [d277a75886f4af87f6592e692cd655ab]
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe, 616, , [d277a75886f4af87f6592e692cd655ab]
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrUI.exe, 1416, , [2128f10e5b1f3204cffe6d19729018e8]

Modules: 19
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\aspsys.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Compression.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.FileSystem.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Zip.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\mgrldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\mgrldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],

Registry Keys: 42
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\SearchQUIEHelper.DNSGuard, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\SearchQUIEHelper.DNSGuard.1, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SearchQUIEHelper.DNSGuard, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SearchQUIEHelper.DNSGuard.1, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9265F519-DD14-C93F-F025-89C675EBFD2C}, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{9265F519-DD14-C93F-F025-89C675EBFD2C}, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\DigiCCoupon.DigiCCoupon, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\DigiCCoupon.DigiCCoupon.5.3, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DigiCCoupon.DigiCCoupon, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DigiCCoupon.DigiCCoupon.5.3, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9265F519-DD14-C93F-F025-89C675EBFD2C}, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9265F519-DD14-C93F-F025-89C675EBFD2C}, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{9265F519-DD14-C93F-F025-89C675EBFD2C}, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{7DD5E91C-3864-77EC-7635-D14910C2A03E}, , [fc4d35ca641681b58bb0eaa2ef1243bd],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean Pro_is1, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean-Pro_is1, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\DATAMNGR\GENERAL, , [ba8f7e817cfe76c03ebafab544bf6997],
PUP.Optional.MoviesToolbar.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DATAMNGRCOORDINATOR, , [d277a75886f4af87f6592e692cd655ab],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Datamngr, , [88c1eb14a9d1df577433e0cabe45ec14],
PUP.Optional.MoviesToolBar.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\koyotesoftmoviestoolbarha, , [3c0d9669acceda5c62e89bfaf70ba957],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [61e8609ffc7e77bf71ca4178f40f3ac6],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\Advanced System Protector, , [1633dd22ed8d44f2d9b2733de61d926e],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-2252115965-1886336526-2189544158-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, , [3415a55aaeccfa3c6d20cbe5c43f35cb],
PUP.Optional.EZDownloader.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.MoviesToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\koyotesoftmoviestoolbarhaFF, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{e5d4f4fd-a039-4670-8354-633c30a5f54e}, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{E5D4F4FD-A039-4670-8354-633C30A5F54E}, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5D4F4FD-A039-4670-8354-633C30A5F54E}, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\koyotesoftmoviestoolbarhaIE, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\F06DEFF2-5B9C-490D-910F-35D3A9119622, , [2128f10e5b1f3204cffe6d19729018e8],

Registry Values: 3
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\DATAMNGR\GENERAL|ie_hp_supported, 1, , [ba8f7e817cfe76c03ebafab544bf6997]
PUP.Optional.MoviesToolbar.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DATAMNGRCOORDINATOR|ImagePath, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe, , [d277a75886f4af87f6592e692cd655ab]
PUP.Optional.MoviesToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{E5D4F4FD-A039-4670-8354-633C30A5F54E}, Movies Toolbar (Dist. by Koyote-Lab, Inc.), , [2128f10e5b1f3204cffe6d19729018e8]

Registry Data: 1
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51, Good: (hxxp://www.google.com), Bad: (hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51),,[cf7ad52a5525191d257a2203669e26da]

Folders: 25
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr, , [6adfba459ae053e332c507a881825ba5],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\FF, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\modules, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\lib, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\components, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64, , [2128f10e5b1f3204cffe6d19729018e8],

Files: 194
PUP.Optional.Datamngr.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\IEBHO.dll, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.Datamngr.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\IEBHO.dll, , [cb7e728d9ddd201622c32e4653af946c],
PUP.Optional.MultiPlug.A, C:\ProgramData\DiGGiCoUPon\idn.dll, , [5fead12ea3d7b2849d9e7d0fd52cad53],
PUP.Optional.MultiPlug.A, C:\ProgramData\ssAve Neto\myO.exe, , [fc4d35ca641681b58bb0eaa2ef1243bd],
Trojan.SProtector, C:\Users\Susann\AppData\Local\Temp\__tmp_1a69a88c, , [99b056a96317ea4c592425778d7456aa],
PUP.Optional.RegCleanerPro, C:\Users\Susann\Downloads\sysrc_trial_25044.exe, , [361325dae09a201694490646a8593dc3],
PUP.Optional.Koyote.A, C:\Windows\Downloaded Program Files\FreeVideoConverterSetup-r144-n-bf.exe, , [c485b946b5c547efd62f661ce21f1de3],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, , [0544fb042852f93d8d8998f6748ec838],
PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, , [e16856a9bebc87afa4345442b0529868],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\loading_withWhiteBG.avi, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe.config, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AppResource.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\asp.ico, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AspManager.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\aspsys.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\ASPUninstall.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\categories.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Chinese_asp_ZH-CN.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Chinese_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\french_asp_FR.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\French_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\german_asp_DE.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\German_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\greek_uninst_el.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Interop.IWshRuntimeLibrary.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\italian_asp_IT.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Italian_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\japanese_asp_JA.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Japanese_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\korean_uninst_ko.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Communication.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\danish_asp_DA.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Danish_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\dutch_asp_NL.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Dutch_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\eng_asp_en.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\eng_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\filetypehelper.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Finnish_asp_FI.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\scandll.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\spanish_asp_ES.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\spanish_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\SSDPTstub.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\swedish_asp_SV.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\swedish_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\System.Core.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\TPS.ico, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\norwegian_asp_NO.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Norwegian_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\polish_uninst_pl.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\portugese_uninst_pt.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\portuguese_asp_PT-BR.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Portuguese_uninst.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\russian_asp_ru.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\russian_uninst_ru.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Finnish_uninst_fi.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\traditionalcn_uninst_zh-tw.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Turkish_uninst_tr.ini, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unins000.dat, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unins000.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unins000.msg, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unrar.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Compression.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Compression.Formats.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.FileSystem.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Zip.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack\clamscan.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack\libclamav.dll, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack\readme.txt, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.com, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.pif, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.scr, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\ASP-Troubleshooter.chm, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\firefox.com, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\iexplore.exe, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\iexplore.lnk, , [68e17c835327a78f25397f2ae91a11ef],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TraditionalCn_rcp_zh-tw.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_rcp_pl.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_uninst_pl.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_rcp_pt.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_uninst_pt.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\rcpsetupapnnew_apnnew2_2221332_at.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RCPUninstall.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.dll, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\isxdl.dll, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_rcp_ko.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_uninst_ko.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_rcp_ru.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_uninst_ru.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Spanish_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\spanish_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\SSDPTstub.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Swedish_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\swedish_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\systweakasp.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TPS.ico, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\traditionalcn_uninst_zh-tw.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\turkish_rcp_tr.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Turkish_uninst_tr.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.dat, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.msg, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins001.dat, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins001.msg, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\xmllite.dll, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\CleanSchedule.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_rcp_fi.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_uninst_fi.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_rcp.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_uninst.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_rcp_el.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_uninst_el.ini, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\install_left_image.bmp, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe, , [d673de21205a3204f9661c8d699a26da],
PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, , [e762f10eb8c27abc77e94366a65d16ea],
PUP.Optional.EZDownloader.A, C:\Users\Public\Desktop\EZDownloader.lnk, , [133646b93941a294b58a6545df248878],
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr\coordinator.cfg, , [6adfba459ae053e332c507a881825ba5],
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr\general.cfg, , [6adfba459ae053e332c507a881825ba5],
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr\S-1-5-21-2252115965-1886336526-2189544158-1000.cfg, , [6adfba459ae053e332c507a881825ba5],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe, , [d277a75886f4af87f6592e692cd655ab],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\EZDownloader.Core.dll, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\EZDownloader.exe, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\EZDownloader.exe.config, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\EZDownloader.Extension.dll, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\EZDownloader.Spider.dll, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\ICSharpCode.SharpZipLib.dll, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\Interop.SHDocVw.dll, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\TabStrip.dll, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.EZDownloader.A, C:\Program Files (x86)\EZDownloader\unins000.exe, , [b5942fd01c5eef471b65196de41e12ee],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\Datamngr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrChrome.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrUI.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\favicon.ico, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\Helper.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\Internet Explorer Settings.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\mgrldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\setmgrc1.cfg, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\Uninstall.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\FF\install.ico, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\FF\uninstall.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtUser.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\install.ico, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultstb.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\custom.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\vmncode.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\custom.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\external.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\locale.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\lib\en.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\de.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\en.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\es.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\fr.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\it.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\components\windowmediator.js, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\Datamngr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\Internet Explorer Settings.exe, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\mgrldr.dll, , [2128f10e5b1f3204cffe6d19729018e8],
PUP.Optional.MoviesToolbar.A, C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg, , [2128f10e5b1f3204cffe6d19729018e8],

Physical Sectors: 0
(No malicious items detected)


(end)

RogueKiller V8.8.8 _x64_ [Feb 19 2014] durch Tigzy
mail: tigzyRK<at>gmail<dot>com

mail : tigzyRK<at>gmail<dot>com
Kommentare : hxxp://forum.adlice.com
Webseite : hxxp://www.adlice.com/softwares/roguekiller/
Blog : hxxp://www.adlice.com

Betriebssystem : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Gestartet in : Normaler Modus
Benutzer : Susann [Admin Rechte]
Funktion : Entfernen -- Datum : 05/14/2014 10:23:23
| ARK || FAK || MBR |

¤¤¤ Böswillige Prozesse : 0 ¤¤¤

¤¤¤ Registry-Einträge : 30 ¤¤¤
[IFEO] HKLM\[...]\bitguard.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\bprotect.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\bpsvc.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\browserdefender.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\browserprotect.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\browsersafeguard.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\dprotectsvc.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\jumpflip : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\protectedsearch.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\searchinstaller.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\searchprotection.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\searchprotector.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\searchsettings.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\searchsettings64.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\snapdo.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\stinst32.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\stinst64.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\umbrella.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\utiljumpflip.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\volaro : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\vonteera : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\websteroids.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[IFEO] HKLM\[...]\websteroidsservice.exe : Debugger (tasklist.exe [x]) -> GELÖSCHT
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> ERSETZT (2)
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> ERSETZT (1)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> ERSETZT (2)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> ERSETZT (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> ERSETZT (1)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> ERSETZT (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> ERSETZT (0)

¤¤¤ Geplante Tasks : 5 ¤¤¤
[V2][SUSP PATH] Susann Local Autobackup 5 4 : C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe - "C:\Users\Susann\AppData\Roaming\Nero\Nero 10\Nero BackItUp\Files\Susann Local Autobackup.nji" [7][-] -> GELÖSCHT
[V2][SUSP PATH] Susann Nero LIVEBackup 12 0 : C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann Nero LIVEBackup.nji" [x][-] -> GELÖSCHT
[V2][SUSP PATH] Susann Nero LIVEBackup Merge 12 0 : "C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe" - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann Nero LIVEBackup Merge.nji" [x][-] -> GELÖSCHT
[V2][SUSP PATH] Susann1 12 0 : C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann1.nji" [x][-] -> GELÖSCHT
[V2][SUSP PATH] Susann1 Merge 12 0 : "C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe" - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann1 Merge.nji" [x][-] -> GELÖSCHT

¤¤¤ Autostart-Einträge : 0 ¤¤¤

¤¤¤ Web-Browsern : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Bestimmte Dateien / Ordner: ¤¤¤

¤¤¤ Treiber : [NICHT GELADEN 0x0] ¤¤¤

¤¤¤ Externe Hives: ¤¤¤

¤¤¤ Infektion : ¤¤¤

¤¤¤ Hosts-Datei: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR überprüfen: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) TOSHIBA MK3261GSYG ATA Device +++++
--- User ---
[MBR] b6bea9acc59c082c889046b61c324354
[BSP] 73a258ba6928f36027a18daa0d400ec0 : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 3074048 | Size: 288755 Mo
2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 594444288 | Size: 14989 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Verbatim USB Device +++++
--- User ---
[MBR] 06b1c78234d80c6e75c1d7f1cf34a1fb
[BSP] a2eefd5e3c5b0714a0ad54b9c25931c1 : MBR Code unknown
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2640 | Size: 59998 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Die Anforderung wird nicht unterstützt. )

Abgeschlossen : << RKreport[0]_D_05142014_102323.txt >>
RKreport[0]_S_05142014_102037.txt



RogueKiller V8.8.8 _x64_ [Feb 19 2014] durch Tigzy
mail: tigzyRK<at>gmail<dot>com

mail : tigzyRK<at>gmail<dot>com
Kommentare : hxxp://forum.adlice.com
Webseite : hxxp://www.adlice.com/softwares/roguekiller/
Blog : hxxp://www.adlice.com

Betriebssystem : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Gestartet in : Normaler Modus
Benutzer : Susann [Admin Rechte]
Funktion : Reparierte DNS-Einstellungen -- Datum : 05/14/2014 10:23:56
| ARK || FAK || MBR |

¤¤¤ Böswillige Prozesse : 0 ¤¤¤

¤¤¤ Registry-Einträge : 0 ¤¤¤

¤¤¤ Treiber : [NICHT GELADEN 0x0] ¤¤¤

¤¤¤ Externe Hives: ¤¤¤

¤¤¤ Infektion : ¤¤¤

Abgeschlossen : << RKreport[0]_DN_05142014_102356.txt >>
RKreport[0]_D_05142014_102323.txt;RKreport[0]_H_05142014_102353.txt;RKreport[0]_S_05142014_102037.txt


RogueKiller V8.8.8 _x64_ [Feb 19 2014] durch Tigzy
mail: tigzyRK<at>gmail<dot>com

mail : tigzyRK<at>gmail<dot>com
Kommentare : hxxp://forum.adlice.com
Webseite : hxxp://www.adlice.com/softwares/roguekiller/
Blog : hxxp://www.adlice.com

Betriebssystem : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Gestartet in : Normaler Modus
Benutzer : Susann [Admin Rechte]
Funktion : Reparierte Hosts-Datei -- Datum : 05/14/2014 10:23:53
| ARK || FAK || MBR |

¤¤¤ Böswillige Prozesse : 0 ¤¤¤

¤¤¤ Registry-Einträge : 0 ¤¤¤

¤¤¤ Treiber : [NICHT GELADEN 0x0] ¤¤¤

¤¤¤ Externe Hives: ¤¤¤

¤¤¤ Infektion : ¤¤¤

¤¤¤ Hosts-Datei: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Hosts-Datei zurückgesetzt: ¤¤¤
127.0.0.1 localhost


Abgeschlossen : << RKreport[0]_H_05142014_102353.txt >>
RKreport[0]_D_05142014_102323.txt;RKreport[0]_S_05142014_102037.txt


RogueKiller V8.8.8 _x64_ [Feb 19 2014] durch Tigzy
mail: tigzyRK<at>gmail<dot>com

mail : tigzyRK<at>gmail<dot>com
Kommentare : hxxp://forum.adlice.com
Webseite : hxxp://www.adlice.com/softwares/roguekiller/
Blog : hxxp://www.adlice.com

Betriebssystem : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Gestartet in : Normaler Modus
Benutzer : Susann [Admin Rechte]
Funktion : Reparierte Proxy-Einstellungen -- Datum : 05/14/2014 10:23:54
| ARK || FAK || MBR |

¤¤¤ Böswillige Prozesse : 0 ¤¤¤

¤¤¤ Registry-Einträge : 0 ¤¤¤

¤¤¤ Web-Browsern : 0 ¤¤¤

¤¤¤ Treiber : [NICHT GELADEN 0x0] ¤¤¤

¤¤¤ Externe Hives: ¤¤¤

¤¤¤ Infektion : ¤¤¤

Abgeschlossen : << RKreport[0]_PR_05142014_102354.txt >>
RKreport[0]_D_05142014_102323.txt;RKreport[0]_H_05142014_102353.txt;RKreport[0]_S_05142014_102037.txt


RogueKiller V8.8.8 _x64_ [Feb 19 2014] durch Tigzy
mail: tigzyRK<at>gmail<dot>com

mail : tigzyRK<at>gmail<dot>com
Kommentare : hxxp://forum.adlice.com
Webseite : hxxp://www.adlice.com/softwares/roguekiller/
Blog : hxxp://www.adlice.com

Betriebssystem : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Gestartet in : Normaler Modus
Benutzer : Susann [Admin Rechte]
Funktion : Scannen -- Datum : 05/14/2014 10:20:37
| ARK || FAK || MBR |

¤¤¤ Böswillige Prozesse : 0 ¤¤¤

¤¤¤ Registry-Einträge : 30 ¤¤¤
[IFEO] HKLM\[...]\bitguard.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\bprotect.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\bpsvc.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\browserdefender.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\browserprotect.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\browsersafeguard.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\dprotectsvc.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\jumpflip : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\protectedsearch.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\searchinstaller.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\searchprotection.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\searchprotector.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\searchsettings.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\searchsettings64.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\snapdo.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\stinst32.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\stinst64.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\umbrella.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\utiljumpflip.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\volaro : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\vonteera : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\websteroids.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[IFEO] HKLM\[...]\websteroidsservice.exe : Debugger (tasklist.exe [x]) -> GEFUNDEN
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> GEFUNDEN
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> GEFUNDEN
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> GEFUNDEN
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> GEFUNDEN
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> GEFUNDEN
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> GEFUNDEN
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> GEFUNDEN

¤¤¤ Geplante Tasks : 5 ¤¤¤
[V2][SUSP PATH] Susann Local Autobackup 5 4 : C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe - "C:\Users\Susann\AppData\Roaming\Nero\Nero 10\Nero BackItUp\Files\Susann Local Autobackup.nji" [7][-] -> GEFUNDEN
[V2][SUSP PATH] Susann Nero LIVEBackup 12 0 : C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann Nero LIVEBackup.nji" [x][-] -> GEFUNDEN
[V2][SUSP PATH] Susann Nero LIVEBackup Merge 12 0 : "C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe" - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann Nero LIVEBackup Merge.nji" [x][-] -> GEFUNDEN
[V2][SUSP PATH] Susann1 12 0 : C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann1.nji" [x][-] -> GEFUNDEN
[V2][SUSP PATH] Susann1 Merge 12 0 : "C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\NBCore.exe" - "C:\Users\Susann\AppData\Roaming\Nero\Nero 12\Nero BackItUp\Files\Susann1 Merge.nji" [x][-] -> GEFUNDEN

¤¤¤ Autostart-Einträge : 0 ¤¤¤

¤¤¤ Web-Browsern : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Bestimmte Dateien / Ordner: ¤¤¤

¤¤¤ Treiber : [NICHT GELADEN 0x0] ¤¤¤

¤¤¤ Externe Hives: ¤¤¤

¤¤¤ Infektion : ¤¤¤

¤¤¤ Hosts-Datei: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR überprüfen: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) TOSHIBA MK3261GSYG ATA Device +++++
--- User ---
[MBR] b6bea9acc59c082c889046b61c324354
[BSP] 73a258ba6928f36027a18daa0d400ec0 : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 3074048 | Size: 288755 Mo
2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 594444288 | Size: 14989 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Verbatim USB Device +++++
--- User ---
[MBR] 06b1c78234d80c6e75c1d7f1cf34a1fb
[BSP] a2eefd5e3c5b0714a0ad54b9c25931c1 : MBR Code unknown
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2640 | Size: 59998 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Die Anforderung wird nicht unterstützt. )

Abgeschlossen : << RKreport[0]_S_05142014_102037.txt >>

RogueKiller V8.8.8 _x64_ [Feb 19 2014] durch Tigzy
mail: tigzyRK<at>gmail<dot>com

mail : tigzyRK<at>gmail<dot>com
Kommentare : hxxp://forum.adlice.com
Webseite : hxxp://www.adlice.com/softwares/roguekiller/
Blog : hxxp://www.adlice.com

Betriebssystem : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Gestartet in : Normaler Modus
Benutzer : Susann [Admin Rechte]
Funktion : Scannen -- Datum : 05/14/2014 10:25:33
| ARK || FAK || MBR |

¤¤¤ Böswillige Prozesse : 0 ¤¤¤

¤¤¤ Registry-Einträge : 0 ¤¤¤

¤¤¤ Geplante Tasks : 0 ¤¤¤

¤¤¤ Autostart-Einträge : 0 ¤¤¤

¤¤¤ Web-Browsern : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Bestimmte Dateien / Ordner: ¤¤¤

¤¤¤ Treiber : [NICHT GELADEN 0x0] ¤¤¤

¤¤¤ Externe Hives: ¤¤¤

¤¤¤ Infektion : ¤¤¤

¤¤¤ Hosts-Datei: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR überprüfen: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) TOSHIBA MK3261GSYG ATA Device +++++
--- User ---
[MBR] b6bea9acc59c082c889046b61c324354
[BSP] 73a258ba6928f36027a18daa0d400ec0 : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 3074048 | Size: 288755 Mo
2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 594444288 | Size: 14989 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Verbatim USB Device +++++
--- User ---
[MBR] 06b1c78234d80c6e75c1d7f1cf34a1fb
[BSP] a2eefd5e3c5b0714a0ad54b9c25931c1 : MBR Code unknown
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2640 | Size: 59998 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Die Anforderung wird nicht unterstützt. )

Abgeschlossen : << RKreport[0]_S_05142014_102533.txt >>
RKreport[0]_D_05142014_102323.txt;RKreport[0]_H_05142014_102353.txt;RKreport[0]_S_05142014_102037.txt



SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 05/14/2014 at 08:25 AM

Application Version : 5.7.1018

Core Rules Database Version : 11215
Trace Rules Database Version: 9027

Scan type : Complete Scan
Total Scan Time : 01:07:11

Operating System Information
Windows 7 Professional 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator

Memory items scanned : 849
Memory threats detected : 0
Registry items scanned : 77482
Registry threats detected : 0
File items scanned : 59232
File threats detected : 4

Adware.Tracking Cookie
C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Cookies\I111HW3P.txt [ /adfarm1.adition.com ]
C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Cookies\YCI7GQFO.txt [ /ad3.adfarm1.adition.com ]

Trojan.Agent/Gen-Nullo[Short]
C:\PROGRAMDATA\SSAVE NETO\MYO.EXE

Adware.InstallCore
C:\USERS\SUSANN\DOCUMENTS\SKORPIO VERLAG\PDFREADERSETUP_V3.EXE

schrauber 16.05.2014 11:46
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


suppenhuhn12 16.05.2014 12:27
Wow sind Sie schnell. Das mit der # verstehe ich nicht - ich hoffe es heißt einfach als Antwort im Originalthread...

Nachtrag: die Fehlermeldung beim Startversuch des Dienstes IKE AuthIP:
Fehler 13876: Laden fehlgeschlagen.

Soeben wollte ich die Punkte für einen neuen Thread nachholen - und tat es auch:

Anmerkung: GMER hat BlueScreen verursacht und läuft nur im abgesicherten Modus.

Im abgesicherten Modus ist das Logfile leer - im Normalmodus habe ich dann abgebrochen und das Log vor dem Bluescreen gespeichert - wobei da ein Canonding läuft also denke ich es macht weniger aus:

GMER Logfile:
Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-16 15:20:59
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.MG00 298,09GB
Running: Gmer-19357.exe; Driver: C:\Users\Susann\AppData\Local\Temp\uwaiypoc.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE[1732] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69  0000000075501465 2 bytes [50, 75]
.text  C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE[1732] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000755014bb 2 bytes [50, 75]
.text  ...                                                                                                            * 2

---- EOF - GMER 2.1 ----
--- --- ---

schrauber 17.05.2014 13:16
Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

suppenhuhn12 17.05.2014 20:45
Mahlzeit!
Mach ich - Teil 1:

Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014
Ran by Susann (administrator) on SUSANNS-TOSHIBA on 16-05-2014 14:58:12
Running from C:\Users\Susann\Desktop\Neuer Ordner
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\Sync Utility\TosSyncScheduler.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [328048 2011-01-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [296824 2010-09-25] (TOSHIBA Corporation)
HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [967544 2011-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1544104 2011-04-07] (TOSHIBA Corporation)
HKLM\...\Run: [TFPUPWDBankService] => C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe [976256 2012-03-16] (TOSHIBA)
HKLM\...\Run: [TFPUService] => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe [896384 2012-03-16] (TOSHIBA)
HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-05] (Toshiba Europe GmbH)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2011-03-30] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711576 2011-04-05] (TOSHIBA Corporation)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294712 2010-11-29] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-04] (TOSHIBA)
HKLM-x32\...\Run: [TSUScheduler] => C:\Program Files (x86)\TOSHIBA\Sync Utility\TosSyncScheduler.exe [923000 2010-05-10] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2475384 2011-01-16] (TOSHIBA CORPORATION.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2252115965-1886336526-2189544158-1000\...\MountPoints2: {01c91878-dbeb-11e3-92f2-028037ec0200} - E:\setup.exe
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=teua&bmod=teua;
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA;
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TOSHIBA Fingerprint Utility Automatic Password Input - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBankBHO.dll (TOSHIBA)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  No File
Hosts: 127.0.0.1        localhost

FireFox:
========
FF ProfilePath: C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2014-04-27]
FF HKLM-x32\...\Firefox\Extensions: [{302BCF7B-E09E-4854-9F2F-8B2DA4EF70F9}] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin
FF Extension: TOSHIBA Fingerprint Utility Automatic Password Input - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin [2014-05-14]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.0.1.3\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.0.1.3\IPSFFPlgn\ []

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.94) - C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfpfekpeleljonedmknjmnlhnncppad [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbjnhnooobmlnippkbhhijkaoggjgnp [2014-04-24]
CHR Extension: (Saving Smart) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjjalcnahngbokiineilafhgcehchdm [2014-05-01]
CHR Extension: (SNT) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcccmakdmjkkhjnfoklfjoihkfpgpddg [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjmkpimpkpleocgfgecnhgngoljojnic [2014-04-24]
CHR Extension: (Free Visio Viewer) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcpmofnlkemfkhgngcdppgbhncoflmpe [2014-04-24]
CHR Extension: (Chrome In-App Payments service) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombjndkilglemokkpneanjnpjefpbmdb [2014-04-24]
CHR HKLM-x32\...\Chrome\Extension: [iniieblifogecdlkejbmonblijmdaiog] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\ChromeAddin\ChromeAddin.crx [2012-03-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe [262288 2013-08-31] (Symantec Corporation)
S2 WMCoreService; C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe [584232 2011-01-07] (Ericsson AB)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\BASHDefs\20130814.001\BHDrvx64.sys [1525336 2013-08-13] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1500010.003\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2010-02-23] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [30248 2010-02-23] (Ericsson AB)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-02-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-21] (Symantec Corporation)
R3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [85280 2009-09-09] (O2Micro)
R1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\IPSDefs\20130805.011\IDSVia64.sys [520280 2013-08-06] (Symantec Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [411208 2010-10-31] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [419912 2010-10-31] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [19528 2010-10-31] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [472648 2010-10-31] (MCCI Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20140221.009\ENG64.SYS [126040 2014-02-21] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20140221.009\EX64.SYS [2099288 2014-02-21] (Symantec Corporation)
S3 SRTSP; C:\Windows\system32\drivers\NAVx64\1500010.003\SRTSP64.SYS [854616 2013-07-31] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1500010.003\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAVx64\1500010.003\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1500010.003\SYMEFA64.SYS [1147480 2013-08-05] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-05-15] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1500010.003\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NAVx64\1500010.003\SYMNETS.SYS [590424 2013-07-31] (Symantec Corporation)
R3 t36wgps; C:\Windows\System32\DRIVERS\t36wgps64.sys [101416 2010-12-01] (Ericsson AB)
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [276008 2010-12-28] (Ericsson AB)
S3 cleanhlp; \??\E:\EmsisoftEmergencyKit 4.0.0.17\Run\cleanhlp64.sys [X]

==================== NetSvcs (Whitelisted) ===================

suppenhuhn12 17.05.2014 20:46
Teil 2:
Code:
==================== One Month Created Files and Folders ========

2014-05-16 14:58 - 2014-05-16 14:58 - 00000000 ____D () C:\FRST
2014-05-16 14:57 - 2014-05-16 14:58 - 00000000 ____D () C:\Users\Susann\Desktop\Neuer Ordner
2014-05-16 09:03 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-05-16 09:03 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-05-16 09:03 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-05-16 09:03 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-05-16 09:03 - 2013-01-13 21:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-05-16 09:03 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-05-16 09:03 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-05-16 09:03 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-05-16 09:03 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-05-16 09:03 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-05-16 09:03 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-05-16 09:03 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-05-16 09:03 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-05-16 09:03 - 2013-01-13 21:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-05-16 09:03 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-05-16 09:03 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-05-16 09:03 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-05-16 09:03 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-05-16 09:03 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-05-16 09:03 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-05-16 09:03 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-05-16 09:03 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-05-16 09:03 - 2013-01-13 21:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-05-16 09:03 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-05-16 09:03 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-05-16 09:03 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-05-16 09:03 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-05-16 09:03 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-05-16 09:03 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-05-16 09:03 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-05-16 09:03 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-05-16 09:03 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-05-16 09:00 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-05-16 08:55 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-16 08:55 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-16 08:55 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-16 08:55 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-16 08:55 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-05-16 08:55 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-05-16 08:55 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-05-16 08:55 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-16 08:54 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-16 08:54 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-16 08:54 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-15 23:29 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-05-15 23:29 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-05-15 22:36 - 2014-05-15 22:36 - 00000134 _____ () C:\Users\Susann\Desktop\Internet Explorer-Problembehebung.url
2014-05-15 22:00 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-05-15 21:59 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-15 21:59 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 12296192 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 09075712 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 01495040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 11020800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 06041088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 02078208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 01232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-15 21:57 - 2014-02-24 16:01 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 21:57 - 2014-02-24 15:39 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 21:55 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-05-15 21:55 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-05-15 21:55 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-05-15 21:55 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-05-15 21:48 - 2013-12-10 04:28 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-15 21:48 - 2013-12-10 04:02 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-15 21:47 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-05-15 21:46 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-05-15 21:46 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-05-15 21:45 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-05-15 21:45 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-05-15 21:45 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-05-15 21:45 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-05-15 21:45 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-05-15 21:45 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-05-15 21:45 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-05-15 21:45 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-05-15 21:45 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-05-15 21:45 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-05-15 21:43 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-05-15 21:43 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-05-15 21:43 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-05-15 21:43 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-05-15 21:43 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-05-15 21:43 - 2013-09-25 04:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 21:43 - 2013-09-25 04:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 21:43 - 2013-09-25 04:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 21:43 - 2013-09-25 04:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 21:43 - 2013-09-25 04:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 21:43 - 2013-09-25 04:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 21:43 - 2013-09-25 04:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 21:43 - 2013-09-25 04:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-05-15 21:43 - 2013-09-25 03:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 21:43 - 2013-09-25 03:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 21:43 - 2013-09-25 03:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 21:43 - 2013-09-25 03:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-05-15 21:43 - 2013-09-25 03:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 21:43 - 2013-07-04 14:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-05-15 21:41 - 2013-10-05 22:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-05-15 21:41 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-05-15 21:40 - 2013-09-28 03:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-05-15 21:38 - 2013-10-03 04:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-05-15 21:38 - 2013-10-03 04:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-05-15 21:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-05-15 21:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-05-15 21:35 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 21:35 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 21:33 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-05-15 21:33 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-05-15 21:33 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-05-15 21:32 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-05-15 21:32 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-05-15 21:31 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-05-15 21:31 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-05-15 21:31 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-05-15 21:31 - 2012-11-29 00:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-05-15 21:30 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-05-15 21:30 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-05-15 21:29 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-05-15 21:29 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-05-15 21:29 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-05-15 21:29 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-05-15 21:29 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-05-15 21:29 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-05-15 21:29 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-05-15 21:29 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-05-15 21:29 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-05-15 21:29 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-05-15 21:28 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 21:28 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-15 21:28 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-05-15 21:28 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-15 21:28 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-15 21:28 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 21:28 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 21:28 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-05-15 21:28 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-15 21:28 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-15 21:28 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-05-15 21:27 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-05-15 21:27 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-05-15 21:27 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-05-15 21:27 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-05-15 21:27 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-05-15 21:27 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-05-15 21:26 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-05-15 21:25 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-05-15 21:25 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-05-15 21:23 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-05-15 21:23 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-05-15 21:23 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-15 21:22 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-05-15 21:22 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-05-15 21:16 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-05-15 21:16 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-05-15 21:16 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-05-15 21:16 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-05-15 21:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-05-15 21:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-05-15 21:14 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-15 21:13 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-05-15 21:13 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-05-15 21:13 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-05-15 21:13 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-05-15 21:13 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-05-15 21:13 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-05-15 21:12 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-05-15 21:04 - 2014-05-15 21:06 - 00418256 _____ () C:\Windows\msxml4-KB2758694-deu.LOG
2014-05-15 21:04 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-05-15 21:04 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-05-15 21:03 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-05-15 21:03 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-05-15 20:59 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-05-15 20:59 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-05-15 20:57 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 20:57 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 20:56 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-05-15 20:56 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-05-15 20:56 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-05-15 20:56 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-05-15 20:56 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-05-15 20:55 - 2012-06-16 07:15 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-05-15 20:55 - 2012-06-16 06:26 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-05-15 20:53 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-05-15 20:51 - 2012-06-09 07:43 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 20:51 - 2012-06-09 06:41 - 12873728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 20:50 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-05-15 20:50 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-05-15 20:49 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-05-15 20:49 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-05-15 20:49 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-05-15 20:49 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-05-15 20:48 - 2014-05-15 20:48 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-05-15 20:48 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-05-15 20:45 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-05-15 20:45 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-05-15 20:45 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-05-15 20:44 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-05-15 20:44 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-05-15 20:44 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-05-15 20:44 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-05-15 20:44 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-05-15 20:43 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-05-15 20:43 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-05-15 20:42 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-05-15 20:42 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-05-15 20:41 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-05-15 20:41 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-05-15 20:41 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-05-15 20:41 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-05-15 20:40 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-05-15 20:40 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-05-15 20:39 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-05-15 20:39 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-05-15 20:39 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-05-15 20:39 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-05-15 20:38 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-05-15 20:38 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-05-15 20:38 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-05-15 20:38 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-05-15 20:35 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-05-15 20:35 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-05-15 20:35 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-05-15 20:35 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-05-15 20:35 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-05-15 20:35 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-05-15 20:35 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-05-15 20:35 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-05-15 20:34 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-05-15 20:34 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-05-15 20:34 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-05-15 20:33 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-05-15 20:33 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-05-15 20:33 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-05-15 20:33 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-05-15 20:33 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-05-15 20:33 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-05-15 20:33 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-05-15 20:31 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-05-15 20:31 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-05-15 20:31 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-05-15 20:31 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-05-15 20:30 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-05-15 20:14 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-05-15 20:14 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-05-15 20:14 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-05-15 20:14 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-05-15 20:14 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-05-15 20:14 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-05-15 20:13 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-05-15 19:54 - 2014-05-15 21:53 - 01601384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-15 19:44 - 2014-05-15 23:28 - 00023509 _____ () C:\Windows\IE11_main.log
2014-05-15 19:42 - 2014-05-15 19:42 - 00086944 _____ () C:\Users\Susann\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 19:40 - 2014-05-15 19:40 - 00001454 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00001420 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00000020 ___SH () C:\Users\Susann\ntuser.ini
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 __SHD () C:\Recovery
2014-05-15 19:38 - 2014-05-15 19:39 - 00000000 ____D () C:\Windows\Panther
2014-05-15 19:36 - 2014-05-15 19:36 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-05-15 19:35 - 2014-05-16 13:58 - 01674977 _____ () C:\Windows\WindowsUpdate.log
2014-05-15 19:27 - 2014-05-15 19:26 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-05-15 19:25 - 2014-05-15 19:25 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-15 19:16 - 2014-05-15 19:22 - 00000000 ___HD () C:\$INPLACE.~TR
2014-05-15 18:44 - 2014-05-16 12:43 - 00000000 ____D () C:\Users\Susann
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Vorlagen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Startmenü
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Netzwerkumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Lokale Einstellungen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Eigene Dateien
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Druckumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Musik
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Bilder
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Verlauf
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Anwendungsdaten
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Anwendungsdaten
2014-05-15 18:44 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 18:44 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 18:43 - 2014-05-15 18:43 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-05-15 18:43 - 2014-05-15 18:43 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_t36gsen_01_09_00.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwussf64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwuss64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WwanUsbMp64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 18:41 - 2014-05-15 18:41 - 00000000 ____D () C:\Program Files\Apoint2K
2014-05-15 17:47 - 2014-05-15 19:26 - 00006585 _____ () C:\Windows\comsetup.log
2014-05-15 14:00 - 2014-05-15 17:41 - 00001014 _____ () C:\Windows\CompatibilityIssues.txt
2014-05-15 13:57 - 2014-05-15 17:37 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-05-15 13:57 - 2014-05-15 17:37 - 00001890 _____ () C:\Windows\diagerr.xml
2014-05-15 10:52 - 2014-05-15 19:24 - 00000000 ____D () C:\Windows\System32\Tasks\Norton AntiVirus
2014-05-15 10:48 - 2014-05-15 18:46 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-15 10:48 - 2014-05-15 10:48 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-05-15 10:48 - 2014-05-15 10:48 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-05-15 10:48 - 2014-05-15 10:48 - 00003216 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-15 10:48 - 2014-05-15 10:48 - 00002475 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk
2014-05-15 10:47 - 2014-05-16 09:14 - 00000000 ____D () C:\ProgramData\Norton
2014-05-15 10:47 - 2014-05-15 19:00 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64
2014-05-15 10:47 - 2014-05-15 18:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2014-05-15 10:47 - 2014-05-15 18:55 - 00000000 ____D () C:\Program Files (x86)\Norton AntiVirus
2014-05-15 10:08 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\Documents\Anti-Malware
2014-05-15 09:55 - 2014-05-15 10:07 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 09:54 - 2014-05-15 09:54 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-15 07:20 - 2010-12-02 09:49 - 00315568 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1c62x64.sys
2014-05-15 07:20 - 2010-12-02 09:49 - 00092352 _____ (Intel Corporation) C:\Windows\system32\NicInstC.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00068264 _____ (Intel Corporation) C:\Windows\system32\e1cmsg.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00003114 _____ () C:\Windows\system32\e1c62x64.din
2014-05-14 21:46 - 2010-12-20 18:08 - 00008192 _____ () C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-05-14 21:46 - 2010-10-19 16:34 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-05-14 21:39 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TFPU
2014-05-14 21:39 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Public\Toshiba
2014-05-14 21:34 - 2014-05-14 21:34 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Wireless Display.lnk
2014-05-14 21:34 - 2014-05-14 21:34 - 00002111 _____ () C:\Users\Public\Desktop\Intel(R) Wireless Display.lnk
2014-05-14 21:28 - 2011-01-12 17:51 - 00439320 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2014-05-14 13:34 - 2014-05-15 19:00 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-14 12:50 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\CrashDumps
2014-05-14 12:30 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Intel
2014-05-14 12:29 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-14 12:24 - 2010-12-02 09:49 - 00314568 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-05-14 11:54 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-14 11:51 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-14 11:51 - 2014-05-15 18:48 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-14 11:51 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-05-14 10:38 - 2014-05-15 18:46 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-14 09:41 - 2014-05-14 21:40 - 00028554 _____ () C:\Windows\DPINST.LOG
2014-05-14 09:34 - 2014-05-14 21:04 - 00000000 ____D () C:\Intel
2014-05-14 09:08 - 2014-05-16 14:58 - 00000415 _____ () C:\TMachInfo.log
2014-05-14 08:46 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-14 08:46 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-14 07:47 - 2014-05-16 09:27 - 00000000 ____D () C:\ec
2014-05-14 07:17 - 2014-05-14 07:17 - 00000000 ____D () C:\SUPERDelete
2014-05-14 07:15 - 2014-05-15 09:54 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 07:14 - 2014-05-14 07:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 07:13 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-14 07:13 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 18:51 - 2014-05-14 07:01 - 00008224 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-05-09 09:36 - 2014-05-15 19:16 - 00000000 ____D () C:\Users\Susann\Downloads\PC Drivers HeadQuarters
2014-05-09 09:36 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\PC Drivers HeadQuarters
2014-05-09 09:36 - 2014-05-15 18:55 - 00000000 ____D () C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-09 06:41 - 2014-05-15 19:16 - 00000000 ____D () C:\Users\Susann\Downloads\Driver Restore
2014-05-09 06:41 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-09 06:41 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\UAB
2014-05-09 06:39 - 2014-05-15 18:57 - 00000000 ____D () C:\ProgramData\Driver Restore
2014-05-08 19:31 - 2014-05-08 19:31 - 00001006 _____ () C:\WirelessDiagLog.csv
2014-05-07 19:00 - 2014-05-07 19:00 - 02076672 _____ () C:\Users\Susann\Desktop\Vortrag Franz Hörmann_Otmar_Mai_2014.ppt
2014-05-07 07:31 - 2014-05-15 19:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 15:20 - 2014-05-04 15:25 - 00001664 _____ () C:\Windows\system32\ASOROSet.bin
2014-05-04 15:02 - 2014-05-04 15:02 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial (1).exe
2014-05-04 14:58 - 2014-05-04 14:58 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial.exe
2014-05-04 14:54 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-04 14:43 - 2014-05-04 14:43 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\rightbackup
2014-05-04 14:43 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieSiteList
2014-04-24 17:27 - 2014-05-15 18:57 - 00000000 ____D () C:\ProgramData\acbd0c5fa87ad3ca
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Gast
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Administrator
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-23 07:52 - 2014-03-06 11:31 - 00004096 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 07:52 - 2014-03-06 10:28 - 00752640 ____N (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 07:52 - 2014-03-06 09:56 - 00038400 ____N (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 07:52 - 2014-03-06 09:13 - 00032256 ____N (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 07:51 - 2014-03-06 10:57 - 00048640 ____N (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 07:51 - 2014-03-06 10:29 - 00111616 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 07:51 - 2014-03-06 10:15 - 00940032 ____N (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 07:51 - 2014-03-06 10:11 - 05784064 ____N (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 07:51 - 2014-03-06 10:01 - 00051200 ____N (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 07:51 - 2014-03-06 09:46 - 04254720 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 07:51 - 2014-03-06 09:36 - 00592896 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-23 07:49 - 2014-04-23 07:49 - 00000000 ____D () C:\Users\Susann\AppData\Local\{CE273929-4A2A-4888-BD77-B5D3D1C136F9}
2014-04-22 15:42 - 2014-04-22 15:42 - 00000000 ____D () C:\Users\Susann\AppData\Local\{9E0E4F24-674C-4569-9100-45ED02137C64}
2014-04-16 09:30 - 2014-04-16 09:30 - 00000000 ____D () C:\Users\Susann\AppData\Local\{6E9F298B-239A-49D9-ACBE-6CCAD8C0D705}

==================== One Month Modified Files and Folders =======

2014-05-16 14:58 - 2014-05-16 14:58 - 00000000 ____D () C:\FRST
2014-05-16 14:58 - 2014-05-16 14:57 - 00000000 ____D () C:\Users\Susann\Desktop\Neuer Ordner
2014-05-16 14:58 - 2014-05-14 09:08 - 00000415 _____ () C:\TMachInfo.log
2014-05-16 14:56 - 2011-08-05 21:38 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-16 14:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-16 14:55 - 2009-07-14 06:51 - 00499168 _____ () C:\Windows\setupact.log
2014-05-16 13:58 - 2014-05-15 19:35 - 01675203 _____ () C:\Windows\WindowsUpdate.log
2014-05-16 13:58 - 2009-07-14 06:45 - 00036000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-16 13:58 - 2009-07-14 06:45 - 00036000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-16 13:49 - 2010-11-21 08:50 - 00702436 _____ () C:\Windows\system32\perfh007.dat
2014-05-16 13:49 - 2010-11-21 08:50 - 00150044 _____ () C:\Windows\system32\perfc007.dat
2014-05-16 13:49 - 2009-07-14 07:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-16 12:43 - 2014-05-15 18:44 - 00000000 ____D () C:\Users\Susann
2014-05-16 12:40 - 2012-11-08 21:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-16 12:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-16 10:48 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-16 10:20 - 2011-08-05 21:38 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-16 10:09 - 2011-08-05 21:08 - 00000000 ____D () C:\Program Files (x86)\Toshiba TEMPRO
2014-05-16 10:09 - 2011-08-05 20:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-05-16 09:30 - 2009-07-14 06:45 - 00344536 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 09:29 - 2010-11-21 05:47 - 00036276 _____ () C:\Windows\PFRO.log
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-05-16 09:27 - 2014-05-14 07:47 - 00000000 ____D () C:\ec
2014-05-16 09:14 - 2014-05-15 10:47 - 00000000 ____D () C:\ProgramData\Norton
2014-05-15 23:28 - 2014-05-15 19:44 - 00023509 _____ () C:\Windows\IE11_main.log
2014-05-15 22:36 - 2014-05-15 22:36 - 00000134 _____ () C:\Users\Susann\Desktop\Internet Explorer-Problembehebung.url
2014-05-15 22:13 - 2012-11-01 19:29 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 22:13 - 2012-11-01 19:18 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 22:12 - 2011-10-07 19:28 - 00000438 __RSH () C:\ProgramData\ntuser.pol
2014-05-15 22:05 - 2010-11-21 09:01 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-15 22:05 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-15 22:05 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-15 22:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-15 21:53 - 2014-05-15 19:54 - 01601384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-15 21:06 - 2014-05-15 21:04 - 00418256 _____ () C:\Windows\msxml4-KB2758694-deu.LOG
2014-05-15 21:05 - 2012-11-01 22:40 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-15 20:48 - 2014-05-15 20:48 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-05-15 20:12 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-05-15 19:42 - 2014-05-15 19:42 - 00086944 _____ () C:\Users\Susann\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 19:40 - 2014-05-15 19:40 - 00001454 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00001420 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00000020 ___SH () C:\Users\Susann\ntuser.ini
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 __SHD () C:\Recovery
2014-05-15 19:39 - 2014-05-15 19:38 - 00000000 ____D () C:\Windows\Panther
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-15 19:38 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-05-15 19:38 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-05-15 19:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 19:36 - 2014-05-15 19:36 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-05-15 19:26 - 2014-05-15 19:27 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-05-15 19:26 - 2014-05-15 17:47 - 00006585 _____ () C:\Windows\comsetup.log
2014-05-15 19:25 - 2014-05-15 19:25 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-05-15 19:24 - 2014-05-15 10:52 - 00000000 ____D () C:\Windows\System32\Tasks\Norton AntiVirus
2014-05-15 19:24 - 2012-11-01 19:38 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-05-15 19:24 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-05-15 19:24 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-05-15 19:24 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-15 19:22 - 2014-05-15 19:16 - 00000000 ___HD () C:\$INPLACE.~TR
2014-05-15 19:20 - 2009-07-14 06:46 - 00005157 _____ () C:\Windows\DtcInstall.log
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 19:17 - 2014-01-17 11:53 - 00000000 ___RD () C:\Users\Susann\Podcasts
2014-05-15 19:17 - 2013-01-29 13:17 - 00000000 ____D () C:\Users\Susann\Smiley
2014-05-15 19:16 - 2014-05-09 09:36 - 00000000 ____D () C:\Users\Susann\Downloads\PC Drivers HeadQuarters
2014-05-15 19:16 - 2014-05-09 06:41 - 00000000 ____D () C:\Users\Susann\Downloads\Driver Restore
2014-05-15 19:16 - 2014-03-31 08:31 - 00000000 ____D () C:\Users\Susann\Downloads\look good
2014-05-15 19:16 - 2014-03-18 14:01 - 00000000 ____D () C:\Users\Susann\Downloads\results
2014-05-15 19:16 - 2014-03-18 12:41 - 00000000 ____D () C:\Users\Susann\Downloads\convention
2014-05-15 19:16 - 2014-03-11 10:30 - 00000000 ____D () C:\Users\Susann\Downloads\Gen Y
2014-05-15 19:16 - 2014-02-11 14:34 - 00000000 ____D () C:\Users\Susann\Downloads\food
2014-05-15 19:16 - 2014-02-06 14:35 - 00000000 ____D () C:\Users\Susann\Downloads\Lifestyle
2014-05-15 19:16 - 2014-01-29 10:24 - 00000000 ____D () C:\Users\Susann\Downloads\events
2014-05-15 19:16 - 2014-01-12 13:44 - 00000000 ____D () C:\Users\Susann\Downloads\NWM
2014-05-15 19:16 - 2013-12-15 18:53 - 00000000 ____D () C:\Users\Susann\Downloads\Fun
2014-05-15 19:16 - 2013-11-18 18:13 - 00000000 ____D () C:\Users\Susann\Downloads\24Stunden
2014-05-15 19:16 - 2013-03-28 14:26 - 00000000 ____D () C:\Users\Susann\Downloads\Quotes
2014-05-15 19:16 - 2013-03-05 13:00 - 00000000 ____D () C:\Users\Susann\Downloads\JP_Business
2014-05-15 19:16 - 2013-03-05 13:00 - 00000000 ____D () C:\Users\Susann\Downloads\Gesundes
2014-05-15 19:16 - 2013-03-05 12:59 - 00000000 ____D () C:\Users\Susann\Downloads\Bücher
2014-05-15 19:16 - 2013-03-03 11:39 - 00000000 ____D () C:\Users\Susann\Downloads\Yoga
2014-05-15 19:16 - 2013-02-18 09:29 - 00000000 ____D () C:\Users\Susann\Downloads\Shape
2014-05-15 19:16 - 2012-11-07 18:04 - 00000000 ____D () C:\Users\Susann\Downloads\lide25vst6411011ade
2014-05-15 19:16 - 2012-11-02 16:29 - 00000000 ___RD () C:\Users\Susann\Dropbox
2014-05-15 19:16 - 2012-11-01 23:58 - 00000000 ____D () C:\Users\Susann\Documents\Reg Files
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ___RD () C:\Users\Susann\Documents\Systemsicherung
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ____D () C:\Users\Susann\Documents\Wohnung
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ____D () C:\Users\Susann\Documents\skorpio Verlag
2014-05-15 19:16 - 2012-11-01 23:50 - 00000000 ____D () C:\Users\Susann\Documents\Privat
2014-05-15 19:16 - 2012-11-01 23:48 - 00000000 ____D () C:\Users\Susann\Documents\Personal
2014-05-15 19:15 - 2012-11-05 21:47 - 00000000 ____D () C:\Users\Susann\Documents\My Albums
2014-05-15 19:15 - 2012-11-05 16:45 - 00000000 ____D () C:\Users\Susann\Documents\Fax
2014-05-15 19:15 - 2012-11-01 23:46 - 00000000 ____D () C:\Users\Susann\Documents\NSA
2014-05-15 19:15 - 2012-11-01 23:42 - 00000000 ___RD () C:\Users\Susann\Documents\NEUE_SICHERUNG
2014-05-15 19:15 - 2012-11-01 23:34 - 00000000 ____D () C:\Users\Susann\Documents\Locations
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Konzert
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Kindergruppe, MKN v. USB Stick
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Euro
2014-05-15 19:15 - 2012-11-01 20:44 - 00000000 ____D () C:\Users\Susann\Documents\Outlook-Dateien
2014-05-15 19:14 - 2012-11-01 23:30 - 00000000 ____D () C:\Users\Susann\Documents\Diverse
2014-05-15 19:14 - 2012-11-01 23:30 - 00000000 ____D () C:\Users\Susann\Documents\Divers
2014-05-15 19:14 - 2012-11-01 23:29 - 00000000 ___RD () C:\Users\Susann\Documents\CyberLink
2014-05-15 19:14 - 2012-11-01 23:29 - 00000000 ____D () C:\Users\Susann\Documents\Buchhaltung
2014-05-15 19:14 - 2012-11-01 23:24 - 00000000 ____D () C:\Users\Susann\Documents\BILLA
2014-05-15 19:13 - 2014-05-15 10:08 - 00000000 ____D () C:\Users\Susann\Documents\Anti-Malware
2014-05-15 19:13 - 2014-05-14 21:39 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TFPU
2014-05-15 19:13 - 2014-05-14 07:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-15 19:13 - 2014-05-04 14:54 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-15 19:13 - 2014-02-03 09:05 - 00000000 ____D () C:\Users\Susann\Desktop\2014_02_03
2014-05-15 19:13 - 2014-01-04 17:46 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\CyberLink
2014-05-15 19:13 - 2013-12-07 21:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Sonic Solutions
2014-05-15 19:13 - 2013-09-13 17:28 - 00000000 ____D () C:\Users\Susann\Desktop\Lillys Fest
2014-05-15 19:13 - 2013-08-06 13:10 - 00000000 ____D () C:\Users\Susann\Desktop\2013_08_06
2014-05-15 19:13 - 2013-06-26 11:51 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TeamViewer
2014-05-15 19:13 - 2013-06-10 16:01 - 00000000 ____D () C:\Users\Susann\Documents\24Stunden
2014-05-15 19:13 - 2013-05-12 21:43 - 00000000 ____D () C:\Users\Susann\Desktop\calimera
2014-05-15 19:13 - 2013-04-20 13:47 - 00000000 ____D () C:\Users\Susann\Desktop\Aufwachen dein Leben wartet - Lynn Grabhorn
2014-05-15 19:13 - 2012-12-16 19:48 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\dvdcss
2014-05-15 19:13 - 2012-11-27 20:09 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\InstallShield
2014-05-15 19:13 - 2012-11-07 22:31 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TOSHIBA Online Product Information
2014-05-15 19:13 - 2012-11-04 20:47 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Canon
2014-05-15 19:13 - 2012-11-02 16:23 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Dropbox
2014-05-15 19:13 - 2012-11-02 11:25 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Macromedia
2014-05-15 19:13 - 2012-11-01 23:59 - 00000000 ____D () C:\Users\Susann\Desktop\Canon
2014-05-15 19:13 - 2012-11-01 23:20 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\vlc
2014-05-15 19:13 - 2012-11-01 22:58 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\ScanSoft
2014-05-15 19:13 - 2012-11-01 22:30 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Nero
2014-05-15 19:13 - 2012-11-01 22:24 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Skype
2014-05-15 19:13 - 2012-11-01 21:53 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Mozilla
2014-05-15 19:13 - 2012-11-01 19:29 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Toshiba
2014-05-15 19:13 - 2012-11-01 19:28 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\WinBatch
2014-05-15 19:13 - 2012-11-01 19:18 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Intel
2014-05-15 19:12 - 2014-05-14 12:50 - 00000000 ____D () C:\Users\Susann\AppData\Local\CrashDumps
2014-05-15 19:12 - 2014-05-14 08:46 - 00000000 ____D () C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-15 19:12 - 2014-05-09 06:41 - 00000000 ____D () C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-15 19:12 - 2014-03-24 10:04 - 00000000 ____D () C:\Users\Susann\AppData\Local\Skype
2014-05-15 19:12 - 2014-03-04 10:16 - 00000000 ____D () C:\Users\Susann\AppData\Local\Windows Live
2014-05-15 19:12 - 2013-06-20 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\HappyFoto-Designer
2014-05-15 19:12 - 2013-03-25 22:08 - 00000000 ____D () C:\Users\Susann\AppData\Local\Citrix
2014-05-15 19:12 - 2012-11-08 21:11 - 00000000 ____D () C:\Users\Susann\AppData\Local\Macromedia
2014-05-15 19:12 - 2012-11-05 21:47 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\ArcSoft
2014-05-15 19:12 - 2012-11-01 23:05 - 00000000 ____D () C:\Users\Susann\AppData\Local\Scansoft
2014-05-15 19:12 - 2012-11-01 22:40 - 00000000 ____D () C:\Users\Susann\AppData\Local\Adobe
2014-05-15 19:12 - 2012-11-01 22:31 - 00000000 ____D () C:\Users\Susann\AppData\Local\Nero_AG
2014-05-15 19:12 - 2012-11-01 22:30 - 00000000 ____D () C:\Users\Susann\AppData\Local\Nero
2014-05-15 19:12 - 2012-11-01 21:53 - 00000000 ____D () C:\Users\Susann\AppData\Local\Mozilla
2014-05-15 19:12 - 2012-11-01 20:44 - 00000000 ____D () C:\Users\Susann\AppData\Local\Apps\2.0
2014-05-15 19:12 - 2012-11-01 19:45 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Adobe
2014-05-15 19:12 - 2012-11-01 19:42 - 00000000 ____D () C:\Users\Susann\AppData\Local\Google
2014-05-15 19:12 - 2012-11-01 19:29 - 00000000 ____D () C:\Users\Susann\AppData\Local\TOSHIBA
2014-05-15 19:12 - 2012-11-01 19:26 - 00000000 ____D () C:\Users\Susann\AppData\Local\VirtualStore
2014-05-15 19:03 - 2011-10-07 19:51 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-05-15 19:03 - 2011-10-07 19:32 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-05-15 19:03 - 2010-11-21 08:49 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-05-15 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-05-15 19:02 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\tr
2014-05-15 19:02 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-05-15 19:00 - 2014-05-15 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64
2014-05-15 19:00 - 2014-05-14 13:34 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-15 19:00 - 2014-05-07 07:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 19:00 - 2013-06-26 15:19 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-05-15 19:00 - 2012-11-27 20:09 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-05-15 19:00 - 2012-11-08 21:10 - 00000000 ____D () C:\Windows\system32\Macromed
2014-05-15 19:00 - 2011-10-07 19:59 - 00000000 ____D () C:\Windows\OemDrv
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\sv
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\sk
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\ru
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\pt
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\pl
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\no
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\hu
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\fi
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\es
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\el
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\da
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\cs
2014-05-15 19:00 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\nl
2014-05-15 19:00 - 2011-02-11 12:24 - 00000000 ____D () C:\Windows\system32\nl
2014-05-15 19:00 - 2011-02-11 12:15 - 00000000 ____D () C:\Windows\system32\it
2014-05-15 19:00 - 2011-02-11 12:05 - 00000000 ____D () C:\Windows\system32\fr
2014-05-15 19:00 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-05-15 19:00 - 2010-11-21 08:49 - 00000000 ____D () C:\Windows\system32\de
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 18:59 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\it
2014-05-15 18:59 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\fr
2014-05-15 18:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-05-15 18:58 - 2014-05-15 10:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2014-05-15 18:58 - 2014-05-14 21:39 - 00000000 ____D () C:\Users\Public\Toshiba
2014-05-15 18:58 - 2014-05-14 12:30 - 00000000 ____D () C:\ProgramData\Intel
2014-05-15 18:58 - 2014-05-14 12:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-15 18:58 - 2014-05-14 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-15 18:58 - 2014-05-14 08:46 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-15 18:58 - 2014-05-14 07:13 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 18:58 - 2014-05-09 09:36 - 00000000 ____D () C:\ProgramData\PC Drivers HeadQuarters
2014-05-15 18:58 - 2014-05-09 06:41 - 00000000 ____D () C:\ProgramData\UAB
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Gast
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Administrator
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 18:58 - 2014-03-24 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-15 18:58 - 2014-01-17 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
2014-05-15 18:58 - 2013-12-30 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2014-05-15 18:58 - 2013-07-31 10:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-15 18:58 - 2013-06-26 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series Benutzerregistrierung
2014-05-15 18:58 - 2013-06-26 15:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series Manual
2014-05-15 18:58 - 2013-06-26 15:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series
2014-05-15 18:58 - 2013-06-25 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-05-15 18:58 - 2013-06-20 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HappyFoto-Designer
2014-05-15 18:58 - 2013-03-14 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-15 18:58 - 2012-11-02 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bob
2014-05-15 18:58 - 2012-11-01 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon JX210P series Manual
2014-05-15 18:58 - 2012-11-01 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4.0
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-15 18:58 - 2012-11-01 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoStudio 5.5
2014-05-15 18:58 - 2012-11-01 22:22 - 00000000 ____D () C:\ProgramData\TOSHIBA Tempro
2014-05-15 18:58 - 2012-11-01 22:22 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2014-05-15 18:58 - 2012-11-01 21:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-15 18:58 - 2012-11-01 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus
2014-05-15 18:58 - 2012-11-01 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-15 18:58 - 2012-11-01 19:37 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 18:58 - 2012-11-01 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay
2014-05-15 18:58 - 2012-11-01 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2014-05-15 18:58 - 2012-11-01 19:19 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-05-15 18:58 - 2011-10-07 19:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2014-05-15 18:58 - 2011-10-07 19:42 - 00000000 ____D () C:\ProgramData\Toshiba
2014-05-15 18:58 - 2011-08-05 21:41 - 00000000 ____D () C:\ProgramData\McAfee
2014-05-15 18:58 - 2011-08-05 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-15 18:58 - 2011-08-05 21:36 - 00000000 ____D () C:\ProgramData\WildTangent
2014-05-15 18:58 - 2011-08-05 21:33 - 00000000 ____D () C:\Windows\de
2014-05-15 18:58 - 2011-08-05 21:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-05-15 18:58 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\en
2014-05-15 18:58 - 2011-08-05 21:25 - 00000000 ____D () C:\ProgramData\Skype
2014-05-15 18:58 - 2011-08-05 21:14 - 00000000 ____D () C:\ProgramData\Nero
2014-05-15 18:58 - 2011-08-05 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-05-15 18:58 - 2011-08-05 20:57 - 00000000 ____D () C:\ProgramData\Sun
2014-05-15 18:58 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-15 18:58 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-15 18:58 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 18:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors
2014-05-15 18:57 - 2014-05-09 06:39 - 00000000 ____D () C:\ProgramData\Driver Restore
2014-05-15 18:57 - 2014-04-24 17:27 - 00000000 ____D () C:\ProgramData\acbd0c5fa87ad3ca
2014-05-15 18:57 - 2013-12-30 17:15 - 00000000 ____D () C:\ProgramData\CyberLink
2014-05-15 18:57 - 2013-10-20 18:47 - 00000000 ____D () C:\Program Files (x86)\WfK
2014-05-15 18:57 - 2013-06-26 15:52 - 00000000 ___HD () C:\ProgramData\CanonIJMIG
2014-05-15 18:57 - 2013-06-26 15:51 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-05-15 18:57 - 2013-06-26 15:51 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-05-15 18:57 - 2013-06-26 15:48 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2014-05-15 18:57 - 2013-06-26 15:33 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-05-15 18:57 - 2013-06-25 17:09 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-05-15 18:57 - 2013-06-25 17:05 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter
2014-05-15 18:57 - 2013-06-20 19:10 - 00000000 ____D () C:\ProgramData\HappyFoto-Designer
2014-05-15 18:57 - 2012-11-01 23:20 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-05-15 18:57 - 2012-11-01 23:12 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-15 18:57 - 2012-11-01 23:11 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-05-15 18:57 - 2011-10-07 19:23 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-05-15 18:57 - 2011-08-05 21:37 - 00000000 ____D () C:\ProgramData\Google
2014-05-15 18:57 - 2011-08-05 21:36 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-05-15 18:57 - 2011-08-05 21:36 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA Games
2014-05-15 18:57 - 2011-08-05 21:28 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-15 18:57 - 2011-08-05 21:03 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-15 18:56 - 2011-08-05 20:58 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA
2014-05-15 18:55 - 2014-05-15 10:47 - 00000000 ____D () C:\Program Files (x86)\Norton AntiVirus
2014-05-15 18:55 - 2014-05-09 09:36 - 00000000 ____D () C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-15 18:55 - 2014-03-24 10:04 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-15 18:55 - 2013-01-28 13:17 - 00000000 ____D () C:\Program Files (x86)\NSA
2014-05-15 18:55 - 2012-11-02 12:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-05-15 18:55 - 2012-11-01 22:57 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-15 18:55 - 2011-10-07 19:32 - 00000000 ____D () C:\Program Files (x86)\Ricoh
2014-05-15 18:55 - 2011-10-07 19:28 - 00000000 ____D () C:\Program Files (x86)\O2Micro OZ776 SCR Driver
2014-05-15 18:55 - 2011-10-07 19:23 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-05-15 18:55 - 2011-10-07 19:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-15 18:55 - 2011-08-05 21:14 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-05-15 18:53 - 2014-03-30 08:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-15 18:53 - 2013-03-14 10:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-15 18:53 - 2012-11-01 21:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-15 18:53 - 2011-08-05 21:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-15 18:53 - 2011-08-05 21:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-15 18:52 - 2012-11-02 16:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2014-05-15 18:52 - 2012-11-01 19:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-15 18:52 - 2011-10-07 19:48 - 00000000 ____D () C:\Program Files (x86)\Intel Corporation
2014-05-15 18:52 - 2011-10-07 19:09 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-15 18:52 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-15 18:52 - 2011-08-05 20:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-15 18:51 - 2013-12-30 17:15 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-05-15 18:51 - 2013-06-20 19:10 - 00000000 ____D () C:\Program Files (x86)\HappyFoto-Designer
2014-05-15 18:51 - 2011-08-05 21:38 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-15 18:49 - 2012-11-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-05-15 18:49 - 2011-10-07 19:35 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-05-15 18:48 - 2014-05-14 11:51 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-15 18:48 - 2014-01-17 11:51 - 00000000 ____D () C:\Program Files\Zune
2014-05-15 18:48 - 2012-11-02 15:59 - 00000000 ____D () C:\Program Files (x86)\bob
2014-05-15 18:48 - 2012-11-01 22:53 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-05-15 18:48 - 2012-11-01 22:04 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-15 18:48 - 2011-08-05 21:27 - 00000000 ____D () C:\Program Files\Windows Live
2014-05-15 18:48 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files\TOSHIBA
2014-05-15 18:47 - 2013-03-14 10:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-15 18:47 - 2012-11-01 19:57 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint
2014-05-15 18:47 - 2012-11-01 19:38 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-15 18:47 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files\PlayReady
2014-05-15 18:46 - 2014-05-15 10:48 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-15 18:46 - 2014-05-14 10:38 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-15 18:46 - 2013-06-26 15:33 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-05-15 18:46 - 2013-06-26 15:19 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-05-15 18:46 - 2013-06-25 17:05 - 00000000 ____D () C:\Program Files\Canon
2014-05-15 18:46 - 2011-10-07 19:43 - 00000000 ____D () C:\Program Files\Fingerprint Sensor
2014-05-15 18:46 - 2011-10-07 19:16 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-15 18:46 - 2011-10-07 19:13 - 00000000 ____D () C:\Program Files\Intel
2014-05-15 18:46 - 2011-08-05 21:38 - 00000000 ____D () C:\Program Files\Google
2014-05-15 18:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-05-15 18:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Vorlagen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Startmenü
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Netzwerkumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Lokale Einstellungen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Eigene Dateien
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Druckumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Musik
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Bilder
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Verlauf
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Anwendungsdaten
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Anwendungsdaten
2014-05-15 18:43 - 2014-05-15 18:43 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-05-15 18:43 - 2014-05-15 18:43 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_t36gsen_01_09_00.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwussf64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwuss64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WwanUsbMp64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2014-05-15 18:43 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 18:41 - 2014-05-15 18:41 - 00000000 ____D () C:\Program Files\Apoint2K
2014-05-15 18:39 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\CSC
2014-05-15 17:41 - 2014-05-15 14:00 - 00001014 _____ () C:\Windows\CompatibilityIssues.txt
2014-05-15 17:37 - 2014-05-15 13:57 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-05-15 17:37 - 2014-05-15 13:57 - 00001890 _____ () C:\Windows\diagerr.xml
2014-05-15 10:48 - 2014-05-15 10:48 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-05-15 10:48 - 2014-05-15 10:48 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-05-15 10:48 - 2014-05-15 10:48 - 00003216 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-15 10:48 - 2014-05-15 10:48 - 00002475 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk
2014-05-15 10:07 - 2014-05-15 09:55 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 09:54 - 2014-05-15 09:54 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-15 09:54 - 2014-05-14 07:15 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-15 09:22 - 2012-11-01 22:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-14 21:40 - 2014-05-14 09:41 - 00028554 _____ () C:\Windows\DPINST.LOG
2014-05-14 21:34 - 2014-05-14 21:34 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Wireless Display.lnk
2014-05-14 21:34 - 2014-05-14 21:34 - 00002111 _____ () C:\Users\Public\Desktop\Intel(R) Wireless Display.lnk
2014-05-14 21:10 - 2011-10-07 19:17 - 00015394 _____ () C:\Windows\system32\results.xml
2014-05-14 21:04 - 2014-05-14 09:34 - 00000000 ____D () C:\Intel
2014-05-14 13:35 - 2011-10-07 19:31 - 01614907 _____ () C:\Windows\WindowsUpdate (1).log
2014-05-14 13:03 - 2012-11-01 22:08 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-05-14 12:46 - 2013-03-25 22:09 - 00000000 ____D () C:\Program Files (x86)\Citrix
2014-05-14 07:17 - 2014-05-14 07:17 - 00000000 ____D () C:\SUPERDelete
2014-05-14 07:14 - 2014-05-14 07:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 07:01 - 2014-05-13 18:51 - 00008224 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-05-13 18:22 - 2012-11-01 19:36 - 00000000 __RHD () C:\MSOCache
2014-05-08 19:31 - 2014-05-08 19:31 - 00001006 _____ () C:\WirelessDiagLog.csv
2014-05-07 19:00 - 2014-05-07 19:00 - 02076672 _____ () C:\Users\Susann\Desktop\Vortrag Franz Hörmann_Otmar_Mai_2014.ppt
2014-05-04 15:25 - 2014-05-04 15:20 - 00001664 _____ () C:\Windows\system32\ASOROSet.bin
2014-05-04 15:02 - 2014-05-04 15:02 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial (1).exe
2014-05-04 14:58 - 2014-05-04 14:58 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial.exe
2014-05-04 14:54 - 2009-07-14 04:34 - 00000668 _____ () C:\Windows\win.ini
2014-05-04 14:43 - 2014-05-04 14:43 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\rightbackup
2014-04-29 15:40 - 2012-11-08 21:10 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 15:40 - 2012-11-08 21:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 15:40 - 2012-11-02 11:16 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieSiteList
2014-04-23 07:49 - 2014-04-23 07:49 - 00000000 ____D () C:\Users\Susann\AppData\Local\{CE273929-4A2A-4888-BD77-B5D3D1C136F9}
2014-04-22 15:42 - 2014-04-22 15:42 - 00000000 ____D () C:\Users\Susann\AppData\Local\{9E0E4F24-674C-4569-9100-45ED02137C64}
2014-04-16 09:30 - 2014-04-16 09:30 - 00000000 ____D () C:\Users\Susann\AppData\Local\{6E9F298B-239A-49D9-ACBE-6CCAD8C0D705}

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-15 18:39

==================== End Of Log ============================

schrauber 18.05.2014 18:59
Addition.txt fehlt noch :)

suppenhuhn12 18.05.2014 19:13
sorry - jetzt wird's ja schon peinlich

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05-2014
Ran by Susann at 2014-05-16 14:59:46
Running from C:\Users\Susann\Desktop\Neuer Ordner
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton AntiVirus (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton AntiVirus (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.106.303.203 - ALPS ELECTRIC CO., LTD.)
ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version:  - ArcSoft)
AuthenTec WinBio FingerPrint Software (HKLM\...\{3CEE4431-D0DA-49AA-A78D-5D3B559446DF}) (Version: 3.2.3.1157 - AuthenTec, Inc.)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v8.00.06(T) - TOSHIBA CORPORATION)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.1.6 - Canon Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.)
Canon MG2200 series Benutzerregistrierung (HKLM-x32\...\Canon MG2200 series Benutzerregistrierung) (Version:  - Canon Inc.‎)
Canon MG2200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2200_series) (Version: 1.00 - Canon Inc.)
Canon MG2200 series On-screen Manual (HKLM-x32\...\Canon MG2200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.0.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
CanoScan Toolbox Ver4.9 (HKLM-x32\...\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}) (Version:  - )
Chicken Invaders 3 - Revenge of the Yolk (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HappyFoto-Designer 4.5 (HKLM-x32\...\HappyFoto-Designer_is1) (Version:  - )
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2827 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{1927E640-A2C6-4BA7-8F43-FFD2AE3DFCF3}) (Version: 14.0.2000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel(R) Wireless Display (HKLM-x32\...\{626663EE-B9E6-4982-995F-02C31E84F8FC}) (Version: 2.0.29.0 - Intel Corporation)
Java Auto Updater (x32 Version: 2.0.2.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Manual CanoScan LiDE 25 (HKLM-x32\...\{C45EB9E5-7165-4FB0-8C31-77FC4743362F}) (Version:  - )
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero 12 Content Pack (HKLM-x32\...\{4E7AC009-5212-499F-942F-A5AA42AE359E}) (Version: 12.0.00400 - Nero AG)
Nero Abstract Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10900.8.100 - Nero AG)
Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.11100.8.0 - Nero AG)
Nero Blu-ray Player (x32 Version: 12.0.17700 - Nero AG) Hidden
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10400.2.100 - Nero AG)
Nero BurnRights 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Cliparts (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.12700.0.7 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20000.9.12 - Nero AG) Hidden
Nero Disc Menus 1 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 2 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 3 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Family and Events Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Football (Soccer) Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Holiday and Sports Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Image Samples (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10300.1.100 - Nero AG)
Nero InfoTool 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.18.18900 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{2063D199-D79F-471A-9019-9E647296394D}) (Version: 10.6.10300 - Nero AG)
Nero PiP Effects 1 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Platinum Effects 12 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10800 - Nero AG) Hidden
Nero Retro Film Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10500.3.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Nero Video Samples (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Video Transitions 1 (x32 Version: 12.0.11500 - Nero AG) Hidden
Norton AntiVirus (HKLM-x32\...\NAV) (Version: 21.0.1.3 - Symantec Corporation)
O2Micro OZ776 SCR Driver (HKLM-x32\...\InstallShield_{C5E85AF3-D784-4CC6-83A9-678402AD87E1}) (Version: 2.1.4.207G - O2Micro)
O2Micro OZ776 SCR Driver (Version: 2.1.4.207G - O2Micro) Hidden
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.3.0 - Prolific Technology INC)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version:  - )
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6293 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.1 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.1 - Renesas Electronics Corporation) Hidden
Revo Uninstaller Pro 3.0.7 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.7 - VS Revo Group, Ltd.)
RICOH Media Driver v2.14.17.02 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.14.17.02 - RICOH)
ScanSoft OmniPage SE 4.0 (HKLM-x32\...\{C1E693A4-B1D5-4DCD-B68D-2087835B7184}) (Version: 15.00.0020 - Nuance Communications, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Smiley Sync (HKLM-x32\...\{01EC3CAB-BE52-45D6-9832-3470B3A45EDE}) (Version: 6.0.1 - NSA)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.02.02 - TOSHIBA CORPORATION)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{43DBC64B-3DD1-47E2-8788-D3C3B110C574}) (Version: 2.1.10.64 - TOSHIBA Corporation)
TOSHIBA Bulletin Board (Version: 2.1.10.64 - TOSHIBA Corporation) Hidden
TOSHIBA ConfigFree (HKLM-x32\...\{38C52F7D-A6CB-4CE7-A189-8AABE8774D8A}) (Version: 8.0.38 - TOSHIBA CORPORATION)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.9 for x64 - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM\...\{6FF9A012-0254-41E9-81E2-F538C4B53611}) (Version: 1.3.2.64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.8.64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (Version: 3.1.8.64 - TOSHIBA Corporation) Hidden
TOSHIBA Fingerprint Utility (HKLM\...\{62BBF381-D208-4EF0-B502-6CB6E5B9A161}) (Version: 2.0.0.6409 - TOSHIBA Corporation)
TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.2.1.13 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM\...\{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.8 - TOSHIBA Corporation)
Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.02 - TOSHIBA)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.86.2 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.6.1 - TOSHIBA CORPORATION)
TOSHIBA Mobile Broadband Device (HKLM-x32\...\{B7191DD7-E7B4-4658-9025-487916EC21C8}) (Version: 6.3.2.2 - TOSHIBA Corporation)
TOSHIBA Online Product Information (HKLM-x32\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 4.01.0000 - TOSHIBA)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.7.64 - TOSHIBA Corporation)
TOSHIBA Places Icon Utility (HKLM-x32\...\{461F6F0D-7173-4902-9604-AB1A29108AF2}) (Version: 1.0.2.4 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.3.5109 - TOSHIBA CORPORATION)
TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019 - TOSHIBA) Hidden
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.18.64 - TOSHIBA Corporation)
TOSHIBA ReelTime (Version: 1.7.18.64 - TOSHIBA Corporation) Hidden
TOSHIBA Security Assist (HKLM-x32\...\{1E63ACB5-D45E-4856-8FC9-78F4B0D7BB80}) (Version: 2.0.9 - TOSHIBA)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.52 - TOSHIBA)
TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.2.7 - TOSHIBA Corporation)
TOSHIBA Sync Utility (HKLM-x32\...\{CCF62642-ECB1-4D2B-80C0-3FD3286AEAED}) (Version: 2.0.3060 - TOSHIBA Corporation)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.5.10.64 - TOSHIBA Corporation)
TOSHIBA Value Added Package (Version: 1.5.10.64 - TOSHIBA Corporation) Hidden
TOSHIBA Value Added Package (x32 Version: 1.5.10.64 - TOSHIBA Corporation) Hidden
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 1.1.7.1 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (x32 Version: 1.1.7.1 - TOSHIBA Corporation) Hidden
TOSHIBA Wireless Display Monitor (HKLM-x32\...\{617773AE-ADBA-4479-BB04-65FE7758B35C}) (Version: 1.0.1 - TOSHIBA CORPORATION)
TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{5BA99779-6E12-49EF-BE49-F35B1EDB4DF9}) (Version: 1.0.4 - TOSHIBA CORPORATION)
TOSHIBA Wireless Manager (HKLM-x32\...\{6A631D31-1FD6-46B5-9337-3485C3CBB002}) (Version: 6.3.2.1 - TOSHIBA Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VLC media player 2.0.7 (HKLM-x32\...\VLC media player) (Version: 2.0.7 - VideoLAN)
Wedding Dash 2 - Rings Around the World (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.2.5 - WildTangent)
WildTangent Games App (Toshiba Games) (x32 Version: 4.0.5.5 - WildTangent) Hidden
Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Mobile Device Updater Component (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Wissen für Kinder - Der Körper (HKLM-x32\...\Wissen für Kinder - Der Körper) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)
Zune (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHT) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CSY) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DAN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DEU) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ELL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ESP) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FIN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FRA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (HUN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (IND) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ITA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (JPN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (KOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (MSL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NLD) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PLK) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTB) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTG) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (RUS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (SVE) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

15-05-2014 19:08:52 Windows Update
15-05-2014 19:09:33 Windows Update
15-05-2014 19:10:24 Windows Update
15-05-2014 19:11:15 Windows Update
15-05-2014 19:12:14 Windows Update
15-05-2014 19:12:57 Windows Update
15-05-2014 19:14:00 Windows Update
15-05-2014 19:14:39 Windows Update
15-05-2014 19:15:18 Windows Update
15-05-2014 19:16:06 Windows Update
15-05-2014 19:17:26 Windows Update
15-05-2014 19:18:15 Windows Update
15-05-2014 19:19:05 Windows Update
15-05-2014 19:19:53 Windows Update
15-05-2014 19:20:48 Windows Update
15-05-2014 19:21:42 Windows Update
15-05-2014 19:22:36 Windows Update
15-05-2014 19:23:20 Windows Update
15-05-2014 19:24:07 Windows Update
15-05-2014 19:25:14 Windows Update
15-05-2014 19:25:57 Windows Update
15-05-2014 19:26:47 Windows Update
15-05-2014 19:27:53 Windows Update
15-05-2014 19:29:04 Windows Update
15-05-2014 19:29:57 Windows Update
15-05-2014 19:30:44 Windows Update
15-05-2014 19:31:33 Windows Update
15-05-2014 19:32:27 Windows Update
15-05-2014 19:33:24 Windows Update
15-05-2014 19:34:20 Windows Update
15-05-2014 19:35:06 Windows Update
15-05-2014 19:35:53 Windows Update
15-05-2014 19:36:45 Windows Update
15-05-2014 19:37:45 Windows Update
15-05-2014 19:38:41 Windows Update
15-05-2014 19:39:37 Windows Update
15-05-2014 19:40:29 Windows Update
15-05-2014 19:41:26 Windows Update
15-05-2014 19:42:44 Windows Update
15-05-2014 19:43:43 Windows Update
15-05-2014 19:44:51 Windows Update
15-05-2014 19:45:44 Windows Update
15-05-2014 19:46:42 Windows Update
15-05-2014 19:47:32 Windows Update
15-05-2014 19:48:23 Windows Update
15-05-2014 19:49:27 Windows Update
15-05-2014 19:50:33 Windows Update
15-05-2014 19:51:50 Windows Update
15-05-2014 19:54:57 Windows Update
15-05-2014 19:55:57 Windows Update
15-05-2014 19:57:18 Windows Update
15-05-2014 19:59:28 Windows Update
15-05-2014 20:00:41 Windows Update
15-05-2014 21:29:41 Windows Update
16-05-2014 06:54:34 Windows Update
16-05-2014 06:59:57 Windows Update
16-05-2014 07:03:23 Windows Update
16-05-2014 07:20:15 Windows Update
16-05-2014 08:08:20 Removed TOSHIBA TEMPRO
16-05-2014 08:30:57 ec 1
16-05-2014 08:33:33 ec 2
16-05-2014 08:45:55 Wiederherstellungsvorgang
16-05-2014 08:59:08 ec 3
16-05-2014 10:34:04 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-05-14 10:23 - 00000741 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1        localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1709487B-E342-4A79-A920-ABFB756A3AB9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-05] (Google Inc.)
Task: {2A100D5F-1E71-4F2F-904B-8990BBED9C58} - System32\Tasks\TOSHIBA Wireless Display Monitor => C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe [2010-12-25] (TOSHIBA CORPORATION)
Task: {48295AF7-9D1F-422B-A14E-CB86D51E5D29} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)
Task: {66FB394F-21D1-4986-B32C-4890887621F0} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-12-03] (TOSHIBA CORPORATION)
Task: {80C01BDD-345B-48D6-8D78-3D85B1E8FDD4} - System32\Tasks\Susann NBAgent 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2011-06-29] (Nero AG)
Task: {99747706-03F6-49B2-BA28-E28DF2E534FB} - System32\Tasks\{F342DEFF-77C6-45D0-A789-FA6BF6E6E706} => C:\Program Files (x86)\NSA\Smiley Sync\Smiley Sync.exe [2013-01-04] (NSA)
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {A2C8415D-203F-4F1B-838C-6A1358A83DDA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-05] (Google Inc.)
Task: {B08355A4-E908-4725-B428-E067C8C62EC3} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\SymErr.exe
Task: {B3F4D13C-3D51-4432-891D-B506DCD76A71} - \Advanced System Protector_startup No Task File <==== ATTENTION
Task: {B8578E82-D29F-4130-A36B-3DB27AC81632} - System32\Tasks\{CAFC968C-E257-4C76-99F1-A8E807B64E7D} => C:\Program Files (x86)\NSA\Smiley Sync\Smiley Sync.exe [2013-01-04] (NSA)
Task: {BB53E655-1E34-43A8-B4DC-E0CCD58DD462} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
Task: {CAF7B416-F2F0-4AC4-84E3-0DCC07004FAC} - System32\Tasks\Norton AntiVirus\Norton Error Processor => C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {CB738A2E-BFF7-40F6-BC26-175E0BDC0896} - System32\Tasks\Norton AntiVirus\Norton Error Analyzer => C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {E5DB7198-3DE8-42D9-A730-DD78383A82A1} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\SymErr.exe
Task: {FDBEA938-8644-48E9-A90C-53CB2FB684CA} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\WSCStub.exe [2013-08-31] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-01-05 12:53 - 2011-01-05 12:53 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2012-11-01 23:12 - 2012-03-28 14:49 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2011-04-07 13:59 - 2011-04-07 13:59 - 00592312 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll
2012-03-16 10:25 - 2012-03-16 10:25 - 00476544 _____ () C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUCommon.dll
2012-07-31 09:17 - 2012-07-31 09:17 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-01-05 12:53 - 2011-01-05 12:53 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2010-11-18 17:18 - 2010-11-18 17:18 - 11190784 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2010-03-03 14:15 - 2010-03-03 14:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll
2010-03-03 14:15 - 2010-03-03 14:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll
2010-12-15 15:19 - 2010-12-15 15:19 - 00124320 _____ () C:\Program Files\TOSHIBA\TECO\MUIHelp.dll
2011-03-03 23:21 - 2011-03-03 23:21 - 03420584 _____ () C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll
2012-03-16 10:28 - 2012-03-16 10:28 - 00372608 _____ () C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUCommon.dll
2012-03-16 10:28 - 2012-03-16 10:28 - 00415104 _____ () C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUBrowserAddinRc.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/16/2014 02:58:40 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 02:56:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 01:55:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 01:47:04 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 01:45:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 01:44:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mini_WMCore.exe, Version: 6.3.2.1, Zeitstempel: 0x4d26e69e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xb98
Startzeit der fehlerhaften Anwendung: 0xmini_WMCore.exe0
Pfad der fehlerhaften Anwendung: mini_WMCore.exe1
Pfad des fehlerhaften Moduls: mini_WMCore.exe2
Berichtskennung: mini_WMCore.exe3

Error: (05/16/2014 00:45:14 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 00:38:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 00:25:54 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 00:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/16/2014 02:56:09 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/16/2014 02:56:08 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/16/2014 02:56:00 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet:
%%-2147024891

Error: (05/16/2014 02:56:00 PM) (Source: HTTP) (EventID: 15005) (User: )
Description: \Device\Http\ReqQueue[::]:5357

Error: (05/16/2014 02:55:55 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/16/2014 02:55:52 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/16/2014 02:55:45 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/16/2014 02:55:45 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/16/2014 02:00:11 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.

Error: (05/16/2014 02:00:11 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b


Microsoft Office Sessions:
=========================
Error: (05/16/2014 02:58:40 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 02:56:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 01:55:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 01:47:04 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 01:45:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 01:44:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mini_WMCore.exe6.3.2.14d26e69eunknown0.0.0.000000000c000000500000000b9801cf70fc2e0e1140C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exeunknown7790667f-dcef-11e3-b439-028037ec0200

Error: (05/16/2014 00:45:14 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 00:38:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2014 00:25:54 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/16/2014 00:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Percentage of memory in use: 40%
Total physical RAM: 3975.43 MB
Available physical RAM: 2381.49 MB
Total Pagefile: 7949.04 MB
Available Pagefile: 6145.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (TI30810600A) (Fixed) (Total:281.99 GB) (Free:168.66 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (USB STICK) (Removable) (Total:29.11 GB) (Free:27.89 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 76FF13E7)
Partition 1: (Active) - (Size=1 GB) - (Type=27)
Partition 2: (Not Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=17)

========================================================
Disk: 1 (Size: 29 GB) (Disk ID: 381076E1)
Partition 1: (Not Active) - (Size=29 GB) - (Type=0C)

==================== End Of Log ============================

schrauber 19.05.2014 12:07
hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

suppenhuhn12 19.05.2014 15:30
Mahlzeit!

Code:
ComboFix 14-05-19.01 - Susann 19.05.2014  13:39:21.1.1 - x64
Microsoft Windows 7 Professional  6.1.7601.1.1252.43.1031.18.2048.1114 [GMT 2:00]
ausgeführt von:: c:\ec\ComboFix.exe
AV: Norton AntiVirus *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Norton AntiVirus *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\windows\msxml4-KB2758694-deu.LOG
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-04-19 bis 2014-05-19  ))))))))))))))))))))))))))))))
.
.
2014-05-19 13:21 . 2014-05-19 13:21        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-05-18 08:36 . 2014-05-18 08:36        --------        d-----w-        c:\program files\Oracle
2014-05-16 12:58 . 2014-05-16 13:00        --------        d-----w-        C:\FRST
2014-05-16 07:00 . 2012-11-23 03:13        68608        ----a-w-        c:\windows\system32\taskhost.exe
2014-05-16 06:55 . 2011-03-11 06:30        96768        ----a-w-        c:\windows\system32\fsutil.exe
2014-05-16 06:55 . 2011-03-11 05:31        74240        ----a-w-        c:\windows\SysWow64\fsutil.exe
2014-05-16 06:55 . 2011-03-11 06:41        189824        ----a-w-        c:\windows\system32\drivers\storport.sys
2014-05-16 06:55 . 2011-03-11 06:41        27008        ----a-w-        c:\windows\system32\drivers\amdxata.sys
2014-05-16 06:55 . 2011-03-11 06:41        107904        ----a-w-        c:\windows\system32\drivers\amdsata.sys
2014-05-16 06:55 . 2011-03-11 05:33        1699328        ----a-w-        c:\windows\SysWow64\esent.dll
2014-05-16 06:55 . 2011-03-11 06:33        2565632        ----a-w-        c:\windows\system32\esent.dll
2014-05-16 06:55 . 2011-03-11 04:37        91648        ----a-w-        c:\windows\system32\drivers\USBSTOR.SYS
2014-05-16 06:54 . 2011-03-11 06:41        166272        ----a-w-        c:\windows\system32\drivers\nvstor.sys
2014-05-16 06:54 . 2011-03-11 06:41        410496        ----a-w-        c:\windows\system32\drivers\iaStorV.sys
2014-05-16 06:54 . 2011-03-11 06:41        148352        ----a-w-        c:\windows\system32\drivers\nvraid.sys
2014-05-15 21:29 . 2013-04-25 23:30        1505280        ----a-w-        c:\windows\SysWow64\d3d11.dll
2014-05-15 21:29 . 2013-03-31 22:52        1887232        ----a-w-        c:\windows\system32\d3d11.dll
2014-05-15 20:00 . 2014-02-07 01:23        3156480        ----a-w-        c:\windows\system32\win32k.sys
2014-05-15 19:59 . 2014-02-04 02:32        624128        ----a-w-        c:\windows\system32\qedit.dll
2014-05-15 19:59 . 2014-02-04 02:04        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
2014-05-15 19:55 . 2013-12-06 02:30        2048        ----a-w-        c:\windows\system32\msxml3r.dll
2014-05-15 19:55 . 2013-12-06 02:30        1882112        ----a-w-        c:\windows\system32\msxml3.dll
2014-05-15 19:55 . 2013-12-06 02:02        2048        ----a-w-        c:\windows\SysWow64\msxml3r.dll
2014-05-15 19:55 . 2013-12-06 02:02        1237504        ----a-w-        c:\windows\SysWow64\msxml3.dll
2014-05-15 19:48 . 2013-12-10 02:28        610304        ----a-w-        c:\windows\system32\vbscript.dll
2014-05-15 19:48 . 2013-12-10 02:02        428032        ----a-w-        c:\windows\SysWow64\vbscript.dll
2014-05-15 19:47 . 2013-11-27 01:41        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys
2014-05-15 19:47 . 2013-11-27 01:41        53248        ----a-w-        c:\windows\system32\drivers\usbehci.sys
2014-05-15 19:47 . 2013-11-27 01:41        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys
2014-05-15 19:47 . 2013-11-27 01:41        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys
2014-05-15 19:47 . 2013-11-27 01:41        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys
2014-05-15 19:47 . 2013-11-27 01:41        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys
2014-05-15 19:46 . 2013-10-04 02:16        116736        ----a-w-        c:\windows\system32\drivers\drmk.sys
2014-05-15 19:46 . 2013-10-04 01:36        230400        ----a-w-        c:\windows\system32\drivers\portcls.sys
2014-05-15 19:45 . 2013-10-12 02:31        202752        ----a-w-        c:\windows\system32\scrrun.dll
2014-05-15 19:45 . 2013-10-12 02:03        163840        ----a-w-        c:\windows\SysWow64\scrrun.dll
2014-05-15 19:45 . 2013-10-12 02:32        150016        ----a-w-        c:\windows\system32\wshom.ocx
2014-05-15 19:45 . 2013-10-12 02:04        121856        ----a-w-        c:\windows\SysWow64\wshom.ocx
2014-05-15 19:45 . 2013-10-12 01:33        156160        ----a-w-        c:\windows\system32\cscript.exe
2014-05-15 19:45 . 2013-10-12 01:33        168960        ----a-w-        c:\windows\system32\wscript.exe
2014-05-15 19:45 . 2013-10-12 01:15        141824        ----a-w-        c:\windows\SysWow64\wscript.exe
2014-05-15 19:45 . 2013-10-12 01:15        126976        ----a-w-        c:\windows\SysWow64\cscript.exe
2014-05-15 19:45 . 2013-10-19 02:18        81408        ----a-w-        c:\windows\system32\imagehlp.dll
2014-05-15 19:45 . 2013-10-19 01:36        159232        ----a-w-        c:\windows\SysWow64\imagehlp.dll
2014-05-15 19:41 . 2013-10-05 20:25        1474048        ----a-w-        c:\windows\system32\crypt32.dll
2014-05-15 19:41 . 2013-10-05 19:57        1168384        ----a-w-        c:\windows\SysWow64\crypt32.dll
2014-05-15 19:40 . 2013-09-28 01:09        497152        ----a-w-        c:\windows\system32\drivers\afd.sys
2014-05-15 19:38 . 2013-10-03 02:23        404480        ----a-w-        c:\windows\system32\gdi32.dll
2014-05-15 19:38 . 2013-10-03 02:00        311808        ----a-w-        c:\windows\SysWow64\gdi32.dll
2014-05-15 19:37 . 2013-07-04 12:50        633856        ----a-w-        c:\windows\system32\comctl32.dll
2014-05-15 19:37 . 2013-07-04 11:50        530432        ----a-w-        c:\windows\SysWow64\comctl32.dll
2014-05-15 19:35 . 2013-07-20 10:33        102608        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 19:35 . 2013-07-20 10:33        124112        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 19:33 . 2013-08-01 12:09        983488        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys
2014-05-15 19:33 . 2013-04-10 06:01        265064        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys
2014-05-15 19:33 . 2011-02-03 11:25        144384        ----a-w-        c:\windows\system32\cdd.dll
2014-05-15 19:32 . 2013-07-12 10:41        185344        ----a-w-        c:\windows\system32\drivers\usbvideo.sys
2014-05-15 19:32 . 2013-07-12 10:41        100864        ----a-w-        c:\windows\system32\drivers\usbcir.sys
2014-05-15 19:31 . 2013-06-25 22:55        785624        ----a-w-        c:\windows\system32\drivers\Wdf01000.sys
2014-05-15 19:31 . 2012-11-28 22:56        9728        ----a-w-        c:\windows\system32\Wdfres.dll
2014-05-15 19:31 . 2012-11-28 22:56        54376        ----a-w-        c:\windows\system32\drivers\WdfLdr.sys
2014-05-15 19:30 . 2013-07-03 04:05        76800        ----a-w-        c:\windows\system32\drivers\hidclass.sys
2014-05-15 19:30 . 2013-07-03 04:05        32896        ----a-w-        c:\windows\system32\drivers\hidparse.sys
2014-05-15 19:29 . 2013-06-06 05:49        100864        ----a-w-        c:\windows\system32\fontsub.dll
2014-05-15 19:29 . 2013-06-06 04:51        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll
2014-05-15 19:29 . 2013-06-06 04:50        10240        ----a-w-        c:\windows\SysWow64\dciman32.dll
2014-05-15 19:29 . 2013-06-06 05:50        41472        ----a-w-        c:\windows\system32\lpk.dll
2014-05-15 19:29 . 2013-06-06 05:49        14336        ----a-w-        c:\windows\system32\dciman32.dll
2014-05-15 19:29 . 2013-06-06 05:47        46080        ----a-w-        c:\windows\system32\atmlib.dll
2014-05-15 19:29 . 2013-06-06 04:57        25600        ----a-w-        c:\windows\SysWow64\lpk.dll
2014-05-15 19:29 . 2013-06-06 03:30        368128        ----a-w-        c:\windows\system32\atmfd.dll
2014-05-15 19:29 . 2013-06-06 03:01        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll
2014-05-15 19:29 . 2013-06-06 03:01        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll
2014-05-15 19:27 . 2013-07-09 05:46        184320        ----a-w-        c:\windows\system32\cryptsvc.dll
2014-05-15 19:27 . 2013-07-09 05:46        139776        ----a-w-        c:\windows\system32\cryptnet.dll
2014-05-15 19:27 . 2013-07-09 04:46        140288        ----a-w-        c:\windows\SysWow64\cryptsvc.dll
2014-05-15 19:27 . 2013-07-09 04:46        103936        ----a-w-        c:\windows\SysWow64\cryptnet.dll
2014-05-15 19:27 . 2013-07-09 05:52        224256        ----a-w-        c:\windows\system32\wintrust.dll
2014-05-15 19:27 . 2013-07-09 04:52        175104        ----a-w-        c:\windows\SysWow64\wintrust.dll
2014-05-15 19:26 . 2013-06-15 04:32        39936        ----a-w-        c:\windows\system32\drivers\tssecsrv.sys
2014-05-15 19:25 . 2013-07-25 09:25        1888768        ----a-w-        c:\windows\system32\WMVDECOD.DLL
2014-05-15 19:25 . 2013-07-25 08:57        1620992        ----a-w-        c:\windows\SysWow64\WMVDECOD.DLL
2014-05-15 19:23 . 2013-07-06 06:03        1910208        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2014-05-15 19:23 . 2013-01-03 06:00        288088        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS
2014-05-15 19:23 . 2012-08-22 18:12        376688        ----a-w-        c:\windows\system32\drivers\netio.sys
2014-05-15 19:22 . 2013-07-09 05:51        1217024        ----a-w-        c:\windows\system32\rpcrt4.dll
2014-05-15 19:22 . 2013-07-09 04:52        663552        ----a-w-        c:\windows\SysWow64\rpcrt4.dll
2014-05-15 19:21 . 2013-05-27 05:50        1011712        ----a-w-        c:\program files\Windows Defender\MpSvc.dll
2014-05-15 19:21 . 2013-05-27 05:50        571904        ----a-w-        c:\program files\Windows Defender\MpClient.dll
2014-05-15 19:21 . 2013-05-27 05:50        314880        ----a-w-        c:\program files\Windows Defender\MpCommu.dll
2014-05-15 19:21 . 2013-05-27 04:57        4608        ----a-w-        c:\program files (x86)\Windows Defender\MsMpLics.dll
2014-05-15 19:21 . 2013-05-27 04:57        54784        ----a-w-        c:\program files (x86)\Windows Defender\MpOAV.dll
2014-05-15 19:21 . 2013-05-27 04:57        392704        ----a-w-        c:\program files (x86)\Windows Defender\MpClient.dll
2014-05-15 19:21 . 2013-05-27 03:15        9216        ----a-w-        c:\program files (x86)\Windows Defender\MpAsDesc.dll
2014-05-15 19:21 . 2013-04-10 05:46        1402880        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll
2014-05-15 19:21 . 2013-04-10 05:46        1393152        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll
2014-05-15 19:21 . 2013-04-10 05:03        936448        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2014-05-15 19:21 . 2013-04-10 05:48        1732608        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL
2014-05-15 19:21 . 2013-04-10 05:46        1367040        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-05-15 19:16 . 2013-05-13 03:08        43008        ----a-w-        c:\windows\SysWow64\certenc.dll
2014-05-15 19:16 . 2013-05-13 05:50        52224        ----a-w-        c:\windows\system32\certenc.dll
2014-05-15 19:16 . 2013-05-13 03:43        1192448        ----a-w-        c:\windows\system32\certutil.exe
2014-05-15 19:16 . 2013-05-13 03:08        903168        ----a-w-        c:\windows\SysWow64\certutil.exe
2014-05-15 19:15 . 2013-04-26 05:51        751104        ----a-w-        c:\windows\system32\win32spl.dll
2014-05-15 19:15 . 2013-04-26 04:55        492544        ----a-w-        c:\windows\SysWow64\win32spl.dll
2014-05-15 19:14 . 2013-04-12 14:45        1656680        ----a-w-        c:\windows\system32\drivers\ntfs.sys
2014-05-15 19:13 . 2013-02-15 06:08        44032        ----a-w-        c:\windows\system32\tsgqec.dll
2014-05-15 19:13 . 2013-02-15 06:02        158720        ----a-w-        c:\windows\system32\aaclient.dll
2014-05-15 19:13 . 2013-02-15 04:34        131584        ----a-w-        c:\windows\SysWow64\aaclient.dll
2014-05-15 19:13 . 2013-02-15 03:25        36864        ----a-w-        c:\windows\SysWow64\tsgqec.dll
2014-05-15 19:13 . 2013-02-15 06:06        3717632        ----a-w-        c:\windows\system32\mstscax.dll
2014-05-15 19:13 . 2013-02-15 04:37        3217408        ----a-w-        c:\windows\SysWow64\mstscax.dll
2014-05-15 19:12 . 2013-02-12 04:12        19968        ----a-w-        c:\windows\system32\drivers\usb8023.sys
2014-05-15 19:04 . 2012-11-01 04:47        1389568        ----a-w-        c:\windows\SysWow64\msxml6.dll
2014-05-15 19:04 . 2012-11-01 05:43        2002432        ----a-w-        c:\windows\system32\msxml6.dll
2014-05-15 19:03 . 2012-11-02 05:59        478208        ----a-w-        c:\windows\system32\dpnet.dll
2014-05-15 19:03 . 2012-11-02 05:11        376832        ----a-w-        c:\windows\SysWow64\dpnet.dll
2014-05-15 18:59 . 2012-09-25 22:47        78336        ----a-w-        c:\windows\SysWow64\synceng.dll
2014-05-15 18:59 . 2012-09-25 22:46        95744        ----a-w-        c:\windows\system32\synceng.dll
2014-05-15 18:57 . 2012-08-11 00:56        715776        ----a-w-        c:\windows\system32\kerberos.dll
2014-05-15 18:57 . 2012-08-10 23:56        542208        ----a-w-        c:\windows\SysWow64\kerberos.dll
2014-05-15 18:56 . 2012-07-04 22:16        73216        ----a-w-        c:\windows\system32\netapi32.dll
2014-05-15 18:56 . 2012-07-04 22:13        59392        ----a-w-        c:\windows\system32\browcli.dll
2014-05-15 18:56 . 2012-07-04 22:13        136704        ----a-w-        c:\windows\system32\browser.dll
2014-05-15 18:56 . 2012-07-04 21:14        41984        ----a-w-        c:\windows\SysWow64\browcli.dll
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-29 13:40 . 2012-11-08 19:10        692400        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-04-29 13:40 . 2012-11-02 09:16        70832        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"CanonQuickMenu"="c:\program files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" [2012-04-03 1273448]
"OpwareSE4"="c:\program files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-10-11 75304]
"SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-09-28 185896]
"ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2010-11-29 1294712]
"TWebCamera"="c:\program files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" [2011-01-16 2475384]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 risdxc;risdxc;c:\windows\system32\DRIVERS\risdxc64.sys;c:\windows\SYSNATIVE\DRIVERS\risdxc64.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 WMCoreService;Mobile Broadband Service;c:\program files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe servicemode;c:\program files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe servicemode [x]
R3 ATSwpWDF;AuthenTec TruePrint WBF Driver;c:\windows\system32\DRIVERS\ATSwpWDF.sys;c:\windows\SYSNATIVE\DRIVERS\ATSwpWDF.sys [x]
R3 cleanhlp;cleanhlp;e:\emsisoftemergencykit 4.0.0.17\Run\cleanhlp64.sys;e:\emsisoftemergencykit 4.0.0.17\Run\cleanhlp64.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 ecnssndis; Mobile Broadband Driver;c:\windows\system32\Drivers\wwuss64.sys;c:\windows\SYSNATIVE\Drivers\wwuss64.sys [x]
R3 ecnssndisfltr; Mobile Broadband Driver Filter;c:\windows\system32\Drivers\wwussf64.sys;c:\windows\SYSNATIVE\Drivers\wwussf64.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 Mbm3CBus;Ericsson F5521gw for TOSHIBA Mobile Broadband Device (WDM);c:\windows\system32\DRIVERS\Mbm3CBus.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3CBus.sys [x]
R3 Mbm3DevMt;TOSHIBA  Mobile Broadband Device Management Driver (WDM);c:\windows\system32\DRIVERS\Mbm3DevMt.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3DevMt.sys [x]
R3 Mbm3mdfl;TOSHIBA  Mobile Broadband Modem Filter;c:\windows\system32\DRIVERS\Mbm3mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3mdfl.sys [x]
R3 Mbm3Mdm;TOSHIBA  Mobile Broadband Modem Driver;c:\windows\system32\DRIVERS\Mbm3Mdm.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3Mdm.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
R3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys;c:\windows\SYSNATIVE\DRIVERS\pgeffect.sys [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 t36wgps;TOSHIBA  Mobile Broadband GPS Port;c:\windows\system32\DRIVERS\t36wgps64.sys;c:\windows\SYSNATIVE\DRIVERS\t36wgps64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WwanUsbServ;Mobile Broadband Driver;c:\windows\system32\DRIVERS\WwanUsbMp64.sys;c:\windows\SYSNATIVE\DRIVERS\WwanUsbMp64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys;c:\windows\SYSNATIVE\DRIVERS\NBVol.sys [x]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys;c:\windows\SYSNATIVE\DRIVERS\NBVolUp.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAVx64\1500010.003\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NAVx64\1500010.003\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAVx64\1500010.003\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NAVx64\1500010.003\SYMEFA64.SYS [x]
S0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\DRIVERS\thpdrv.sys;c:\windows\SYSNATIVE\DRIVERS\thpdrv.sys [x]
S0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\DRIVERS\Thpevm.SYS;c:\windows\SYSNATIVE\DRIVERS\Thpevm.SYS [x]
S0 VBoxGuest;VirtualBox Guest Driver;c:\windows\system32\DRIVERS\VBoxGuest.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxGuest.sys [x]
S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\BASHDefs\20130814.001\BHDrvx64.sys;c:\program files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\BASHDefs\20130814.001\BHDrvx64.sys [x]
S1 ccSet_NAV;NAV Settings Manager;c:\windows\system32\drivers\NAVx64\1500010.003\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NAVx64\1500010.003\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\IPSDefs\20130805.011\IDSVia64.sys;c:\program files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\IPSDefs\20130805.011\IDSVia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAVx64\1500010.003\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NAVx64\1500010.003\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\NAVx64\1500010.003\SYMNETS.SYS;c:\windows\SYSNATIVE\drivers\NAVx64\1500010.003\SYMNETS.SYS [x]
S1 VBoxSF;VirtualBox Shared Folders;c:\windows\system32\drivers\VBoxSF.sys;c:\windows\SYSNATIVE\drivers\VBoxSF.sys [x]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [x]
S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NAV;Norton AntiVirus;c:\program files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe;c:\program files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe [x]
S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe;c:\program files\TOSHIBA\TECO\TecoService.exe [x]
S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys;c:\windows\SYSNATIVE\DRIVERS\TVALZFL.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VBoxService;VirtualBox Guest Additions Service;c:\windows\system32\VBoxService.exe;c:\windows\SYSNATIVE\VBoxService.exe [x]
S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]
S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]
S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [x]
S3 VBoxMouse;VirtualBox Guest Mouse Service;c:\windows\system32\DRIVERS\VBoxMouse.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxMouse.sys [x]
S3 VBoxVideo;VBoxVideo;c:\windows\system32\DRIVERS\VBoxVideo.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxVideo.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
*Deregistered* - EraserUtilRebootDrv
.
Inhalt des "geplante Tasks" Ordners
.
2014-05-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-08 13:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ATFPUOverlayIcon]
@="{3239DBC1-B76D-4dc7-8B29-D99CBA3C7336}"
[HKEY_CLASSES_ROOT\CLSID\{3239DBC1-B76D-4dc7-8B29-D99CBA3C7336}]
2012-03-16 08:25        158592        ----a-w-        c:\program files\TOSHIBA\Fingerprint Utility\TFPUOverlayIcon.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ThpSrv"="c:\windows\system32\thpsrv" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-04 168944]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-04 393712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-02-04 418288]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2011-01-21 328048]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-01-18 11775592]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-01-05 1933584]
"TFPUPWDBankService"="c:\program files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe" [2012-03-16 976256]
"TFPUService"="c:\program files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe" [2012-03-16 896384]
"Toshiba Registration"="c:\program files\TOSHIBA\Registration\ToshibaReminder.exe" [2011-08-05 150992]
"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-12-08 710040]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
"VBoxTray"="c:\windows\system32\VBoxTray.exe" [2013-12-18 1500944]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=teua&bmod=teua;
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: Interfaces\{6176B24B-6133-41F3-8E9A-1856D5A0CB37}: NameServer = 192.168.0.1
FF - ProfilePath - c:\users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-TSleepSrv - %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
Wow6432Node-HKLM-Run-TSUScheduler - %ProgramFiles(x86)%\TOSHIBA\Sync Utility\TosSyncScheduler.exe
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM-Run-HSON - c:\program files (x86)\TOSHIBA\TBS\HSON.exe
HKLM-Run-TCrdMain - c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
HKLM-Run-Teco - c:\program files (x86)\TOSHIBA\TECO\Teco.exe
HKLM-Run-TosNC - c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe
HKLM-Run-TosReelTimeMonitor - c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
HKLM-Run-TosWaitSrv - c:\program files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
AddRemove-Free Video Converter - c:\program files (x86)\Free Video Converter\uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NAV]
"ImagePath"="\"c:\program files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe\" /s \"NAV\" /m \"c:\program files (x86)\Norton AntiVirus\Engine\21.0.1.3\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\system32\drivers\NAVx64\1500010.003\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton AntiVirus\Engine\21.0.1.3;c:\program files (x86)\Norton AntiVirus\Engine64\21.0.1.3"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.13"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Channels]
@Denied: (C D) (Everyone)
"ccSvcHst_UserSession2_3080"="{B219D28D-9F05-403E-A35C-68C3145A341D}"
"ccSvcHst_UserSession2_2392"="{F6933A0C-3BBA-4085-80C6-0E3E567C13A2}"
"ccSvcHst_UserSession2_3592"="{611445CB-6AE0-47CE-8CBF-5679AFC3745D}"
"ccSvcHst_NAV"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"{A1B48937-0778-4e7c-885B-271F65B485D2}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"DING_{4467AB8F-68C8-4ab5-9B48-B3E6EB65F6A1}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"ccSvcHst_UserSession2_2440"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"{0D147FE7-1045-46ED-8F96-06DDA32C157B}.MClientTaskNoficiation"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"{B44E7D73-F081-414B-ADD2-CD66675A190D}1"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"ccGenericEvent_Global_EM"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"ccGenericEvent_Global_LM"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"ccGenericLog_Manager"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"ccJobMgr_general_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"ccJobMgr_session_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"{3F11C6A7-CEA8-40c9-88EE-E5461341AE97}_ccSubmissionEngineIPC"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"{A2DE0E79-877C-485b-B604-78B170313E9E}_IronIPC"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"SymRedirSvcRequestChannel"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"SNDServiceRequestChannel"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"NortonNetServiceIPC"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"SNDLocationChannel"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"ncw_performance_IPC"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_NCWSvcComm_NortonCommunityWatchConfiguration"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_ProcessDetection_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"NetMapServiceIPC"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_AvProdSvcComm_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_isDataPrComm_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"AVModule_ExclusionManager_{C6198C0B-693E-4CE5-BDED-C1C7ABE5E22C}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"isError_Service_IPC"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"BashIPCChannel"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_IDataStoreMgr_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"CommListener"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_ISPOCClient_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_IEventServiceMgr_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"MClientTask.{15F2F1FF-F37B-4673-BCAA-FEB6EB7FB72A}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"{FEC3E60C-6AB6-4C7F-B7BA-22794EE4EF0F}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"_HSPlayerCommand_"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"{C4A09495-F6BC-4166-B717-F3F3250462BB}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"IPS_COMMAND_CHANNEL"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"{D9D79767-CD29-487E-9729-730A5CA33689}"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"FWAlert"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
"AvProdSession_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"AvProdSession_Options_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"AvProdSession_MessageCenter_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"AvProdSession_Scanless_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"AvProdSession_IPUA_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"AvProdSession_CanIRun_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"clt::AlertChannel2_01"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"TRUSTCHANNEL"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"SDKCHANNEL1"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"{436E95FE-192E-469f-8F34-5038FBA89BF4}1"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"ToasterNotify\\SessionID_1"="{0F617076-C8C8-4727-96EA-DEEE621A51E1}"
"_ReputationSvcComm_ReputationPublisher"="{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Endpoints]
@Denied: (C D) (Everyone)
"{2949D7B8-D4D6-425F-BA77-7D73AAFB30D8}"=""
"{B219D28D-9F05-403E-A35C-68C3145A341D}"=""
"{52086B92-F85B-4947-8335-9BEFF8506CDB}"=""
"{0433FD07-52C3-471D-A606-0FE958304A30}"=""
"{F8A33FC3-209F-4534-88DD-BCF1DA6635EF}"=""
"{C1E6F330-9CE9-4555-AA1D-313CE437A657}"=""
"{E73A5EBD-59A9-4981-8284-819358C5E320}"=""
"{49D8F114-19DF-452C-B77C-4CDAAE49A41B}"=""
"{1CEAC6B4-9B0A-42E6-9FB0-E24487EB8ACF}"=""
"{16F72B57-926E-4A45-96CB-18E8B773CEC9}"=""
"{F6933A0C-3BBA-4085-80C6-0E3E567C13A2}"=""
"{940372B4-76BD-4CCB-9D55-B4C64DD90A80}"=""
"{E3F70482-463B-4334-91A8-37B7E7C53C2A}"=""
"{AE7BAE06-27D0-4365-B69F-44EE705F0654}"=""
"{2B459FF4-DC18-4317-B7F3-81CF237A07E7}"=""
"{611445CB-6AE0-47CE-8CBF-5679AFC3745D}"=""
"{4F758706-D8C8-4817-99E3-80F822576CC2}"=""
"{E551EAA5-FEC6-4007-927C-76401FA7144E}"=""
"{57928A40-4037-4180-951D-281B9F3977F3}"=""
"{697A7A0A-78C6-45A9-A24C-9BB496F630C0}"=""
"{5C09357F-23B5-4C40-93C3-755D362F2985}"=""
"{8C6E44DA-650C-4A36-8BBB-773C83003BBD}"=""
"{A5939464-B66F-4AF9-BC25-93E3517F58E6}"=""
"{50E2A4BF-A144-486C-A52A-1B7EE78E186A}"=""
"{76EC9D8E-2A71-4D1F-A3E5-84BF01C17C36}"=""
"{66FFF456-AE9B-4CA8-A3FA-3CF2AC328D6D}"=""
"{0F617076-C8C8-4727-96EA-DEEE621A51E1}"=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-05-19  15:24:26
ComboFix-quarantined-files.txt  2014-05-19 13:24
.
Vor Suchlauf: 11 Verzeichnis(se), 179.410.190.336 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 180.222.644.224 Bytes frei
.
- - End Of File - - A1F9C2373ADEFA3435A3A59344808631

schrauber 20.05.2014 11:20
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

suppenhuhn12 20.05.2014 21:02
Mahlzeit!

Anmerkung: da ich das Notebook dringend gebraucht habe, habe ich die betroffenen Installation in die Virtualbox übersiedelt und schiebe sie zurück sobald alles wieder läuft....

Hier die Logs - gibt's einen Verdacht woran es scheitern kann?

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 20.05.2014
Suchlauf-Zeit: 20:00:13
Logdatei: 20140520 2.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.03.04.09
Rootkit Datenbank: v2014.02.20.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Susann

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 267694
Verstrichene Zeit: 40 Min, 38 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 2
Trojan.Agent.Gen, C:\Windows\System32\System32\svchost.exe, , [52f72fd04b2f4fe7502e8426f9091de3],
Backdoor.Agent.E, C:\Windows\System32\System32\dialer.exe, , [3e0be11e1466d0661b1bf6b3c43f39c7],

Physische Sektoren: 0
(No malicious items detected)


(end)
Code:
# AdwCleaner v3.210 - Bericht erstellt am 20/05/2014 um 20:06:59
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Susann - SUSANNS-TOSHIBA
# Gestartet von : \\VBOXSVR\Virtualtauschordner\adwcleaner_3.210.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ Datei : C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R1].txt - [951 octets] - [20/05/2014 20:04:23]
AdwCleaner[S1].txt - [873 octets] - [20/05/2014 20:06:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [932 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Susann on 20.05.2014 at 20:13:08,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{061C1942-53AA-41DD-BE67-7E9E66211FA4}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{0A014ABD-EAD9-4D96-A381-C99F69F0F066}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{18FBBA26-3A04-4048-8E3E-46A2105DB2F4}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{35E715F7-19F9-4043-96D8-434EB33BC32F}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{3F21CEF8-EBF8-4FA7-B3C2-33C3C89BCFFB}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{4BC0812D-9D0C-46C8-BC5E-31601BBFFC39}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{5182DCA8-9BCA-46CC-B1F2-D2C9ECE58B17}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{5881A52F-6093-40BC-8B2D-B5917FFF4726}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{602B0781-192D-49D8-B2DA-825603F8C727}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{6E9F298B-239A-49D9-ACBE-6CCAD8C0D705}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{7B7DB877-79CA-401B-BD0B-FC8CEC2F095E}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{7F48657F-FA1B-4163-8104-A100A1C54748}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{812D1B70-1926-4BC2-A6DD-284149EE9D32}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{8ADE7CF0-36CA-4652-80F4-8714EB1C38F8}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{8B260C03-F629-44A4-81F5-D78C5F3D557A}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{9E0E4F24-674C-4569-9100-45ED02137C64}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{9EB42298-BD10-4795-8999-669D1A36B524}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{A4D7F61B-BA50-4D50-A611-F435C4F6BA83}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{A5BCD6EF-3BA7-41CF-9F52-D57E7EB45941}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{ABA00CC2-90B3-4A1E-8054-B9F4B83DC5C6}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{ACE0CA43-45DB-4A05-9FFA-67CC4AD96B05}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{AD15F4BF-6F30-41DA-B6FF-05E6C88EDBA1}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{AFCF6D04-C0E4-4A5A-A51A-203C8732083A}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{BE515464-3461-4CEF-8001-971BF3C937E2}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{C3FF20F9-3E0B-4A61-A070-E1B1A8F75E25}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{C78837DF-3CB4-4ABF-BAD7-F4338A440A2D}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{CE273929-4A2A-4888-BD77-B5D3D1C136F9}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{D94AAFC8-DC58-44B2-936B-FF28C5A9E2D9}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{EBD17EF1-F6E3-452F-8C07-1D4B5F509276}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{F20D019C-007B-4E4D-8260-E9967EAA85A1}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{F4519D15-B390-4B45-B4E4-3AC34AD942DF}
Successfully deleted: [Empty Folder] C:\Users\Susann\appdata\local\{FDC4C85E-6FE2-497B-BBF5-98A0505707ED}



~~~ FireFox

Emptied folder: C:\Users\Susann\AppData\Roaming\mozilla\firefox\profiles\zaylzcw0.default\minidumps [137 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.05.2014 at 20:31:20,97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Susann (administrator) on SUSANNS-TOSHIBA on 20-05-2014 21:55:13
Running from \\VBOXSVR\Virtualtauschordner
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Oracle Corporation) C:\Windows\System32\VBoxService.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Oracle Corporation) C:\Windows\System32\VBoxTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe
(Microsoft Corporation) C:\Windows\System32\lpksetup.exe
(Farbar) \\vboxsrv\Virtualtauschordner\FRST64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [328048 2011-01-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [296824 2010-09-25] (TOSHIBA Corporation)
HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [967544 2011-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1544104 2011-04-07] (TOSHIBA Corporation)
HKLM\...\Run: [TFPUPWDBankService] => C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe [976256 2012-03-16] (TOSHIBA)
HKLM\...\Run: [TFPUService] => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe [896384 2012-03-16] (TOSHIBA)
HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-05] (Toshiba Europe GmbH)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2011-03-30] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711576 2011-04-05] (TOSHIBA Corporation)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [VBoxTray] => C:\Windows\system32\VBoxTray.exe [1500944 2013-12-18] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294712 2010-11-29] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2475384 2011-01-16] (TOSHIBA CORPORATION.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=teua&bmod=teua;
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TOSHIBA Fingerprint Utility Automatic Password Input - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBankBHO.dll (TOSHIBA)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  No File

FireFox:
========
FF ProfilePath: C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2014-04-27]
FF HKLM-x32\...\Firefox\Extensions: [{302BCF7B-E09E-4854-9F2F-8B2DA4EF70F9}] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin
FF Extension: TOSHIBA Fingerprint Utility Automatic Password Input - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin [2014-05-14]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.0.1.3\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.0.1.3\IPSFFPlgn\ []

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.94) - C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfpfekpeleljonedmknjmnlhnncppad [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbjnhnooobmlnippkbhhijkaoggjgnp [2014-04-24]
CHR Extension: (Saving Smart) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjjalcnahngbokiineilafhgcehchdm [2014-05-01]
CHR Extension: (SNT) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcccmakdmjkkhjnfoklfjoihkfpgpddg [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjmkpimpkpleocgfgecnhgngoljojnic [2014-04-24]
CHR Extension: (Free Visio Viewer) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcpmofnlkemfkhgngcdppgbhncoflmpe [2014-04-24]
CHR Extension: (Chrome In-App Payments service) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombjndkilglemokkpneanjnpjefpbmdb [2014-04-24]
CHR HKLM-x32\...\Chrome\Extension: [iniieblifogecdlkejbmonblijmdaiog] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\ChromeAddin\ChromeAddin.crx [2012-03-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe [262288 2013-08-31] (Symantec Corporation)
R2 VBoxService; C:\Windows\System32\VBoxService.exe [1736976 2013-12-18] (Oracle Corporation)
S2 WMCoreService; C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe [584232 2011-01-07] (Ericsson AB)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\BASHDefs\20130814.001\BHDrvx64.sys [1525336 2013-08-13] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1500010.003\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2010-02-23] (Ericsson AB)
S3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [30248 2010-02-23] (Ericsson AB)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-02-21] (Symantec Corporation)
S3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [85280 2009-09-09] (O2Micro)
R1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\IPSDefs\20130805.011\IDSVia64.sys [520280 2013-08-06] (Symantec Corporation)
S3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [411208 2010-10-31] (MCCI Corporation)
S3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [419912 2010-10-31] (MCCI Corporation)
S3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [19528 2010-10-31] (MCCI Corporation)
S3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [472648 2010-10-31] (MCCI Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20140221.009\ENG64.SYS [126040 2014-02-21] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20140221.009\EX64.SYS [2099288 2014-02-21] (Symantec Corporation)
S3 SRTSP; C:\Windows\system32\drivers\NAVx64\1500010.003\SRTSP64.SYS [854616 2013-07-31] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1500010.003\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAVx64\1500010.003\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1500010.003\SYMEFA64.SYS [1147480 2013-08-05] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-05-15] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1500010.003\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NAVx64\1500010.003\SYMNETS.SYS [590424 2013-07-31] (Symantec Corporation)
S3 t36wgps; C:\Windows\System32\DRIVERS\t36wgps64.sys [101416 2010-12-01] (Ericsson AB)
R0 VBoxGuest; C:\Windows\System32\DRIVERS\VBoxGuest.sys [142608 2013-12-18] (Oracle Corporation)
R3 VBoxMouse; C:\Windows\System32\DRIVERS\VBoxMouse.sys [118544 2013-12-18] (Oracle Corporation)
R1 VBoxSF; C:\Windows\System32\drivers\VBoxSF.sys [291600 2013-12-18] (Oracle Corporation)
R3 VBoxVideo; C:\Windows\System32\DRIVERS\VBoxVideo.sys [142608 2013-12-18] (Oracle Corporation)
S3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [276008 2010-12-28] (Ericsson AB)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cleanhlp; \??\E:\EmsisoftEmergencyKit 4.0.0.17\Run\cleanhlp64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-20 20:31 - 2014-05-20 20:31 - 00004186 _____ () C:\Users\Susann\Desktop\JRT.txt
2014-05-20 20:13 - 2014-05-20 20:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-20 20:04 - 2014-05-20 20:07 - 00000000 ____D () C:\AdwCleaner
2014-05-20 19:17 - 2014-05-20 19:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-20 19:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-20 19:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-19 15:24 - 2014-05-19 15:24 - 00036400 _____ () C:\ComboFix.txt
2014-05-19 13:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-19 13:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-19 13:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-19 13:25 - 2014-05-19 15:24 - 00000000 ____D () C:\Qoobox
2014-05-19 13:24 - 2014-05-19 15:23 - 00000000 ____D () C:\Windows\erdnt
2014-05-18 21:30 - 2014-05-18 21:30 - 00003544 ____N () C:\bootsqm.dat
2014-05-18 14:39 - 2014-05-18 14:39 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-05-18 10:42 - 2014-05-18 10:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions
2014-05-18 10:36 - 2014-05-18 10:36 - 00000000 ____D () C:\Program Files\Oracle
2014-05-16 15:04 - 2014-05-16 15:04 - 00262144 _____ () C:\Windows\Minidump\051614-44928-01.dmp
2014-05-16 15:04 - 2014-05-16 15:04 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 15:03 - 2014-05-16 15:03 - 590753519 _____ () C:\Windows\MEMORY.DMP
2014-05-16 14:58 - 2014-05-20 21:55 - 00000000 ____D () C:\FRST
2014-05-16 14:57 - 2014-05-16 15:20 - 00000000 ____D () C:\Users\Susann\Desktop\Neuer Ordner
2014-05-16 09:03 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-05-16 09:03 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-05-16 09:03 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-05-16 09:03 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-05-16 09:03 - 2013-01-13 21:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-05-16 09:03 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-05-16 09:03 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-05-16 09:03 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-05-16 09:03 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-05-16 09:03 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-05-16 09:03 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-05-16 09:03 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-05-16 09:03 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-05-16 09:03 - 2013-01-13 21:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-05-16 09:03 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-05-16 09:03 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-05-16 09:03 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-05-16 09:03 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-05-16 09:03 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-05-16 09:03 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-05-16 09:03 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-05-16 09:03 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-05-16 09:03 - 2013-01-13 21:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-05-16 09:03 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-05-16 09:03 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-05-16 09:03 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-05-16 09:03 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-05-16 09:03 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-05-16 09:03 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-05-16 09:03 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-05-16 09:03 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-05-16 09:03 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-05-16 09:00 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-05-16 08:55 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-16 08:55 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-16 08:55 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-16 08:55 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-16 08:55 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-05-16 08:55 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-05-16 08:55 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-05-16 08:55 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-16 08:54 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-16 08:54 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-16 08:54 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-15 23:29 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-05-15 23:29 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-05-15 22:36 - 2014-05-15 22:36 - 00000134 _____ () C:\Users\Susann\Desktop\Internet Explorer-Problembehebung.url
2014-05-15 22:00 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-05-15 21:59 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-15 21:59 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 12296192 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 09075712 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 01495040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 11020800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 06041088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 02078208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 01232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-15 21:57 - 2014-02-24 16:01 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 21:57 - 2014-02-24 15:39 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 21:55 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-05-15 21:55 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-05-15 21:55 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-05-15 21:55 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-05-15 21:48 - 2013-12-10 04:28 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-15 21:48 - 2013-12-10 04:02 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-15 21:47 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-05-15 21:46 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-05-15 21:46 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-05-15 21:45 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-05-15 21:45 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-05-15 21:45 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-05-15 21:45 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-05-15 21:45 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-05-15 21:45 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-05-15 21:45 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-05-15 21:45 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-05-15 21:45 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-05-15 21:45 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-05-15 21:43 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-05-15 21:43 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-05-15 21:43 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-05-15 21:43 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-05-15 21:43 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-05-15 21:43 - 2013-09-25 04:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 21:43 - 2013-09-25 04:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 21:43 - 2013-09-25 04:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 21:43 - 2013-09-25 04:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 21:43 - 2013-09-25 04:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 21:43 - 2013-09-25 04:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 21:43 - 2013-09-25 04:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 21:43 - 2013-09-25 04:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-05-15 21:43 - 2013-09-25 03:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 21:43 - 2013-09-25 03:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 21:43 - 2013-09-25 03:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 21:43 - 2013-09-25 03:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-05-15 21:43 - 2013-09-25 03:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 21:43 - 2013-07-04 14:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-05-15 21:41 - 2013-10-05 22:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-05-15 21:41 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-05-15 21:40 - 2013-09-28 03:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-05-15 21:38 - 2013-10-03 04:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-05-15 21:38 - 2013-10-03 04:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-05-15 21:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-05-15 21:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-05-15 21:35 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 21:35 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 21:33 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-05-15 21:33 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-05-15 21:33 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-05-15 21:32 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-05-15 21:32 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-05-15 21:31 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-05-15 21:31 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-05-15 21:31 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-05-15 21:31 - 2012-11-29 00:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-05-15 21:30 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-05-15 21:30 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-05-15 21:29 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-05-15 21:29 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-05-15 21:29 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-05-15 21:29 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-05-15 21:29 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-05-15 21:29 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-05-15 21:29 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-05-15 21:29 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-05-15 21:29 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-05-15 21:29 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-05-15 21:28 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 21:28 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-15 21:28 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-05-15 21:28 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-15 21:28 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-15 21:28 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 21:28 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 21:28 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-05-15 21:28 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-15 21:28 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-15 21:28 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-05-15 21:27 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-05-15 21:27 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-05-15 21:27 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-05-15 21:27 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-05-15 21:27 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-05-15 21:27 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-05-15 21:26 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-05-15 21:25 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-05-15 21:25 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-05-15 21:23 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-05-15 21:23 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-05-15 21:23 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-15 21:22 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-05-15 21:22 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-05-15 21:16 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-05-15 21:16 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-05-15 21:16 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-05-15 21:16 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-05-15 21:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-05-15 21:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-05-15 21:14 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-15 21:13 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-05-15 21:13 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-05-15 21:13 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-05-15 21:13 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-05-15 21:13 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-05-15 21:13 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-05-15 21:12 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-05-15 21:04 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-05-15 21:04 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-05-15 21:03 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-05-15 21:03 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-05-15 20:59 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-05-15 20:59 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-05-15 20:57 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 20:57 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 20:56 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-05-15 20:56 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-05-15 20:56 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-05-15 20:56 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-05-15 20:56 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-05-15 20:55 - 2012-06-16 07:15 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-05-15 20:55 - 2012-06-16 06:26 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-05-15 20:53 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-05-15 20:51 - 2012-06-09 07:43 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 20:51 - 2012-06-09 06:41 - 12873728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 20:50 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-05-15 20:50 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-05-15 20:49 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-05-15 20:49 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-05-15 20:49 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-05-15 20:49 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-05-15 20:48 - 2014-05-15 20:48 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-05-15 20:48 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-05-15 20:45 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-05-15 20:45 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-05-15 20:45 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-05-15 20:44 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-05-15 20:44 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-05-15 20:44 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-05-15 20:44 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-05-15 20:44 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-05-15 20:43 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-05-15 20:43 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-05-15 20:42 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-05-15 20:42 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-05-15 20:41 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-05-15 20:41 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-05-15 20:41 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-05-15 20:41 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-05-15 20:40 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-05-15 20:40 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-05-15 20:39 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-05-15 20:39 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-05-15 20:39 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-05-15 20:39 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-05-15 20:38 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-05-15 20:38 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-05-15 20:38 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-05-15 20:38 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

suppenhuhn12 20.05.2014 21:03
Code:
2014-05-15 20:37 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-05-15 20:35 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-05-15 20:35 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-05-15 20:35 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-05-15 20:35 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-05-15 20:35 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-05-15 20:35 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-05-15 20:35 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-05-15 20:35 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-05-15 20:34 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-05-15 20:34 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-05-15 20:34 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-05-15 20:33 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-05-15 20:33 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-05-15 20:33 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-05-15 20:33 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-05-15 20:33 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-05-15 20:33 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-05-15 20:33 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-05-15 20:31 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-05-15 20:31 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-05-15 20:31 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-05-15 20:31 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-05-15 20:30 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-05-15 20:14 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-05-15 20:14 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-05-15 20:14 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-05-15 20:14 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-05-15 20:14 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-05-15 20:14 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-05-15 20:13 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-05-15 19:54 - 2014-05-15 21:53 - 01601384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-15 19:44 - 2014-05-15 23:28 - 00023509 _____ () C:\Windows\IE11_main.log
2014-05-15 19:42 - 2014-05-15 19:42 - 00086944 _____ () C:\Users\Susann\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 19:40 - 2014-05-15 19:40 - 00001454 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00001420 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00000020 ___SH () C:\Users\Susann\ntuser.ini
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 ____D () C:\Recovery
2014-05-15 19:38 - 2014-05-15 19:39 - 00000000 ____D () C:\Windows\Panther
2014-05-15 19:36 - 2014-05-15 19:36 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-05-15 19:35 - 2014-05-20 21:52 - 01834703 _____ () C:\Windows\WindowsUpdate.log
2014-05-15 19:27 - 2014-05-15 19:26 - 00000000 ____D () C:\$WINDOWS.~Q
2014-05-15 19:25 - 2014-05-15 19:25 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-15 19:16 - 2014-05-15 19:22 - 00000000 ____D () C:\$INPLACE.~TR
2014-05-15 18:44 - 2014-05-16 12:43 - 00000000 ____D () C:\Users\Susann
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Vorlagen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Startmenü
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Netzwerkumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Lokale Einstellungen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Eigene Dateien
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Druckumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Musik
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Bilder
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Verlauf
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Anwendungsdaten
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Anwendungsdaten
2014-05-15 18:44 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 18:44 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 18:43 - 2014-05-15 18:43 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-05-15 18:43 - 2014-05-15 18:43 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_t36gsen_01_09_00.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwussf64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwuss64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WwanUsbMp64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 18:41 - 2014-05-15 18:41 - 00000000 ____D () C:\Program Files\Apoint2K
2014-05-15 17:47 - 2014-05-15 19:26 - 00006585 _____ () C:\Windows\comsetup.log
2014-05-15 14:00 - 2014-05-15 17:41 - 00001014 _____ () C:\Windows\CompatibilityIssues.txt
2014-05-15 13:57 - 2014-05-15 17:37 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-05-15 13:57 - 2014-05-15 17:37 - 00001890 _____ () C:\Windows\diagerr.xml
2014-05-15 10:52 - 2014-05-15 19:24 - 00000000 ____D () C:\Windows\System32\Tasks\Norton AntiVirus
2014-05-15 10:48 - 2014-05-15 18:46 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-15 10:48 - 2014-05-15 10:48 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-05-15 10:48 - 2014-05-15 10:48 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-05-15 10:48 - 2014-05-15 10:48 - 00003216 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-15 10:48 - 2014-05-15 10:48 - 00002475 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk
2014-05-15 10:47 - 2014-05-16 09:14 - 00000000 ____D () C:\ProgramData\Norton
2014-05-15 10:47 - 2014-05-15 19:00 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64
2014-05-15 10:47 - 2014-05-15 18:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2014-05-15 10:47 - 2014-05-15 18:55 - 00000000 ____D () C:\Program Files (x86)\Norton AntiVirus
2014-05-15 10:08 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\Documents\Anti-Malware
2014-05-15 09:55 - 2014-05-15 10:07 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 09:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-15 07:20 - 2010-12-02 09:49 - 00315568 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1c62x64.sys
2014-05-15 07:20 - 2010-12-02 09:49 - 00092352 _____ (Intel Corporation) C:\Windows\system32\NicInstC.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00068264 _____ (Intel Corporation) C:\Windows\system32\e1cmsg.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00003114 _____ () C:\Windows\system32\e1c62x64.din
2014-05-14 21:46 - 2010-12-20 18:08 - 00008192 _____ () C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-05-14 21:46 - 2010-10-19 16:34 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-05-14 21:39 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TFPU
2014-05-14 21:39 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Public\Toshiba
2014-05-14 21:34 - 2014-05-14 21:34 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Wireless Display.lnk
2014-05-14 21:34 - 2014-05-14 21:34 - 00002111 _____ () C:\Users\Public\Desktop\Intel(R) Wireless Display.lnk
2014-05-14 21:28 - 2011-01-12 17:51 - 00439320 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2014-05-14 13:34 - 2014-05-15 19:00 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-14 12:50 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\CrashDumps
2014-05-14 12:30 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Intel
2014-05-14 12:29 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-14 12:24 - 2010-12-02 09:49 - 00314568 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-05-14 11:54 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-14 11:51 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-14 11:51 - 2014-05-15 18:48 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-14 11:51 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-05-14 10:38 - 2014-05-15 18:46 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-14 09:41 - 2014-05-14 21:40 - 00028554 _____ () C:\Windows\DPINST.LOG
2014-05-14 09:34 - 2014-05-14 21:04 - 00000000 ____D () C:\Intel
2014-05-14 09:08 - 2014-05-20 21:56 - 00000415 _____ () C:\TMachInfo.log
2014-05-14 08:46 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-14 08:46 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-14 07:47 - 2014-05-20 21:51 - 00000000 ____D () C:\ec
2014-05-14 07:17 - 2014-05-14 07:17 - 00000000 ____D () C:\SUPERDelete
2014-05-14 07:15 - 2014-05-20 19:18 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 07:14 - 2014-05-14 07:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 07:13 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-14 07:13 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 18:51 - 2014-05-14 07:01 - 00008224 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-05-09 09:36 - 2014-05-15 19:16 - 00000000 ____D () C:\Users\Susann\Downloads\PC Drivers HeadQuarters
2014-05-09 09:36 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\PC Drivers HeadQuarters
2014-05-09 09:36 - 2014-05-15 18:55 - 00000000 ____D () C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-09 06:41 - 2014-05-15 19:16 - 00000000 ____D () C:\Users\Susann\Downloads\Driver Restore
2014-05-09 06:41 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-09 06:41 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\UAB
2014-05-09 06:39 - 2014-05-15 18:57 - 00000000 ____D () C:\ProgramData\Driver Restore
2014-05-08 19:31 - 2014-05-08 19:31 - 00001006 _____ () C:\WirelessDiagLog.csv
2014-05-07 19:00 - 2014-05-07 19:00 - 02076672 _____ () C:\Users\Susann\Desktop\Vortrag Franz Hörmann_Otmar_Mai_2014.ppt
2014-05-07 07:31 - 2014-05-15 19:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 15:20 - 2014-05-04 15:25 - 00001664 _____ () C:\Windows\system32\ASOROSet.bin
2014-05-04 15:02 - 2014-05-04 15:02 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial (1).exe
2014-05-04 14:58 - 2014-05-04 14:58 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial.exe
2014-05-04 14:54 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-04 14:43 - 2014-05-04 14:43 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\rightbackup
2014-05-04 14:43 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieSiteList
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Gast
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Administrator
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-23 07:52 - 2014-03-06 11:31 - 00004096 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 07:52 - 2014-03-06 10:28 - 00752640 ____N (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 07:52 - 2014-03-06 09:56 - 00038400 ____N (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 07:52 - 2014-03-06 09:13 - 00032256 ____N (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 07:51 - 2014-03-06 10:57 - 00048640 ____N (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 07:51 - 2014-03-06 10:29 - 00111616 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 07:51 - 2014-03-06 10:15 - 00940032 ____N (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 07:51 - 2014-03-06 10:11 - 05784064 ____N (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 07:51 - 2014-03-06 10:01 - 00051200 ____N (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 07:51 - 2014-03-06 09:46 - 04254720 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 07:51 - 2014-03-06 09:36 - 00592896 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

==================== One Month Modified Files and Folders =======

2014-05-20 21:56 - 2014-05-14 09:08 - 00000415 _____ () C:\TMachInfo.log
2014-05-20 21:55 - 2014-05-16 14:58 - 00000000 ____D () C:\FRST
2014-05-20 21:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-20 21:53 - 2009-07-14 06:51 - 00558091 _____ () C:\Windows\setupact.log
2014-05-20 21:52 - 2014-05-15 19:35 - 01834703 _____ () C:\Windows\WindowsUpdate.log
2014-05-20 21:52 - 2009-07-14 06:45 - 00036368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-20 21:52 - 2009-07-14 06:45 - 00036368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-20 21:51 - 2014-05-14 07:47 - 00000000 ____D () C:\ec
2014-05-20 21:40 - 2012-11-08 21:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-20 20:31 - 2014-05-20 20:31 - 00004186 _____ () C:\Users\Susann\Desktop\JRT.txt
2014-05-20 20:13 - 2014-05-20 20:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-20 20:09 - 2010-11-21 05:47 - 00037674 _____ () C:\Windows\PFRO.log
2014-05-20 20:07 - 2014-05-20 20:04 - 00000000 ____D () C:\AdwCleaner
2014-05-20 19:18 - 2014-05-14 07:15 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-20 19:17 - 2014-05-20 19:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-19 15:24 - 2014-05-19 15:24 - 00036400 _____ () C:\ComboFix.txt
2014-05-19 15:24 - 2014-05-19 13:25 - 00000000 ____D () C:\Qoobox
2014-05-19 15:24 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-05-19 15:24 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-19 15:23 - 2014-05-19 13:24 - 00000000 ____D () C:\Windows\erdnt
2014-05-19 15:21 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-19 07:14 - 2012-11-01 20:44 - 00000000 ____D () C:\Users\Susann\Documents\Outlook-Dateien
2014-05-19 07:00 - 2012-11-01 19:37 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-18 21:30 - 2014-05-18 21:30 - 00003544 ____N () C:\bootsqm.dat
2014-05-18 20:23 - 2010-11-21 08:50 - 00702198 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 20:23 - 2010-11-21 08:50 - 00149838 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 20:23 - 2009-07-14 07:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 14:39 - 2014-05-18 14:39 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-05-18 10:42 - 2014-05-18 10:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions
2014-05-18 10:36 - 2014-05-18 10:36 - 00000000 ____D () C:\Program Files\Oracle
2014-05-16 15:22 - 2012-11-01 23:12 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-16 15:20 - 2014-05-16 14:57 - 00000000 ____D () C:\Users\Susann\Desktop\Neuer Ordner
2014-05-16 15:04 - 2014-05-16 15:04 - 00262144 _____ () C:\Windows\Minidump\051614-44928-01.dmp
2014-05-16 15:04 - 2014-05-16 15:04 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 15:03 - 2014-05-16 15:03 - 590753519 _____ () C:\Windows\MEMORY.DMP
2014-05-16 12:43 - 2014-05-15 18:44 - 00000000 ____D () C:\Users\Susann
2014-05-16 12:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-16 10:48 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-16 10:09 - 2011-08-05 21:08 - 00000000 ____D () C:\Program Files (x86)\Toshiba TEMPRO
2014-05-16 10:09 - 2011-08-05 20:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-05-16 09:30 - 2009-07-14 06:45 - 00344536 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-05-16 09:14 - 2014-05-15 10:47 - 00000000 ____D () C:\ProgramData\Norton
2014-05-15 23:28 - 2014-05-15 19:44 - 00023509 _____ () C:\Windows\IE11_main.log
2014-05-15 22:36 - 2014-05-15 22:36 - 00000134 _____ () C:\Users\Susann\Desktop\Internet Explorer-Problembehebung.url
2014-05-15 22:13 - 2012-11-01 19:29 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 22:13 - 2012-11-01 19:18 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 22:12 - 2011-10-07 19:28 - 00000438 __RSH () C:\ProgramData\ntuser.pol
2014-05-15 22:05 - 2010-11-21 09:01 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-15 22:05 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-15 22:05 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-15 22:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-15 21:53 - 2014-05-15 19:54 - 01601384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-15 21:05 - 2012-11-01 22:40 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-15 20:48 - 2014-05-15 20:48 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-05-15 20:12 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-05-15 19:42 - 2014-05-15 19:42 - 00086944 _____ () C:\Users\Susann\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 19:40 - 2014-05-15 19:40 - 00001454 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00001420 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00000020 ___SH () C:\Users\Susann\ntuser.ini
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 ____D () C:\Recovery
2014-05-15 19:39 - 2014-05-15 19:38 - 00000000 ____D () C:\Windows\Panther
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-15 19:38 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-05-15 19:38 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-05-15 19:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 19:36 - 2014-05-15 19:36 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-05-15 19:26 - 2014-05-15 19:27 - 00000000 ____D () C:\$WINDOWS.~Q
2014-05-15 19:26 - 2014-05-15 17:47 - 00006585 _____ () C:\Windows\comsetup.log
2014-05-15 19:25 - 2014-05-15 19:25 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-05-15 19:24 - 2014-05-15 10:52 - 00000000 ____D () C:\Windows\System32\Tasks\Norton AntiVirus
2014-05-15 19:24 - 2012-11-01 19:38 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-05-15 19:24 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-05-15 19:24 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-15 19:22 - 2014-05-15 19:16 - 00000000 ____D () C:\$INPLACE.~TR
2014-05-15 19:20 - 2009-07-14 06:46 - 00005157 _____ () C:\Windows\DtcInstall.log
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 19:17 - 2014-01-17 11:53 - 00000000 ___RD () C:\Users\Susann\Podcasts
2014-05-15 19:17 - 2013-01-29 13:17 - 00000000 ____D () C:\Users\Susann\Smiley
2014-05-15 19:16 - 2014-05-09 09:36 - 00000000 ____D () C:\Users\Susann\Downloads\PC Drivers HeadQuarters
2014-05-15 19:16 - 2014-05-09 06:41 - 00000000 ____D () C:\Users\Susann\Downloads\Driver Restore
2014-05-15 19:16 - 2014-03-31 08:31 - 00000000 ____D () C:\Users\Susann\Downloads\look good
2014-05-15 19:16 - 2014-03-18 14:01 - 00000000 ____D () C:\Users\Susann\Downloads\results
2014-05-15 19:16 - 2014-03-18 12:41 - 00000000 ____D () C:\Users\Susann\Downloads\convention
2014-05-15 19:16 - 2014-03-11 10:30 - 00000000 ____D () C:\Users\Susann\Downloads\Gen Y
2014-05-15 19:16 - 2014-02-11 14:34 - 00000000 ____D () C:\Users\Susann\Downloads\food
2014-05-15 19:16 - 2014-02-06 14:35 - 00000000 ____D () C:\Users\Susann\Downloads\Lifestyle
2014-05-15 19:16 - 2014-01-29 10:24 - 00000000 ____D () C:\Users\Susann\Downloads\events
2014-05-15 19:16 - 2014-01-12 13:44 - 00000000 ____D () C:\Users\Susann\Downloads\NWM
2014-05-15 19:16 - 2013-12-15 18:53 - 00000000 ____D () C:\Users\Susann\Downloads\Fun
2014-05-15 19:16 - 2013-11-18 18:13 - 00000000 ____D () C:\Users\Susann\Downloads\24Stunden
2014-05-15 19:16 - 2013-03-28 14:26 - 00000000 ____D () C:\Users\Susann\Downloads\Quotes
2014-05-15 19:16 - 2013-03-05 13:00 - 00000000 ____D () C:\Users\Susann\Downloads\JP_Business
2014-05-15 19:16 - 2013-03-05 13:00 - 00000000 ____D () C:\Users\Susann\Downloads\Gesundes
2014-05-15 19:16 - 2013-03-05 12:59 - 00000000 ____D () C:\Users\Susann\Downloads\Bücher
2014-05-15 19:16 - 2013-03-03 11:39 - 00000000 ____D () C:\Users\Susann\Downloads\Yoga
2014-05-15 19:16 - 2013-02-18 09:29 - 00000000 ____D () C:\Users\Susann\Downloads\Shape
2014-05-15 19:16 - 2012-11-07 18:04 - 00000000 ____D () C:\Users\Susann\Downloads\lide25vst6411011ade
2014-05-15 19:16 - 2012-11-02 16:29 - 00000000 ___RD () C:\Users\Susann\Dropbox
2014-05-15 19:16 - 2012-11-01 23:58 - 00000000 ____D () C:\Users\Susann\Documents\Reg Files
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ___RD () C:\Users\Susann\Documents\Systemsicherung
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ____D () C:\Users\Susann\Documents\Wohnung
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ____D () C:\Users\Susann\Documents\skorpio Verlag
2014-05-15 19:16 - 2012-11-01 23:50 - 00000000 ____D () C:\Users\Susann\Documents\Privat
2014-05-15 19:16 - 2012-11-01 23:48 - 00000000 ____D () C:\Users\Susann\Documents\Personal
2014-05-15 19:15 - 2012-11-05 21:47 - 00000000 ____D () C:\Users\Susann\Documents\My Albums
2014-05-15 19:15 - 2012-11-05 16:45 - 00000000 ____D () C:\Users\Susann\Documents\Fax
2014-05-15 19:15 - 2012-11-01 23:46 - 00000000 ____D () C:\Users\Susann\Documents\NSA
2014-05-15 19:15 - 2012-11-01 23:42 - 00000000 ___RD () C:\Users\Susann\Documents\NEUE_SICHERUNG
2014-05-15 19:15 - 2012-11-01 23:34 - 00000000 ____D () C:\Users\Susann\Documents\Locations
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Konzert
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Kindergruppe, MKN v. USB Stick
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Euro
2014-05-15 19:14 - 2012-11-01 23:30 - 00000000 ____D () C:\Users\Susann\Documents\Diverse
2014-05-15 19:14 - 2012-11-01 23:30 - 00000000 ____D () C:\Users\Susann\Documents\Divers
2014-05-15 19:14 - 2012-11-01 23:29 - 00000000 ___RD () C:\Users\Susann\Documents\CyberLink
2014-05-15 19:14 - 2012-11-01 23:29 - 00000000 ____D () C:\Users\Susann\Documents\Buchhaltung
2014-05-15 19:14 - 2012-11-01 23:24 - 00000000 ____D () C:\Users\Susann\Documents\BILLA
2014-05-15 19:13 - 2014-05-15 10:08 - 00000000 ____D () C:\Users\Susann\Documents\Anti-Malware
2014-05-15 19:13 - 2014-05-14 21:39 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TFPU
2014-05-15 19:13 - 2014-05-14 07:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-15 19:13 - 2014-05-04 14:54 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-15 19:13 - 2014-02-03 09:05 - 00000000 ____D () C:\Users\Susann\Desktop\2014_02_03
2014-05-15 19:13 - 2014-01-04 17:46 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\CyberLink
2014-05-15 19:13 - 2013-12-07 21:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Sonic Solutions
2014-05-15 19:13 - 2013-09-13 17:28 - 00000000 ____D () C:\Users\Susann\Desktop\Lillys Fest
2014-05-15 19:13 - 2013-08-06 13:10 - 00000000 ____D () C:\Users\Susann\Desktop\2013_08_06
2014-05-15 19:13 - 2013-06-26 11:51 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TeamViewer
2014-05-15 19:13 - 2013-06-10 16:01 - 00000000 ____D () C:\Users\Susann\Documents\24Stunden
2014-05-15 19:13 - 2013-05-12 21:43 - 00000000 ____D () C:\Users\Susann\Desktop\calimera
2014-05-15 19:13 - 2013-04-20 13:47 - 00000000 ____D () C:\Users\Susann\Desktop\Aufwachen dein Leben wartet - Lynn Grabhorn
2014-05-15 19:13 - 2012-12-16 19:48 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\dvdcss
2014-05-15 19:13 - 2012-11-27 20:09 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\InstallShield
2014-05-15 19:13 - 2012-11-07 22:31 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TOSHIBA Online Product Information
2014-05-15 19:13 - 2012-11-04 20:47 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Canon
2014-05-15 19:13 - 2012-11-02 16:23 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Dropbox
2014-05-15 19:13 - 2012-11-02 11:25 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Macromedia
2014-05-15 19:13 - 2012-11-01 23:59 - 00000000 ____D () C:\Users\Susann\Desktop\Canon
2014-05-15 19:13 - 2012-11-01 23:20 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\vlc
2014-05-15 19:13 - 2012-11-01 22:58 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\ScanSoft
2014-05-15 19:13 - 2012-11-01 22:30 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Nero
2014-05-15 19:13 - 2012-11-01 22:24 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Skype
2014-05-15 19:13 - 2012-11-01 21:53 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Mozilla
2014-05-15 19:13 - 2012-11-01 19:29 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Toshiba
2014-05-15 19:13 - 2012-11-01 19:28 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\WinBatch
2014-05-15 19:13 - 2012-11-01 19:18 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Intel
2014-05-15 19:12 - 2014-05-14 12:50 - 00000000 ____D () C:\Users\Susann\AppData\Local\CrashDumps
2014-05-15 19:12 - 2014-05-14 08:46 - 00000000 ____D () C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-15 19:12 - 2014-05-09 06:41 - 00000000 ____D () C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-15 19:12 - 2014-03-24 10:04 - 00000000 ____D () C:\Users\Susann\AppData\Local\Skype
2014-05-15 19:12 - 2014-03-04 10:16 - 00000000 ____D () C:\Users\Susann\AppData\Local\Windows Live
2014-05-15 19:12 - 2013-06-20 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\HappyFoto-Designer
2014-05-15 19:12 - 2013-03-25 22:08 - 00000000 ____D () C:\Users\Susann\AppData\Local\Citrix
2014-05-15 19:12 - 2012-11-08 21:11 - 00000000 ____D () C:\Users\Susann\AppData\Local\Macromedia
2014-05-15 19:12 - 2012-11-05 21:47 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\ArcSoft
2014-05-15 19:12 - 2012-11-01 23:05 - 00000000 ____D () C:\Users\Susann\AppData\Local\Scansoft
2014-05-15 19:12 - 2012-11-01 22:40 - 00000000 ____D () C:\Users\Susann\AppData\Local\Adobe
2014-05-15 19:12 - 2012-11-01 22:31 - 00000000 ____D () C:\Users\Susann\AppData\Local\Nero_AG
2014-05-15 19:12 - 2012-11-01 22:30 - 00000000 ____D () C:\Users\Susann\AppData\Local\Nero
2014-05-15 19:12 - 2012-11-01 21:53 - 00000000 ____D () C:\Users\Susann\AppData\Local\Mozilla
2014-05-15 19:12 - 2012-11-01 20:44 - 00000000 ____D () C:\Users\Susann\AppData\Local\Apps\2.0
2014-05-15 19:12 - 2012-11-01 19:45 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Adobe
2014-05-15 19:12 - 2012-11-01 19:42 - 00000000 ____D () C:\Users\Susann\AppData\Local\Google
2014-05-15 19:12 - 2012-11-01 19:29 - 00000000 ____D () C:\Users\Susann\AppData\Local\TOSHIBA
2014-05-15 19:12 - 2012-11-01 19:26 - 00000000 ____D () C:\Users\Susann\AppData\Local\VirtualStore
2014-05-15 19:03 - 2011-10-07 19:51 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-05-15 19:03 - 2011-10-07 19:32 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-05-15 19:03 - 2010-11-21 08:49 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-05-15 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-05-15 19:02 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\tr
2014-05-15 19:02 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-05-15 19:00 - 2014-05-15 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64
2014-05-15 19:00 - 2014-05-14 13:34 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-15 19:00 - 2014-05-07 07:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 19:00 - 2013-06-26 15:19 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-05-15 19:00 - 2012-11-27 20:09 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-05-15 19:00 - 2012-11-08 21:10 - 00000000 ____D () C:\Windows\system32\Macromed
2014-05-15 19:00 - 2011-10-07 19:59 - 00000000 ____D () C:\Windows\OemDrv
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\sv
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\sk
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\ru
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\pt
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\pl
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\no
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\hu
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\fi
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\es
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\el
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\da
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\cs
2014-05-15 19:00 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\nl
2014-05-15 19:00 - 2011-02-11 12:24 - 00000000 ____D () C:\Windows\system32\nl
2014-05-15 19:00 - 2011-02-11 12:15 - 00000000 ____D () C:\Windows\system32\it
2014-05-15 19:00 - 2011-02-11 12:05 - 00000000 ____D () C:\Windows\system32\fr
2014-05-15 19:00 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-05-15 19:00 - 2010-11-21 08:49 - 00000000 ____D () C:\Windows\system32\de
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 18:59 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\it
2014-05-15 18:59 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\fr
2014-05-15 18:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-05-15 18:58 - 2014-05-15 10:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2014-05-15 18:58 - 2014-05-14 21:39 - 00000000 ____D () C:\Users\Public\Toshiba
2014-05-15 18:58 - 2014-05-14 12:30 - 00000000 ____D () C:\ProgramData\Intel
2014-05-15 18:58 - 2014-05-14 12:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-15 18:58 - 2014-05-14 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-15 18:58 - 2014-05-14 08:46 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-15 18:58 - 2014-05-14 07:13 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 18:58 - 2014-05-09 09:36 - 00000000 ____D () C:\ProgramData\PC Drivers HeadQuarters
2014-05-15 18:58 - 2014-05-09 06:41 - 00000000 ____D () C:\ProgramData\UAB
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Gast
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Administrator
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 18:58 - 2014-03-24 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-15 18:58 - 2014-01-17 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
2014-05-15 18:58 - 2013-12-30 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2014-05-15 18:58 - 2013-07-31 10:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-15 18:58 - 2013-06-26 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series Benutzerregistrierung
2014-05-15 18:58 - 2013-06-26 15:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series Manual
2014-05-15 18:58 - 2013-06-26 15:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series
2014-05-15 18:58 - 2013-06-25 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-05-15 18:58 - 2013-06-20 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HappyFoto-Designer
2014-05-15 18:58 - 2013-03-14 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-15 18:58 - 2012-11-02 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bob
2014-05-15 18:58 - 2012-11-01 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon JX210P series Manual
2014-05-15 18:58 - 2012-11-01 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4.0
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-15 18:58 - 2012-11-01 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoStudio 5.5
2014-05-15 18:58 - 2012-11-01 22:22 - 00000000 ____D () C:\ProgramData\TOSHIBA Tempro
2014-05-15 18:58 - 2012-11-01 22:22 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2014-05-15 18:58 - 2012-11-01 21:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-15 18:58 - 2012-11-01 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus
2014-05-15 18:58 - 2012-11-01 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-15 18:58 - 2012-11-01 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay
2014-05-15 18:58 - 2012-11-01 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2014-05-15 18:58 - 2012-11-01 19:19 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-05-15 18:58 - 2011-10-07 19:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2014-05-15 18:58 - 2011-10-07 19:42 - 00000000 ____D () C:\ProgramData\Toshiba
2014-05-15 18:58 - 2011-08-05 21:41 - 00000000 ____D () C:\ProgramData\McAfee
2014-05-15 18:58 - 2011-08-05 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-15 18:58 - 2011-08-05 21:36 - 00000000 ____D () C:\ProgramData\WildTangent
2014-05-15 18:58 - 2011-08-05 21:33 - 00000000 ____D () C:\Windows\de
2014-05-15 18:58 - 2011-08-05 21:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-05-15 18:58 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\en
2014-05-15 18:58 - 2011-08-05 21:25 - 00000000 ____D () C:\ProgramData\Skype
2014-05-15 18:58 - 2011-08-05 21:14 - 00000000 ____D () C:\ProgramData\Nero
2014-05-15 18:58 - 2011-08-05 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-05-15 18:58 - 2011-08-05 20:57 - 00000000 ____D () C:\ProgramData\Sun
2014-05-15 18:58 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-15 18:58 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-15 18:58 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 18:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors
2014-05-15 18:57 - 2014-05-09 06:39 - 00000000 ____D () C:\ProgramData\Driver Restore
2014-05-15 18:57 - 2013-12-30 17:15 - 00000000 ____D () C:\ProgramData\CyberLink
2014-05-15 18:57 - 2013-10-20 18:47 - 00000000 ____D () C:\Program Files (x86)\WfK
2014-05-15 18:57 - 2013-06-26 15:52 - 00000000 ___HD () C:\ProgramData\CanonIJMIG
2014-05-15 18:57 - 2013-06-26 15:51 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-05-15 18:57 - 2013-06-26 15:51 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-05-15 18:57 - 2013-06-26 15:48 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2014-05-15 18:57 - 2013-06-26 15:33 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-05-15 18:57 - 2013-06-25 17:09 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-05-15 18:57 - 2013-06-25 17:05 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter
2014-05-15 18:57 - 2013-06-20 19:10 - 00000000 ____D () C:\ProgramData\HappyFoto-Designer
2014-05-15 18:57 - 2012-11-01 23:20 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-05-15 18:57 - 2012-11-01 23:11 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-05-15 18:57 - 2011-10-07 19:23 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-05-15 18:57 - 2011-08-05 21:37 - 00000000 ____D () C:\ProgramData\Google
2014-05-15 18:57 - 2011-08-05 21:36 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-05-15 18:57 - 2011-08-05 21:36 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA Games
2014-05-15 18:57 - 2011-08-05 21:28 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-15 18:57 - 2011-08-05 21:03 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-15 18:56 - 2011-08-05 20:58 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA
2014-05-15 18:55 - 2014-05-15 10:47 - 00000000 ____D () C:\Program Files (x86)\Norton AntiVirus
2014-05-15 18:55 - 2014-05-09 09:36 - 00000000 ____D () C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-15 18:55 - 2014-03-24 10:04 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-15 18:55 - 2013-01-28 13:17 - 00000000 ____D () C:\Program Files (x86)\NSA
2014-05-15 18:55 - 2012-11-02 12:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-05-15 18:55 - 2012-11-01 22:57 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-15 18:55 - 2011-10-07 19:32 - 00000000 ____D () C:\Program Files (x86)\Ricoh
2014-05-15 18:55 - 2011-10-07 19:28 - 00000000 ____D () C:\Program Files (x86)\O2Micro OZ776 SCR Driver
2014-05-15 18:55 - 2011-10-07 19:23 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-05-15 18:55 - 2011-10-07 19:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-15 18:55 - 2011-08-05 21:14 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-05-15 18:53 - 2014-03-30 08:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-15 18:53 - 2013-03-14 10:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-15 18:53 - 2012-11-01 21:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-15 18:53 - 2011-08-05 21:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-15 18:53 - 2011-08-05 21:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-15 18:52 - 2012-11-02 16:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2014-05-15 18:52 - 2012-11-01 19:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-15 18:52 - 2011-10-07 19:48 - 00000000 ____D () C:\Program Files (x86)\Intel Corporation
2014-05-15 18:52 - 2011-10-07 19:09 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-15 18:52 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-15 18:52 - 2011-08-05 20:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-15 18:51 - 2013-12-30 17:15 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-05-15 18:51 - 2013-06-20 19:10 - 00000000 ____D () C:\Program Files (x86)\HappyFoto-Designer
2014-05-15 18:51 - 2011-08-05 21:38 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-15 18:49 - 2012-11-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-05-15 18:49 - 2011-10-07 19:35 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-05-15 18:48 - 2014-05-14 11:51 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-15 18:48 - 2014-01-17 11:51 - 00000000 ____D () C:\Program Files\Zune
2014-05-15 18:48 - 2012-11-02 15:59 - 00000000 ____D () C:\Program Files (x86)\bob
2014-05-15 18:48 - 2012-11-01 22:53 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-05-15 18:48 - 2012-11-01 22:04 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-15 18:48 - 2011-08-05 21:27 - 00000000 ____D () C:\Program Files\Windows Live
2014-05-15 18:48 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files\TOSHIBA
2014-05-15 18:47 - 2013-03-14 10:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-15 18:47 - 2012-11-01 19:57 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint
2014-05-15 18:47 - 2012-11-01 19:38 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-15 18:47 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files\PlayReady
2014-05-15 18:46 - 2014-05-15 10:48 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-15 18:46 - 2014-05-14 10:38 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-15 18:46 - 2013-06-26 15:33 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-05-15 18:46 - 2013-06-26 15:19 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-05-15 18:46 - 2013-06-25 17:05 - 00000000 ____D () C:\Program Files\Canon
2014-05-15 18:46 - 2011-10-07 19:43 - 00000000 ____D () C:\Program Files\Fingerprint Sensor
2014-05-15 18:46 - 2011-10-07 19:16 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-15 18:46 - 2011-10-07 19:13 - 00000000 ____D () C:\Program Files\Intel
2014-05-15 18:46 - 2011-08-05 21:38 - 00000000 ____D () C:\Program Files\Google
2014-05-15 18:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-05-15 18:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Vorlagen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Startmenü
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Netzwerkumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Lokale Einstellungen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Eigene Dateien
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Druckumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Musik
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Bilder
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Verlauf
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Anwendungsdaten
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Anwendungsdaten
2014-05-15 18:43 - 2014-05-15 18:43 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-05-15 18:43 - 2014-05-15 18:43 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_t36gsen_01_09_00.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwussf64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwuss64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WwanUsbMp64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2014-05-15 18:43 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 18:41 - 2014-05-15 18:41 - 00000000 ____D () C:\Program Files\Apoint2K
2014-05-15 18:39 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\CSC
2014-05-15 17:41 - 2014-05-15 14:00 - 00001014 _____ () C:\Windows\CompatibilityIssues.txt
2014-05-15 17:37 - 2014-05-15 13:57 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-05-15 17:37 - 2014-05-15 13:57 - 00001890 _____ () C:\Windows\diagerr.xml
2014-05-15 10:48 - 2014-05-15 10:48 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-05-15 10:48 - 2014-05-15 10:48 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-05-15 10:48 - 2014-05-15 10:48 - 00003216 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-15 10:48 - 2014-05-15 10:48 - 00002475 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk
2014-05-15 10:07 - 2014-05-15 09:55 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 09:22 - 2012-11-01 22:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-14 21:40 - 2014-05-14 09:41 - 00028554 _____ () C:\Windows\DPINST.LOG
2014-05-14 21:34 - 2014-05-14 21:34 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Wireless Display.lnk
2014-05-14 21:34 - 2014-05-14 21:34 - 00002111 _____ () C:\Users\Public\Desktop\Intel(R) Wireless Display.lnk
2014-05-14 21:10 - 2011-10-07 19:17 - 00015394 _____ () C:\Windows\system32\results.xml
2014-05-14 21:04 - 2014-05-14 09:34 - 00000000 ____D () C:\Intel
2014-05-14 13:35 - 2011-10-07 19:31 - 01614907 _____ () C:\Windows\WindowsUpdate (1).log
2014-05-14 13:03 - 2012-11-01 22:08 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-05-14 12:46 - 2013-03-25 22:09 - 00000000 ____D () C:\Program Files (x86)\Citrix
2014-05-14 07:17 - 2014-05-14 07:17 - 00000000 ____D () C:\SUPERDelete
2014-05-14 07:14 - 2014-05-14 07:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 07:01 - 2014-05-13 18:51 - 00008224 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-05-13 18:22 - 2012-11-01 19:36 - 00000000 ___RD () C:\MSOCache
2014-05-08 19:31 - 2014-05-08 19:31 - 00001006 _____ () C:\WirelessDiagLog.csv
2014-05-07 19:00 - 2014-05-07 19:00 - 02076672 _____ () C:\Users\Susann\Desktop\Vortrag Franz Hörmann_Otmar_Mai_2014.ppt
2014-05-04 15:25 - 2014-05-04 15:20 - 00001664 _____ () C:\Windows\system32\ASOROSet.bin
2014-05-04 15:02 - 2014-05-04 15:02 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial (1).exe
2014-05-04 14:58 - 2014-05-04 14:58 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial.exe
2014-05-04 14:54 - 2009-07-14 04:34 - 00000668 _____ () C:\Windows\win.ini
2014-05-04 14:43 - 2014-05-04 14:43 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\rightbackup
2014-04-29 15:40 - 2012-11-08 21:10 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 15:40 - 2012-11-08 21:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 15:40 - 2012-11-02 11:16 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieSiteList

Some content of TEMP:
====================
C:\Users\Susann\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-15 18:39

==================== End Of Log ============================

schrauber 21.05.2014 10:39

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

suppenhuhn12 21.05.2014 16:25
Mahlzeit!

Leider bekomme ich den ESTS Onlinescanner nicht zum laufen, da ich auf dem Rechner ja keine Netzwerkverbindung hinbekomme. (TCPIP geht ja nicht) - am Security Check arbeite ich gerade.

Es ist mir nicht gelungen, den ESTS so auf den Rechner zu kopieren, dass er startet - er verweigert den Dienst da er keine Verbindung zum Hersteller aufbaun kann. - Was soll ich tun? Offlinedefinitionen habe ich nicht gefunden...

mfg ds

Code:
Results of screen317's Security Check version 0.99.83 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
``````````````Antivirus/Firewall Check:``````````````
Norton AntiVirus 
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 Java(TM) 6 Update 20 
 Java version out of Date!
 Adobe Flash Player 13.0.0.206 
 Adobe Reader XI 
 Mozilla Firefox (28.0)
 Google Chrome 33.0.1750.154 
 Google Chrome 34.0.1847.116 
````````Process Check: objlist.exe by Laurent```````` 
 Norton AntiVirus Engine 21.0.1.3 NAV.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Susann (administrator) on SUSANNS-TOSHIBA on 21-05-2014 16:37:49
Running from \\VBOXSVR\Virtualtauschordner
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Oracle Corporation) C:\Windows\System32\VBoxService.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Oracle Corporation) C:\Windows\System32\VBoxTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Farbar) \\vboxsrv\Virtualtauschordner\FRST64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [328048 2011-01-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [296824 2010-09-25] (TOSHIBA Corporation)
HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [967544 2011-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1544104 2011-04-07] (TOSHIBA Corporation)
HKLM\...\Run: [TFPUPWDBankService] => C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBank.exe [976256 2012-03-16] (TOSHIBA)
HKLM\...\Run: [TFPUService] => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUTaskMonitor.exe [896384 2012-03-16] (TOSHIBA)
HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-05] (Toshiba Europe GmbH)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2011-03-30] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711576 2011-04-05] (TOSHIBA Corporation)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [VBoxTray] => C:\Windows\system32\VBoxTray.exe [1500944 2013-12-18] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294712 2010-11-29] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2475384 2011-01-16] (TOSHIBA CORPORATION.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=teua&bmod=teua;
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TOSHIBA Fingerprint Utility Automatic Password Input - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBankBHO.dll (TOSHIBA)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  No File

FireFox:
========
FF ProfilePath: C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Susann\AppData\Roaming\Mozilla\Firefox\Profiles\zaylzcw0.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2014-04-27]
FF HKLM-x32\...\Firefox\Extensions: [{302BCF7B-E09E-4854-9F2F-8B2DA4EF70F9}] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin
FF Extension: TOSHIBA Fingerprint Utility Automatic Password Input - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin [2014-05-14]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.0.1.3\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.0.1.3\IPSFFPlgn\ []

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://websearch.amaizingsearches.info/?pid=2800&r=2014/04/24&hid=1119987326852584559&lg=EN&cc=AT&unqvl=51"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.94) - C:\Users\Susann\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfpfekpeleljonedmknjmnlhnncppad [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbjnhnooobmlnippkbhhijkaoggjgnp [2014-04-24]
CHR Extension: (Saving Smart) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjjalcnahngbokiineilafhgcehchdm [2014-05-01]
CHR Extension: (SNT) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcccmakdmjkkhjnfoklfjoihkfpgpddg [2014-04-24]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjmkpimpkpleocgfgecnhgngoljojnic [2014-04-24]
CHR Extension: (Free Visio Viewer) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcpmofnlkemfkhgngcdppgbhncoflmpe [2014-04-24]
CHR Extension: (Chrome In-App Payments service) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]
CHR Extension: (No Name) - C:\Users\Susann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombjndkilglemokkpneanjnpjefpbmdb [2014-04-24]
CHR HKLM-x32\...\Chrome\Extension: [iniieblifogecdlkejbmonblijmdaiog] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\ChromeAddin\ChromeAddin.crx [2012-03-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\21.0.1.3\NAV.exe [262288 2013-08-31] (Symantec Corporation)
R2 VBoxService; C:\Windows\System32\VBoxService.exe [1736976 2013-12-18] (Oracle Corporation)
S2 WMCoreService; C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe [584232 2011-01-07] (Ericsson AB)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\BASHDefs\20130814.001\BHDrvx64.sys [1525336 2013-08-13] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1500010.003\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2010-02-23] (Ericsson AB)
S3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [30248 2010-02-23] (Ericsson AB)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-02-21] (Symantec Corporation)
S3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [85280 2009-09-09] (O2Micro)
R1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\IPSDefs\20130805.011\IDSVia64.sys [520280 2013-08-06] (Symantec Corporation)
S3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [411208 2010-10-31] (MCCI Corporation)
S3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [419912 2010-10-31] (MCCI Corporation)
S3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [19528 2010-10-31] (MCCI Corporation)
S3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [472648 2010-10-31] (MCCI Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20140221.009\ENG64.SYS [126040 2014-02-21] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20140221.009\EX64.SYS [2099288 2014-02-21] (Symantec Corporation)
R3 SRTSP; C:\Windows\system32\drivers\NAVx64\1500010.003\SRTSP64.SYS [854616 2013-07-31] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1500010.003\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAVx64\1500010.003\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1500010.003\SYMEFA64.SYS [1147480 2013-08-05] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-05-15] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1500010.003\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NAVx64\1500010.003\SYMNETS.SYS [590424 2013-07-31] (Symantec Corporation)
S3 t36wgps; C:\Windows\System32\DRIVERS\t36wgps64.sys [101416 2010-12-01] (Ericsson AB)
R0 VBoxGuest; C:\Windows\System32\DRIVERS\VBoxGuest.sys [142608 2013-12-18] (Oracle Corporation)
R3 VBoxMouse; C:\Windows\System32\DRIVERS\VBoxMouse.sys [118544 2013-12-18] (Oracle Corporation)
R1 VBoxSF; C:\Windows\System32\drivers\VBoxSF.sys [291600 2013-12-18] (Oracle Corporation)
R3 VBoxVideo; C:\Windows\System32\DRIVERS\VBoxVideo.sys [142608 2013-12-18] (Oracle Corporation)
S3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [276008 2010-12-28] (Ericsson AB)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cleanhlp; \??\E:\EmsisoftEmergencyKit 4.0.0.17\Run\cleanhlp64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-21 12:22 - 2014-05-21 12:22 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 20:31 - 2014-05-20 20:31 - 00004186 _____ () C:\Users\Susann\Desktop\JRT.txt
2014-05-20 20:13 - 2014-05-20 20:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-20 20:04 - 2014-05-20 20:07 - 00000000 ____D () C:\AdwCleaner
2014-05-20 19:17 - 2014-05-20 19:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-20 19:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-20 19:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-19 15:24 - 2014-05-19 15:24 - 00036400 _____ () C:\ComboFix.txt
2014-05-19 13:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-19 13:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-19 13:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-19 13:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-19 13:25 - 2014-05-19 15:24 - 00000000 ____D () C:\Qoobox
2014-05-19 13:24 - 2014-05-19 15:23 - 00000000 ____D () C:\Windows\erdnt
2014-05-18 21:30 - 2014-05-18 21:30 - 00003544 ____N () C:\bootsqm.dat
2014-05-18 14:39 - 2014-05-18 14:39 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-05-18 10:42 - 2014-05-18 10:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions
2014-05-18 10:36 - 2014-05-18 10:36 - 00000000 ____D () C:\Program Files\Oracle
2014-05-16 15:04 - 2014-05-16 15:04 - 00262144 _____ () C:\Windows\Minidump\051614-44928-01.dmp
2014-05-16 15:04 - 2014-05-16 15:04 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 15:03 - 2014-05-16 15:03 - 590753519 _____ () C:\Windows\MEMORY.DMP
2014-05-16 14:58 - 2014-05-21 16:37 - 00000000 ____D () C:\FRST
2014-05-16 14:57 - 2014-05-16 15:20 - 00000000 ____D () C:\Users\Susann\Desktop\Neuer Ordner
2014-05-16 09:03 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-05-16 09:03 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-05-16 09:03 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-05-16 09:03 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-05-16 09:03 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-05-16 09:03 - 2013-01-13 21:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-05-16 09:03 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-05-16 09:03 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-05-16 09:03 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-05-16 09:03 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-05-16 09:03 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-05-16 09:03 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-05-16 09:03 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-05-16 09:03 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-05-16 09:03 - 2013-01-13 21:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-05-16 09:03 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-05-16 09:03 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-05-16 09:03 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-05-16 09:03 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-05-16 09:03 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-05-16 09:03 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-05-16 09:03 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-05-16 09:03 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-05-16 09:03 - 2013-01-13 21:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-05-16 09:03 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-05-16 09:03 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-05-16 09:03 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-05-16 09:03 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-05-16 09:03 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-05-16 09:03 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-05-16 09:03 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-05-16 09:03 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-05-16 09:03 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-05-16 09:00 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-05-16 08:55 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-16 08:55 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-16 08:55 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-16 08:55 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-16 08:55 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-05-16 08:55 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-05-16 08:55 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-05-16 08:55 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-16 08:54 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-16 08:54 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-16 08:54 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-15 23:29 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-05-15 23:29 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-05-15 22:36 - 2014-05-15 22:36 - 00000134 _____ () C:\Users\Susann\Desktop\Internet Explorer-Problembehebung.url
2014-05-15 22:00 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-05-15 21:59 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-15 21:59 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 12296192 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 09075712 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 01495040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 21:57 - 2014-02-24 17:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 11020800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 06041088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 02078208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 01232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 21:57 - 2014-02-24 17:35 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-15 21:57 - 2014-02-24 16:01 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 21:57 - 2014-02-24 15:39 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 21:55 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-05-15 21:55 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-05-15 21:55 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-05-15 21:55 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-05-15 21:48 - 2013-12-10 04:28 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-15 21:48 - 2013-12-10 04:02 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-15 21:47 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-05-15 21:47 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-05-15 21:46 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-05-15 21:46 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-05-15 21:45 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-05-15 21:45 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-05-15 21:45 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-05-15 21:45 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-05-15 21:45 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-05-15 21:45 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-05-15 21:45 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-05-15 21:45 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-05-15 21:45 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-05-15 21:45 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-05-15 21:43 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-05-15 21:43 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-05-15 21:43 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-05-15 21:43 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-05-15 21:43 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-05-15 21:43 - 2013-09-25 04:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 21:43 - 2013-09-25 04:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 21:43 - 2013-09-25 04:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 21:43 - 2013-09-25 04:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 21:43 - 2013-09-25 04:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 21:43 - 2013-09-25 04:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 21:43 - 2013-09-25 04:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 21:43 - 2013-09-25 04:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-05-15 21:43 - 2013-09-25 03:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 21:43 - 2013-09-25 03:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 21:43 - 2013-09-25 03:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 21:43 - 2013-09-25 03:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-05-15 21:43 - 2013-09-25 03:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 21:43 - 2013-07-04 14:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-05-15 21:41 - 2013-10-05 22:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-05-15 21:41 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-05-15 21:40 - 2013-09-28 03:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-05-15 21:38 - 2013-10-03 04:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-05-15 21:38 - 2013-10-03 04:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-05-15 21:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-05-15 21:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-05-15 21:35 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 21:35 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-05-15 21:33 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-05-15 21:33 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-05-15 21:33 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-05-15 21:32 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-05-15 21:32 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-05-15 21:31 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-05-15 21:31 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-05-15 21:31 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-05-15 21:31 - 2012-11-29 00:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-05-15 21:30 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-05-15 21:30 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-05-15 21:29 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-05-15 21:29 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-05-15 21:29 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-05-15 21:29 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-05-15 21:29 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-05-15 21:29 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-05-15 21:29 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-05-15 21:29 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-05-15 21:29 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-05-15 21:29 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-05-15 21:28 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 21:28 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-15 21:28 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-15 21:28 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-05-15 21:28 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-15 21:28 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-15 21:28 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 21:28 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 21:28 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 21:28 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-05-15 21:28 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-15 21:28 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-15 21:28 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-15 21:28 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-05-15 21:28 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-05-15 21:27 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-05-15 21:27 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-05-15 21:27 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-05-15 21:27 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-05-15 21:27 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-05-15 21:27 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-05-15 21:26 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-05-15 21:25 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-05-15 21:25 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-05-15 21:23 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-05-15 21:23 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-05-15 21:23 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-15 21:22 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-05-15 21:22 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-05-15 21:16 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-05-15 21:16 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-05-15 21:16 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-05-15 21:16 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-05-15 21:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-05-15 21:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-05-15 21:14 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-15 21:13 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-05-15 21:13 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-05-15 21:13 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-05-15 21:13 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-05-15 21:13 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-05-15 21:13 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-05-15 21:12 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-05-15 21:04 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-05-15 21:04 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-05-15 21:03 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-05-15 21:03 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-05-15 20:59 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-05-15 20:59 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-05-15 20:57 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 20:57 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 20:56 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-05-15 20:56 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-05-15 20:56 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-05-15 20:56 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-05-15 20:56 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-05-15 20:55 - 2012-06-16 07:15 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-05-15 20:55 - 2012-06-16 06:26 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-05-15 20:53 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-05-15 20:51 - 2012-06-09 07:43 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 20:51 - 2012-06-09 06:41 - 12873728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 20:50 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-05-15 20:50 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-05-15 20:49 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-05-15 20:49 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-05-15 20:49 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-05-15 20:49 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-05-15 20:48 - 2014-05-15 20:48 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-05-15 20:48 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-05-15 20:45 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-05-15 20:45 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-05-15 20:45 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-05-15 20:44 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-05-15 20:44 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-05-15 20:44 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-05-15 20:44 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-05-15 20:44 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-05-15 20:43 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-05-15 20:43 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-05-15 20:42 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-05-15 20:42 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-05-15 20:41 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-05-15 20:41 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-05-15 20:41 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-05-15 20:41 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-05-15 20:40 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-05-15 20:40 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-05-15 20:39 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-05-15 20:39 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-05-15 20:39 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-05-15 20:39 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-05-15 20:38 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-05-15 20:38 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-05-15 20:38 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-05-15 20:38 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-05-15 20:37 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-05-15 20:37 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-05-15 20:35 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-05-15 20:35 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-05-15 20:35 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-05-15 20:35 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-05-15 20:35 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-05-15 20:35 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-05-15 20:35 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-05-15 20:35 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-05-15 20:34 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-05-15 20:34 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-05-15 20:34 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-05-15 20:33 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-05-15 20:33 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-05-15 20:33 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-05-15 20:33 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-05-15 20:33 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-05-15 20:33 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-05-15 20:33 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-05-15 20:31 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-05-15 20:31 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-05-15 20:31 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-05-15 20:31 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-05-15 20:30 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-05-15 20:14 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-05-15 20:14 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-05-15 20:14 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-05-15 20:14 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-05-15 20:14 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-05-15 20:14 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-05-15 20:13 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-05-15 19:54 - 2014-05-15 21:53 - 01601384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-15 19:44 - 2014-05-15 23:28 - 00023509 _____ () C:\Windows\IE11_main.log
2014-05-15 19:42 - 2014-05-15 19:42 - 00086944 _____ () C:\Users\Susann\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 19:40 - 2014-05-15 19:40 - 00001454 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00001420 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00000020 ___SH () C:\Users\Susann\ntuser.ini
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 ____D () C:\Recovery
2014-05-15 19:38 - 2014-05-15 19:39 - 00000000 ____D () C:\Windows\Panther
2014-05-15 19:36 - 2014-05-15 19:36 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-05-15 19:35 - 2014-05-21 12:21 - 01851912 _____ () C:\Windows\WindowsUpdate.log
2014-05-15 19:27 - 2014-05-15 19:26 - 00000000 ____D () C:\$WINDOWS.~Q
2014-05-15 19:25 - 2014-05-15 19:25 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-15 19:16 - 2014-05-15 19:22 - 00000000 ____D () C:\$INPLACE.~TR
2014-05-15 18:44 - 2014-05-16 12:43 - 00000000 ____D () C:\Users\Susann
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Vorlagen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Startmenü
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Netzwerkumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Lokale Einstellungen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Eigene Dateien
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Druckumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Musik
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Bilder
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Verlauf
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Anwendungsdaten
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Anwendungsdaten
2014-05-15 18:44 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 18:44 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 18:43 - 2014-05-15 18:43 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-05-15 18:43 - 2014-05-15 18:43 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_t36gsen_01_09_00.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwussf64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwuss64_01009.Wdf

suppenhuhn12 21.05.2014 16:26
Code:
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WwanUsbMp64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 18:41 - 2014-05-15 18:41 - 00000000 ____D () C:\Program Files\Apoint2K
2014-05-15 17:47 - 2014-05-15 19:26 - 00006585 _____ () C:\Windows\comsetup.log
2014-05-15 14:00 - 2014-05-15 17:41 - 00001014 _____ () C:\Windows\CompatibilityIssues.txt
2014-05-15 13:57 - 2014-05-15 17:37 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-05-15 13:57 - 2014-05-15 17:37 - 00001890 _____ () C:\Windows\diagerr.xml
2014-05-15 10:52 - 2014-05-15 19:24 - 00000000 ____D () C:\Windows\System32\Tasks\Norton AntiVirus
2014-05-15 10:48 - 2014-05-15 18:46 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-15 10:48 - 2014-05-15 10:48 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-05-15 10:48 - 2014-05-15 10:48 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-05-15 10:48 - 2014-05-15 10:48 - 00003216 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-15 10:48 - 2014-05-15 10:48 - 00002475 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk
2014-05-15 10:47 - 2014-05-16 09:14 - 00000000 ____D () C:\ProgramData\Norton
2014-05-15 10:47 - 2014-05-15 19:00 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64
2014-05-15 10:47 - 2014-05-15 18:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2014-05-15 10:47 - 2014-05-15 18:55 - 00000000 ____D () C:\Program Files (x86)\Norton AntiVirus
2014-05-15 10:08 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\Documents\Anti-Malware
2014-05-15 09:55 - 2014-05-15 10:07 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 09:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-15 07:20 - 2010-12-02 09:49 - 00315568 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1c62x64.sys
2014-05-15 07:20 - 2010-12-02 09:49 - 00092352 _____ (Intel Corporation) C:\Windows\system32\NicInstC.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00068264 _____ (Intel Corporation) C:\Windows\system32\e1cmsg.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2014-05-15 07:20 - 2010-12-02 09:49 - 00003114 _____ () C:\Windows\system32\e1c62x64.din
2014-05-14 21:46 - 2010-12-20 18:08 - 00008192 _____ () C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-05-14 21:46 - 2010-10-19 16:34 - 00056344 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-05-14 21:39 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TFPU
2014-05-14 21:39 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Public\Toshiba
2014-05-14 21:34 - 2014-05-14 21:34 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Wireless Display.lnk
2014-05-14 21:34 - 2014-05-14 21:34 - 00002111 _____ () C:\Users\Public\Desktop\Intel(R) Wireless Display.lnk
2014-05-14 21:28 - 2011-01-12 17:51 - 00439320 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2014-05-14 13:34 - 2014-05-15 19:00 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-14 12:50 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\CrashDumps
2014-05-14 12:30 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Intel
2014-05-14 12:29 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-14 12:24 - 2010-12-02 09:49 - 00314568 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2014-05-14 11:54 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-14 11:51 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-14 11:51 - 2014-05-15 18:48 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-14 11:51 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-05-14 10:38 - 2014-05-15 18:46 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-14 09:41 - 2014-05-14 21:40 - 00028554 _____ () C:\Windows\DPINST.LOG
2014-05-14 09:34 - 2014-05-14 21:04 - 00000000 ____D () C:\Intel
2014-05-14 09:08 - 2014-05-20 21:56 - 00000415 _____ () C:\TMachInfo.log
2014-05-14 08:46 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-14 08:46 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-14 07:47 - 2014-05-21 16:37 - 00000000 ____D () C:\ec
2014-05-14 07:17 - 2014-05-14 07:17 - 00000000 ____D () C:\SUPERDelete
2014-05-14 07:15 - 2014-05-20 19:18 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 07:14 - 2014-05-14 07:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 07:13 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-14 07:13 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 18:51 - 2014-05-14 07:01 - 00008224 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-05-09 09:36 - 2014-05-15 19:16 - 00000000 ____D () C:\Users\Susann\Downloads\PC Drivers HeadQuarters
2014-05-09 09:36 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\PC Drivers HeadQuarters
2014-05-09 09:36 - 2014-05-15 18:55 - 00000000 ____D () C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-09 06:41 - 2014-05-15 19:16 - 00000000 ____D () C:\Users\Susann\Downloads\Driver Restore
2014-05-09 06:41 - 2014-05-15 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-09 06:41 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\UAB
2014-05-09 06:39 - 2014-05-15 18:57 - 00000000 ____D () C:\ProgramData\Driver Restore
2014-05-08 19:31 - 2014-05-08 19:31 - 00001006 _____ () C:\WirelessDiagLog.csv
2014-05-07 19:00 - 2014-05-07 19:00 - 02076672 _____ () C:\Users\Susann\Desktop\Vortrag Franz Hörmann_Otmar_Mai_2014.ppt
2014-05-07 07:31 - 2014-05-15 19:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 15:20 - 2014-05-04 15:25 - 00001664 _____ () C:\Windows\system32\ASOROSet.bin
2014-05-04 15:02 - 2014-05-04 15:02 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial (1).exe
2014-05-04 14:58 - 2014-05-04 14:58 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial.exe
2014-05-04 14:54 - 2014-05-15 19:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-04 14:43 - 2014-05-04 14:43 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\rightbackup
2014-05-04 14:43 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieSiteList
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Gast
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\Users\Administrator
2014-04-24 17:26 - 2014-05-15 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-23 07:52 - 2014-03-06 11:31 - 00004096 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 07:52 - 2014-03-06 10:28 - 00752640 ____N (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 07:52 - 2014-03-06 09:56 - 00038400 ____N (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 07:52 - 2014-03-06 09:13 - 00032256 ____N (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 07:51 - 2014-03-06 10:57 - 00048640 ____N (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 07:51 - 2014-03-06 10:29 - 00111616 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 07:51 - 2014-03-06 10:15 - 00940032 ____N (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 07:51 - 2014-03-06 10:11 - 05784064 ____N (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 07:51 - 2014-03-06 10:01 - 00051200 ____N (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 07:51 - 2014-03-06 09:46 - 04254720 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 07:51 - 2014-03-06 09:36 - 00592896 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

==================== One Month Modified Files and Folders =======

2014-05-21 16:37 - 2014-05-16 14:58 - 00000000 ____D () C:\FRST
2014-05-21 16:37 - 2014-05-14 07:47 - 00000000 ____D () C:\ec
2014-05-21 16:20 - 2009-07-14 06:45 - 00036368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-21 16:20 - 2009-07-14 06:45 - 00036368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-21 15:40 - 2012-11-08 21:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 12:22 - 2014-05-21 12:22 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-21 12:21 - 2014-05-15 19:35 - 01851912 _____ () C:\Windows\WindowsUpdate.log
2014-05-20 21:56 - 2014-05-14 09:08 - 00000415 _____ () C:\TMachInfo.log
2014-05-20 21:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-20 21:53 - 2009-07-14 06:51 - 00558091 _____ () C:\Windows\setupact.log
2014-05-20 20:31 - 2014-05-20 20:31 - 00004186 _____ () C:\Users\Susann\Desktop\JRT.txt
2014-05-20 20:13 - 2014-05-20 20:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-20 20:09 - 2010-11-21 05:47 - 00037674 _____ () C:\Windows\PFRO.log
2014-05-20 20:07 - 2014-05-20 20:04 - 00000000 ____D () C:\AdwCleaner
2014-05-20 19:18 - 2014-05-14 07:15 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-20 19:17 - 2014-05-20 19:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-20 19:17 - 2014-05-20 19:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-19 15:24 - 2014-05-19 15:24 - 00036400 _____ () C:\ComboFix.txt
2014-05-19 15:24 - 2014-05-19 13:25 - 00000000 ____D () C:\Qoobox
2014-05-19 15:24 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-05-19 15:24 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-19 15:23 - 2014-05-19 13:24 - 00000000 ____D () C:\Windows\erdnt
2014-05-19 15:21 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-19 07:14 - 2012-11-01 20:44 - 00000000 ____D () C:\Users\Susann\Documents\Outlook-Dateien
2014-05-19 07:00 - 2012-11-01 19:37 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-18 21:30 - 2014-05-18 21:30 - 00003544 ____N () C:\bootsqm.dat
2014-05-18 20:23 - 2010-11-21 08:50 - 00702198 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 20:23 - 2010-11-21 08:50 - 00149838 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 20:23 - 2009-07-14 07:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 14:39 - 2014-05-18 14:39 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-05-18 10:42 - 2014-05-18 10:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions
2014-05-18 10:36 - 2014-05-18 10:36 - 00000000 ____D () C:\Program Files\Oracle
2014-05-16 15:22 - 2012-11-01 23:12 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-16 15:20 - 2014-05-16 14:57 - 00000000 ____D () C:\Users\Susann\Desktop\Neuer Ordner
2014-05-16 15:04 - 2014-05-16 15:04 - 00262144 _____ () C:\Windows\Minidump\051614-44928-01.dmp
2014-05-16 15:04 - 2014-05-16 15:04 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 15:03 - 2014-05-16 15:03 - 590753519 _____ () C:\Windows\MEMORY.DMP
2014-05-16 12:43 - 2014-05-15 18:44 - 00000000 ____D () C:\Users\Susann
2014-05-16 12:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-16 10:48 - 2010-11-21 09:00 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-16 10:09 - 2011-08-05 21:08 - 00000000 ____D () C:\Program Files (x86)\Toshiba TEMPRO
2014-05-16 10:09 - 2011-08-05 20:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-05-16 09:30 - 2009-07-14 06:45 - 00344536 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-05-16 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-05-16 09:14 - 2014-05-15 10:47 - 00000000 ____D () C:\ProgramData\Norton
2014-05-15 23:28 - 2014-05-15 19:44 - 00023509 _____ () C:\Windows\IE11_main.log
2014-05-15 22:36 - 2014-05-15 22:36 - 00000134 _____ () C:\Users\Susann\Desktop\Internet Explorer-Problembehebung.url
2014-05-15 22:13 - 2012-11-01 19:29 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 22:13 - 2012-11-01 19:18 - 00000000 ___RD () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 22:12 - 2011-10-07 19:28 - 00000438 __RSH () C:\ProgramData\ntuser.pol
2014-05-15 22:05 - 2010-11-21 09:01 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-15 22:05 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-15 22:05 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-15 22:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-15 21:53 - 2014-05-15 19:54 - 01601384 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-15 21:05 - 2012-11-01 22:40 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-15 20:48 - 2014-05-15 20:48 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-05-15 20:12 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-05-15 19:42 - 2014-05-15 19:42 - 00086944 _____ () C:\Users\Susann\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 19:40 - 2014-05-15 19:40 - 00001454 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00001420 _____ () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-15 19:40 - 2014-05-15 19:40 - 00000020 ___SH () C:\Users\Susann\ntuser.ini
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-15 19:39 - 2014-05-15 19:39 - 00000000 ____D () C:\Recovery
2014-05-15 19:39 - 2014-05-15 19:38 - 00000000 ____D () C:\Windows\Panther
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-05-15 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-15 19:38 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-05-15 19:38 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-05-15 19:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 19:36 - 2014-05-15 19:36 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-05-15 19:26 - 2014-05-15 19:27 - 00000000 ____D () C:\$WINDOWS.~Q
2014-05-15 19:26 - 2014-05-15 17:47 - 00006585 _____ () C:\Windows\comsetup.log
2014-05-15 19:25 - 2014-05-15 19:25 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-05-15 19:24 - 2014-05-15 10:52 - 00000000 ____D () C:\Windows\System32\Tasks\Norton AntiVirus
2014-05-15 19:24 - 2012-11-01 19:38 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-05-15 19:24 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-05-15 19:24 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-15 19:22 - 2014-05-15 19:16 - 00000000 ____D () C:\$INPLACE.~TR
2014-05-15 19:20 - 2009-07-14 06:46 - 00005157 _____ () C:\Windows\DtcInstall.log
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2014-05-15 19:19 - 2014-05-15 19:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-15 19:19 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-15 19:19 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 19:17 - 2014-01-17 11:53 - 00000000 ___RD () C:\Users\Susann\Podcasts
2014-05-15 19:17 - 2013-01-29 13:17 - 00000000 ____D () C:\Users\Susann\Smiley
2014-05-15 19:16 - 2014-05-09 09:36 - 00000000 ____D () C:\Users\Susann\Downloads\PC Drivers HeadQuarters
2014-05-15 19:16 - 2014-05-09 06:41 - 00000000 ____D () C:\Users\Susann\Downloads\Driver Restore
2014-05-15 19:16 - 2014-03-31 08:31 - 00000000 ____D () C:\Users\Susann\Downloads\look good
2014-05-15 19:16 - 2014-03-18 14:01 - 00000000 ____D () C:\Users\Susann\Downloads\results
2014-05-15 19:16 - 2014-03-18 12:41 - 00000000 ____D () C:\Users\Susann\Downloads\convention
2014-05-15 19:16 - 2014-03-11 10:30 - 00000000 ____D () C:\Users\Susann\Downloads\Gen Y
2014-05-15 19:16 - 2014-02-11 14:34 - 00000000 ____D () C:\Users\Susann\Downloads\food
2014-05-15 19:16 - 2014-02-06 14:35 - 00000000 ____D () C:\Users\Susann\Downloads\Lifestyle
2014-05-15 19:16 - 2014-01-29 10:24 - 00000000 ____D () C:\Users\Susann\Downloads\events
2014-05-15 19:16 - 2014-01-12 13:44 - 00000000 ____D () C:\Users\Susann\Downloads\NWM
2014-05-15 19:16 - 2013-12-15 18:53 - 00000000 ____D () C:\Users\Susann\Downloads\Fun
2014-05-15 19:16 - 2013-11-18 18:13 - 00000000 ____D () C:\Users\Susann\Downloads\24Stunden
2014-05-15 19:16 - 2013-03-28 14:26 - 00000000 ____D () C:\Users\Susann\Downloads\Quotes
2014-05-15 19:16 - 2013-03-05 13:00 - 00000000 ____D () C:\Users\Susann\Downloads\JP_Business
2014-05-15 19:16 - 2013-03-05 13:00 - 00000000 ____D () C:\Users\Susann\Downloads\Gesundes
2014-05-15 19:16 - 2013-03-05 12:59 - 00000000 ____D () C:\Users\Susann\Downloads\Bücher
2014-05-15 19:16 - 2013-03-03 11:39 - 00000000 ____D () C:\Users\Susann\Downloads\Yoga
2014-05-15 19:16 - 2013-02-18 09:29 - 00000000 ____D () C:\Users\Susann\Downloads\Shape
2014-05-15 19:16 - 2012-11-07 18:04 - 00000000 ____D () C:\Users\Susann\Downloads\lide25vst6411011ade
2014-05-15 19:16 - 2012-11-02 16:29 - 00000000 ___RD () C:\Users\Susann\Dropbox
2014-05-15 19:16 - 2012-11-01 23:58 - 00000000 ____D () C:\Users\Susann\Documents\Reg Files
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ___RD () C:\Users\Susann\Documents\Systemsicherung
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ____D () C:\Users\Susann\Documents\Wohnung
2014-05-15 19:16 - 2012-11-01 23:51 - 00000000 ____D () C:\Users\Susann\Documents\skorpio Verlag
2014-05-15 19:16 - 2012-11-01 23:50 - 00000000 ____D () C:\Users\Susann\Documents\Privat
2014-05-15 19:16 - 2012-11-01 23:48 - 00000000 ____D () C:\Users\Susann\Documents\Personal
2014-05-15 19:15 - 2012-11-05 21:47 - 00000000 ____D () C:\Users\Susann\Documents\My Albums
2014-05-15 19:15 - 2012-11-05 16:45 - 00000000 ____D () C:\Users\Susann\Documents\Fax
2014-05-15 19:15 - 2012-11-01 23:46 - 00000000 ____D () C:\Users\Susann\Documents\NSA
2014-05-15 19:15 - 2012-11-01 23:42 - 00000000 ___RD () C:\Users\Susann\Documents\NEUE_SICHERUNG
2014-05-15 19:15 - 2012-11-01 23:34 - 00000000 ____D () C:\Users\Susann\Documents\Locations
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Konzert
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Kindergruppe, MKN v. USB Stick
2014-05-15 19:15 - 2012-11-01 23:33 - 00000000 ____D () C:\Users\Susann\Documents\Euro
2014-05-15 19:14 - 2012-11-01 23:30 - 00000000 ____D () C:\Users\Susann\Documents\Diverse
2014-05-15 19:14 - 2012-11-01 23:30 - 00000000 ____D () C:\Users\Susann\Documents\Divers
2014-05-15 19:14 - 2012-11-01 23:29 - 00000000 ___RD () C:\Users\Susann\Documents\CyberLink
2014-05-15 19:14 - 2012-11-01 23:29 - 00000000 ____D () C:\Users\Susann\Documents\Buchhaltung
2014-05-15 19:14 - 2012-11-01 23:24 - 00000000 ____D () C:\Users\Susann\Documents\BILLA
2014-05-15 19:13 - 2014-05-15 10:08 - 00000000 ____D () C:\Users\Susann\Documents\Anti-Malware
2014-05-15 19:13 - 2014-05-14 21:39 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TFPU
2014-05-15 19:13 - 2014-05-14 07:13 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\SUPERAntiSpyware.com
2014-05-15 19:13 - 2014-05-04 14:54 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\FreeVideoConverter
2014-05-15 19:13 - 2014-02-03 09:05 - 00000000 ____D () C:\Users\Susann\Desktop\2014_02_03
2014-05-15 19:13 - 2014-01-04 17:46 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\CyberLink
2014-05-15 19:13 - 2013-12-07 21:42 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Sonic Solutions
2014-05-15 19:13 - 2013-09-13 17:28 - 00000000 ____D () C:\Users\Susann\Desktop\Lillys Fest
2014-05-15 19:13 - 2013-08-06 13:10 - 00000000 ____D () C:\Users\Susann\Desktop\2013_08_06
2014-05-15 19:13 - 2013-06-26 11:51 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TeamViewer
2014-05-15 19:13 - 2013-06-10 16:01 - 00000000 ____D () C:\Users\Susann\Documents\24Stunden
2014-05-15 19:13 - 2013-05-12 21:43 - 00000000 ____D () C:\Users\Susann\Desktop\calimera
2014-05-15 19:13 - 2013-04-20 13:47 - 00000000 ____D () C:\Users\Susann\Desktop\Aufwachen dein Leben wartet - Lynn Grabhorn
2014-05-15 19:13 - 2012-12-16 19:48 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\dvdcss
2014-05-15 19:13 - 2012-11-27 20:09 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\InstallShield
2014-05-15 19:13 - 2012-11-07 22:31 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\TOSHIBA Online Product Information
2014-05-15 19:13 - 2012-11-04 20:47 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Canon
2014-05-15 19:13 - 2012-11-02 16:23 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Dropbox
2014-05-15 19:13 - 2012-11-02 11:25 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Macromedia
2014-05-15 19:13 - 2012-11-01 23:59 - 00000000 ____D () C:\Users\Susann\Desktop\Canon
2014-05-15 19:13 - 2012-11-01 23:20 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\vlc
2014-05-15 19:13 - 2012-11-01 22:58 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\ScanSoft
2014-05-15 19:13 - 2012-11-01 22:30 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Nero
2014-05-15 19:13 - 2012-11-01 22:24 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Skype
2014-05-15 19:13 - 2012-11-01 21:53 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Mozilla
2014-05-15 19:13 - 2012-11-01 19:29 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Toshiba
2014-05-15 19:13 - 2012-11-01 19:28 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\WinBatch
2014-05-15 19:13 - 2012-11-01 19:18 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Intel
2014-05-15 19:12 - 2014-05-14 12:50 - 00000000 ____D () C:\Users\Susann\AppData\Local\CrashDumps
2014-05-15 19:12 - 2014-05-14 08:46 - 00000000 ____D () C:\Users\Susann\AppData\Local\VS Revo Group
2014-05-15 19:12 - 2014-05-09 06:41 - 00000000 ____D () C:\Users\Susann\AppData\Local\PC_Drivers_Headquarters
2014-05-15 19:12 - 2014-03-24 10:04 - 00000000 ____D () C:\Users\Susann\AppData\Local\Skype
2014-05-15 19:12 - 2014-03-04 10:16 - 00000000 ____D () C:\Users\Susann\AppData\Local\Windows Live
2014-05-15 19:12 - 2013-06-20 19:12 - 00000000 ____D () C:\Users\Susann\AppData\Local\HappyFoto-Designer
2014-05-15 19:12 - 2013-03-25 22:08 - 00000000 ____D () C:\Users\Susann\AppData\Local\Citrix
2014-05-15 19:12 - 2012-11-08 21:11 - 00000000 ____D () C:\Users\Susann\AppData\Local\Macromedia
2014-05-15 19:12 - 2012-11-05 21:47 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\ArcSoft
2014-05-15 19:12 - 2012-11-01 23:05 - 00000000 ____D () C:\Users\Susann\AppData\Local\Scansoft
2014-05-15 19:12 - 2012-11-01 22:40 - 00000000 ____D () C:\Users\Susann\AppData\Local\Adobe
2014-05-15 19:12 - 2012-11-01 22:31 - 00000000 ____D () C:\Users\Susann\AppData\Local\Nero_AG
2014-05-15 19:12 - 2012-11-01 22:30 - 00000000 ____D () C:\Users\Susann\AppData\Local\Nero
2014-05-15 19:12 - 2012-11-01 21:53 - 00000000 ____D () C:\Users\Susann\AppData\Local\Mozilla
2014-05-15 19:12 - 2012-11-01 20:44 - 00000000 ____D () C:\Users\Susann\AppData\Local\Apps\2.0
2014-05-15 19:12 - 2012-11-01 19:45 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\Adobe
2014-05-15 19:12 - 2012-11-01 19:42 - 00000000 ____D () C:\Users\Susann\AppData\Local\Google
2014-05-15 19:12 - 2012-11-01 19:29 - 00000000 ____D () C:\Users\Susann\AppData\Local\TOSHIBA
2014-05-15 19:12 - 2012-11-01 19:26 - 00000000 ____D () C:\Users\Susann\AppData\Local\VirtualStore
2014-05-15 19:03 - 2011-10-07 19:51 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-05-15 19:03 - 2011-10-07 19:32 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-05-15 19:03 - 2010-11-21 08:49 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-05-15 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-05-15 19:02 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\tr
2014-05-15 19:02 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-05-15 19:00 - 2014-05-15 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64
2014-05-15 19:00 - 2014-05-14 13:34 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-05-15 19:00 - 2014-05-07 07:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 19:00 - 2013-06-26 15:19 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-05-15 19:00 - 2012-11-27 20:09 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-05-15 19:00 - 2012-11-08 21:10 - 00000000 ____D () C:\Windows\system32\Macromed
2014-05-15 19:00 - 2011-10-07 19:59 - 00000000 ____D () C:\Windows\OemDrv
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\sv
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\sk
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\ru
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\pt
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\pl
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\no
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\hu
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\fi
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\es
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\el
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\da
2014-05-15 19:00 - 2011-10-07 19:52 - 00000000 ____D () C:\Windows\system32\cs
2014-05-15 19:00 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\nl
2014-05-15 19:00 - 2011-02-11 12:24 - 00000000 ____D () C:\Windows\system32\nl
2014-05-15 19:00 - 2011-02-11 12:15 - 00000000 ____D () C:\Windows\system32\it
2014-05-15 19:00 - 2011-02-11 12:05 - 00000000 ____D () C:\Windows\system32\fr
2014-05-15 19:00 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-05-15 19:00 - 2010-11-21 08:49 - 00000000 ____D () C:\Windows\system32\de
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2014-05-15 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 18:59 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\it
2014-05-15 18:59 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\fr
2014-05-15 18:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-05-15 18:58 - 2014-05-15 10:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2014-05-15 18:58 - 2014-05-14 21:39 - 00000000 ____D () C:\Users\Public\Toshiba
2014-05-15 18:58 - 2014-05-14 12:30 - 00000000 ____D () C:\ProgramData\Intel
2014-05-15 18:58 - 2014-05-14 12:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-15 18:58 - 2014-05-14 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-15 18:58 - 2014-05-14 08:46 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-15 18:58 - 2014-05-14 07:13 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 18:58 - 2014-05-09 09:36 - 00000000 ____D () C:\ProgramData\PC Drivers HeadQuarters
2014-05-15 18:58 - 2014-05-09 06:41 - 00000000 ____D () C:\ProgramData\UAB
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Gast
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\Users\Administrator
2014-05-15 18:58 - 2014-04-24 17:26 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 18:58 - 2014-03-24 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-15 18:58 - 2014-01-17 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
2014-05-15 18:58 - 2013-12-30 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2014-05-15 18:58 - 2013-07-31 10:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-15 18:58 - 2013-06-26 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series Benutzerregistrierung
2014-05-15 18:58 - 2013-06-26 15:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series Manual
2014-05-15 18:58 - 2013-06-26 15:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2200 series
2014-05-15 18:58 - 2013-06-25 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-05-15 18:58 - 2013-06-20 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HappyFoto-Designer
2014-05-15 18:58 - 2013-03-14 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-15 18:58 - 2012-11-02 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bob
2014-05-15 18:58 - 2012-11-01 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon JX210P series Manual
2014-05-15 18:58 - 2012-11-01 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4.0
2014-05-15 18:58 - 2012-11-01 22:58 - 00000000 ____D () C:\ProgramData\InstallShield
2014-05-15 18:58 - 2012-11-01 22:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoStudio 5.5
2014-05-15 18:58 - 2012-11-01 22:22 - 00000000 ____D () C:\ProgramData\TOSHIBA Tempro
2014-05-15 18:58 - 2012-11-01 22:22 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2014-05-15 18:58 - 2012-11-01 21:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-15 18:58 - 2012-11-01 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus
2014-05-15 18:58 - 2012-11-01 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-15 18:58 - 2012-11-01 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay
2014-05-15 18:58 - 2012-11-01 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2014-05-15 18:58 - 2012-11-01 19:19 - 00000000 ____D () C:\ProgramData\ToshibaEurope
2014-05-15 18:58 - 2011-10-07 19:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2014-05-15 18:58 - 2011-10-07 19:42 - 00000000 ____D () C:\ProgramData\Toshiba
2014-05-15 18:58 - 2011-08-05 21:41 - 00000000 ____D () C:\ProgramData\McAfee
2014-05-15 18:58 - 2011-08-05 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-15 18:58 - 2011-08-05 21:36 - 00000000 ____D () C:\ProgramData\WildTangent
2014-05-15 18:58 - 2011-08-05 21:33 - 00000000 ____D () C:\Windows\de
2014-05-15 18:58 - 2011-08-05 21:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-05-15 18:58 - 2011-08-05 21:31 - 00000000 ____D () C:\Windows\en
2014-05-15 18:58 - 2011-08-05 21:25 - 00000000 ____D () C:\ProgramData\Skype
2014-05-15 18:58 - 2011-08-05 21:14 - 00000000 ____D () C:\ProgramData\Nero
2014-05-15 18:58 - 2011-08-05 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-05-15 18:58 - 2011-08-05 20:57 - 00000000 ____D () C:\ProgramData\Sun
2014-05-15 18:58 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-15 18:58 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-15 18:58 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-15 18:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors
2014-05-15 18:57 - 2014-05-09 06:39 - 00000000 ____D () C:\ProgramData\Driver Restore
2014-05-15 18:57 - 2013-12-30 17:15 - 00000000 ____D () C:\ProgramData\CyberLink
2014-05-15 18:57 - 2013-10-20 18:47 - 00000000 ____D () C:\Program Files (x86)\WfK
2014-05-15 18:57 - 2013-06-26 15:52 - 00000000 ___HD () C:\ProgramData\CanonIJMIG
2014-05-15 18:57 - 2013-06-26 15:51 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-05-15 18:57 - 2013-06-26 15:51 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-05-15 18:57 - 2013-06-26 15:48 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2014-05-15 18:57 - 2013-06-26 15:33 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-05-15 18:57 - 2013-06-25 17:09 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-05-15 18:57 - 2013-06-25 17:05 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter
2014-05-15 18:57 - 2013-06-20 19:10 - 00000000 ____D () C:\ProgramData\HappyFoto-Designer
2014-05-15 18:57 - 2012-11-01 23:20 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-05-15 18:57 - 2012-11-01 23:11 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-05-15 18:57 - 2011-10-07 19:23 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-05-15 18:57 - 2011-08-05 21:37 - 00000000 ____D () C:\ProgramData\Google
2014-05-15 18:57 - 2011-08-05 21:36 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-05-15 18:57 - 2011-08-05 21:36 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA Games
2014-05-15 18:57 - 2011-08-05 21:28 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-15 18:57 - 2011-08-05 21:03 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-15 18:56 - 2011-08-05 20:58 - 00000000 ____D () C:\Program Files (x86)\TOSHIBA
2014-05-15 18:55 - 2014-05-15 10:47 - 00000000 ____D () C:\Program Files (x86)\Norton AntiVirus
2014-05-15 18:55 - 2014-05-09 09:36 - 00000000 ____D () C:\Program Files (x86)\PC Drivers HeadQuarters
2014-05-15 18:55 - 2014-03-24 10:04 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-15 18:55 - 2013-01-28 13:17 - 00000000 ____D () C:\Program Files (x86)\NSA
2014-05-15 18:55 - 2012-11-02 12:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-05-15 18:55 - 2012-11-01 22:57 - 00000000 ____D () C:\Program Files (x86)\ScanSoft
2014-05-15 18:55 - 2011-10-07 19:32 - 00000000 ____D () C:\Program Files (x86)\Ricoh
2014-05-15 18:55 - 2011-10-07 19:28 - 00000000 ____D () C:\Program Files (x86)\O2Micro OZ776 SCR Driver
2014-05-15 18:55 - 2011-10-07 19:23 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-05-15 18:55 - 2011-10-07 19:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-15 18:55 - 2011-08-05 21:14 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-05-15 18:53 - 2014-03-30 08:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-15 18:53 - 2013-03-14 10:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-15 18:53 - 2012-11-01 21:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-15 18:53 - 2011-08-05 21:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-15 18:53 - 2011-08-05 21:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-15 18:52 - 2012-11-02 16:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2014-05-15 18:52 - 2012-11-01 19:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-15 18:52 - 2011-10-07 19:48 - 00000000 ____D () C:\Program Files (x86)\Intel Corporation
2014-05-15 18:52 - 2011-10-07 19:09 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-15 18:52 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-15 18:52 - 2011-08-05 20:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-15 18:51 - 2013-12-30 17:15 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-05-15 18:51 - 2013-06-20 19:10 - 00000000 ____D () C:\Program Files (x86)\HappyFoto-Designer
2014-05-15 18:51 - 2011-08-05 21:38 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-15 18:49 - 2012-11-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-05-15 18:49 - 2011-10-07 19:35 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-05-15 18:48 - 2014-05-14 11:51 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-15 18:48 - 2014-01-17 11:51 - 00000000 ____D () C:\Program Files\Zune
2014-05-15 18:48 - 2012-11-02 15:59 - 00000000 ____D () C:\Program Files (x86)\bob
2014-05-15 18:48 - 2012-11-01 22:53 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-05-15 18:48 - 2012-11-01 22:04 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-15 18:48 - 2011-08-05 21:27 - 00000000 ____D () C:\Program Files\Windows Live
2014-05-15 18:48 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files\TOSHIBA
2014-05-15 18:47 - 2013-03-14 10:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-15 18:47 - 2012-11-01 19:57 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint
2014-05-15 18:47 - 2012-11-01 19:38 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-15 18:47 - 2011-08-05 20:57 - 00000000 ____D () C:\Program Files\PlayReady
2014-05-15 18:46 - 2014-05-15 10:48 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-15 18:46 - 2014-05-14 10:38 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-15 18:46 - 2013-06-26 15:33 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-05-15 18:46 - 2013-06-26 15:19 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-05-15 18:46 - 2013-06-25 17:05 - 00000000 ____D () C:\Program Files\Canon
2014-05-15 18:46 - 2011-10-07 19:43 - 00000000 ____D () C:\Program Files\Fingerprint Sensor
2014-05-15 18:46 - 2011-10-07 19:16 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-15 18:46 - 2011-10-07 19:13 - 00000000 ____D () C:\Program Files\Intel
2014-05-15 18:46 - 2011-08-05 21:38 - 00000000 ____D () C:\Program Files\Google
2014-05-15 18:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-05-15 18:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Vorlagen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Startmenü
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Netzwerkumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Lokale Einstellungen
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Eigene Dateien
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Druckumgebung
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Musik
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Documents\Eigene Bilder
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Verlauf
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\AppData\Local\Anwendungsdaten
2014-05-15 18:44 - 2014-05-15 18:44 - 00000000 _SHDL () C:\Users\Susann\Anwendungsdaten
2014-05-15 18:43 - 2014-05-15 18:43 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-05-15 18:43 - 2014-05-15 18:43 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_t36gsen_01_09_00.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwussf64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wwuss64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WwanUsbMp64_01009.Wdf
2014-05-15 18:43 - 2014-05-15 18:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2014-05-15 18:43 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-15 18:42 - 2014-05-15 18:42 - 00000000 ____D () C:\Program Files\Realtek
2014-05-15 18:41 - 2014-05-15 18:41 - 00000000 ____D () C:\Program Files\Apoint2K
2014-05-15 18:39 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\CSC
2014-05-15 17:41 - 2014-05-15 14:00 - 00001014 _____ () C:\Windows\CompatibilityIssues.txt
2014-05-15 17:37 - 2014-05-15 13:57 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-05-15 17:37 - 2014-05-15 13:57 - 00001890 _____ () C:\Windows\diagerr.xml
2014-05-15 10:48 - 2014-05-15 10:48 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-05-15 10:48 - 2014-05-15 10:48 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-05-15 10:48 - 2014-05-15 10:48 - 00003216 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-15 10:48 - 2014-05-15 10:48 - 00002475 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk
2014-05-15 10:07 - 2014-05-15 09:55 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-15 09:22 - 2012-11-01 22:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-14 21:40 - 2014-05-14 09:41 - 00028554 _____ () C:\Windows\DPINST.LOG
2014-05-14 21:34 - 2014-05-14 21:34 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Wireless Display.lnk
2014-05-14 21:34 - 2014-05-14 21:34 - 00002111 _____ () C:\Users\Public\Desktop\Intel(R) Wireless Display.lnk
2014-05-14 21:10 - 2011-10-07 19:17 - 00015394 _____ () C:\Windows\system32\results.xml
2014-05-14 21:04 - 2014-05-14 09:34 - 00000000 ____D () C:\Intel
2014-05-14 13:35 - 2011-10-07 19:31 - 01614907 _____ () C:\Windows\WindowsUpdate (1).log
2014-05-14 13:03 - 2012-11-01 22:08 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-05-14 12:46 - 2013-03-25 22:09 - 00000000 ____D () C:\Program Files (x86)\Citrix
2014-05-14 07:17 - 2014-05-14 07:17 - 00000000 ____D () C:\SUPERDelete
2014-05-14 07:14 - 2014-05-14 07:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-14 07:01 - 2014-05-13 18:51 - 00008224 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-05-13 18:22 - 2012-11-01 19:36 - 00000000 ___RD () C:\MSOCache
2014-05-08 19:31 - 2014-05-08 19:31 - 00001006 _____ () C:\WirelessDiagLog.csv
2014-05-07 19:00 - 2014-05-07 19:00 - 02076672 _____ () C:\Users\Susann\Desktop\Vortrag Franz Hörmann_Otmar_Mai_2014.ppt
2014-05-04 15:25 - 2014-05-04 15:20 - 00001664 _____ () C:\Windows\system32\ASOROSet.bin
2014-05-04 15:02 - 2014-05-04 15:02 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial (1).exe
2014-05-04 14:58 - 2014-05-04 14:58 - 04417560 _____ (Systweak Inc ) C:\Users\Susann\Downloads\regcleanpro_trial.exe
2014-05-04 14:54 - 2009-07-14 04:34 - 00000668 _____ () C:\Windows\win.ini
2014-05-04 14:43 - 2014-05-04 14:43 - 00000000 ____D () C:\Users\Susann\AppData\Roaming\rightbackup
2014-04-29 15:40 - 2012-11-08 21:10 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 15:40 - 2012-11-08 21:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 15:40 - 2012-11-02 11:16 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieUserList
2014-04-24 17:37 - 2014-04-24 17:37 - 00000000 __SHD () C:\Users\Susann\AppData\Local\EmieSiteList

Some content of TEMP:
====================
C:\Users\Susann\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-15 18:39

==================== End Of Log ============================

schrauber 22.05.2014 12:22
Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool

Setze einen Haken bei folgenden Einträgen
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset IE Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size
  • List Minidump Files
Klicke Go und poste den Inhalt der Result.txt.

suppenhuhn12 22.05.2014 12:52
Code:
MiniToolBox by Farbar  Version: 23-01-2014
Ran by Susann (administrator) on 22-05-2014 at 13:51:07
Running from "\\VBOXSVR\Virtualtauschordner"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1      localhost

========================= IP Configuration: ================================

Intel(R) PRO/1000 MT-Desktopadapter = LAN-Verbindung 2 (Connected)
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/21/2014 00:48:05 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:48:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:47:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:47:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:40:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:40:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:40:22 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:40:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:24:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:23:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (05/21/2014 00:21:52 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/21/2014 00:21:52 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/20/2014 09:54:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058

Error: (05/20/2014 09:53:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet:
%%-2147024891

Error: (05/20/2014 09:53:58 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueue[::]:5357

Error: (05/20/2014 09:53:38 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/20/2014 09:53:38 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.


Microsoft Office Sessions:
=========================
Error: (05/21/2014 00:48:05 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/21/2014 00:48:03 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/21/2014 00:47:30 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/21/2014 00:47:28 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/21/2014 00:40:26 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest\\vboxsrv\Virtualtauschordner\esetsmartinstaller_deu.exe

Error: (05/21/2014 00:40:24 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest\\vboxsrv\Virtualtauschordner\esetsmartinstaller_deu.exe

Error: (05/21/2014 00:40:22 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\esetsmartinstaller_deu.exe

Error: (05/21/2014 00:40:03 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/21/2014 00:24:00 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest\\vboxsrv\Virtualtauschordner\esetsmartinstaller_deu.exe

Error: (05/21/2014 00:23:47 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest\\vboxsrv\Virtualtauschordner\esetsmartinstaller_deu.exe


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 15:21:18.530
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 15:21:18.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


=========================== Installed Programs ============================

Adobe Flash Player 13 ActiveX (Version: 13.0.0.206)
Adobe Flash Player 13 Plugin (Version: 13.0.0.206)
Adobe Reader XI (11.0.06) - Deutsch (Version: 11.0.06)
ALPS Touch Pad Driver (Version: 7.106.303.203)
ArcSoft PhotoStudio 5.5
AuthenTec WinBio FingerPrint Software (Version: 3.2.3.1157)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Bejeweled 3 (Version: 2.2.0.97)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.06(T))
Canon Easy-PhotoPrint EX (Version: 4.1.6)
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (Version: 4.0.0)
Canon MG2200 series Benutzerregistrierung
Canon MG2200 series MP Drivers (Version: 1.00)
Canon MG2200 series On-screen Manual (Version: 7.5.0)
Canon My Image Garden (Version: 1.0.0)
Canon My Image Garden Design Files (Version: 1.0.0)
Canon My Printer (Version: 3.1.0)
Canon Quick Menu (Version: 2.0.0)
CanoScan Toolbox Ver4.9
Chicken Invaders 3 - Revenge of the Yolk (Version: 2.2.0.95)
Chuzzle Deluxe (Version: 2.2.0.95)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
FATE (Version: 2.2.0.97)
Final Drive: Nitro (Version: 2.2.0.95)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Google Chrome (Version: 34.0.1847.116)
Google Update Helper (Version: 1.3.23.9)
HappyFoto-Designer 4.5
Insaniquarium Deluxe (Version: 2.2.0.97)
Intel PROSet Wireless
Intel(R) Management Engine Components (Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 15.4)
Intel(R) Processor Graphics (Version: 8.15.10.2827)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000)
Intel(R) Rapid Storage Technology (Version: 10.1.2.1004)
Intel(R) Wireless Display
Intel(R) Wireless Display (Version: 2.0.29.0)
Java Auto Updater (Version: 2.0.2.1)
Java(TM) 6 Update 20 (Version: 6.0.200)
Junk Mail filter update (Version: 15.4.3502.0922)
Malwarebytes Anti-Malware Version 2.0.1.1004 (Version: 2.0.1.1004)
Manual CanoScan LiDE 25
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.30214.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 28.0 (x86 de) (Version: 28.0)
Mozilla Maintenance Service (Version: 28.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 10 Movie ThemePack Basic (Version: 10.6.10000.1.0)
Nero 12 Content Pack (Version: 12.0.00400)
Nero Abstract Themes (Version: 12.0.11500)
Nero BackItUp 10 (Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (Version: 10.6.10700)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nero Blu-ray Player (Version: 12.0.17700)
Nero BurnRights 10 (Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (Version: 10.6.10700)
Nero Cliparts (Version: 12.0.11500)
Nero Control Center 10 (Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (Version: 10.6.10800)
Nero Core Components 10 (Version: 2.0.20000.9.12)
Nero Disc Menus 1 (Version: 12.0.11500)
Nero Disc Menus 2 (Version: 12.0.11500)
Nero Disc Menus 3 (Version: 12.0.11500)
Nero Disc Menus Basic (Version: 12.0.11500)
Nero Effects Basic (Version: 12.0.11500)
Nero Express 10 (Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (Version: 10.6.10700)
Nero Family and Events Themes (Version: 12.0.11500)
Nero Football (Soccer) Themes (Version: 12.0.11500)
Nero Holiday and Sports Themes (Version: 12.0.11500)
Nero Image Samples (Version: 12.0.11500)
Nero InfoTool 10 (Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (Version: 10.6.10700)
Nero Kwik Media (Version: 1.18.18900)
Nero Kwik Media Help (CHM) (Version: 12.0.4000)
Nero Kwik Themes Basic (Version: 12.0.11500)
Nero Multimedia Suite 10 Essentials (Version: 10.6.10300)
Nero PiP Effects 1 (Version: 12.0.11500)
Nero PiP Effects Basic (Version: 12.0.11500)
Nero Platinum Effects 12 (Version: 12.0.11500)
Nero RescueAgent 10 (Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (Version: 10.6.10800)
Nero Retro Film Themes (Version: 12.0.11500)
Nero StartSmart 10 (Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (Version: 10.6.10700)
Nero Update (Version: 11.0.11800.31.0)
Nero Video Samples (Version: 12.0.11500)
Nero Video Transitions 1 (Version: 12.0.11500)
Norton AntiVirus (Version: 21.0.1.3)
O2Micro OZ776 SCR Driver (Version: 2.1.4.207G)
Oracle VM VirtualBox Guest Additions 4.3.6 (Version: 4.3.6.0)
Penguins! (Version: 2.2.0.95)
PL-2303 USB-to-Serial (Version: 1.3.0)
Plants vs. Zombies - Game of the Year (Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (Version: 2.2.0.97)
PowerDVD
Prerequisite installer (Version: 12.0.0002)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (Version: 6.0.1.6293)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.1)
Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)
RICOH Media Driver v2.14.17.02 (Version: 2.14.17.02)
ScanSoft OmniPage SE 4.0 (Version: 15.00.0020)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype™ 6.14 (Version: 6.14.104)
Slingo Deluxe (Version: 2.2.0.95)
Smiley Sync (Version: 6.0.1)
TOSHIBA Assist (Version: 4.02.02)
TOSHIBA Bulletin Board (Version: 2.1.10.64)
TOSHIBA ConfigFree (Version: 8.0.38)
TOSHIBA Disc Creator (Version: 2.1.0.9 for x64)
TOSHIBA eco Utility (Version: 1.3.2.64)
TOSHIBA Face Recognition (Version: 3.1.8.64)
TOSHIBA Fingerprint Utility (Version: 2.0.0.6409)
TOSHIBA HDD Protection (Version: 2.2.1.13)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.8)
Toshiba Manuals (Version: 10.02)
TOSHIBA Media Controller (Version: 1.0.86.2)
TOSHIBA Media Controller Plug-in (Version: 1.0.6.1)
TOSHIBA Mobile Broadband Device (Version: 6.3.2.2)
TOSHIBA Online Product Information (Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.7.64)
TOSHIBA Places Icon Utility (Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (Version: 2.1.3.5109)
TOSHIBA Recovery Media Creator Reminder (Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.18.64)
TOSHIBA Security Assist (Version: 2.0.9)
TOSHIBA Service Station (Version: 2.1.52)
TOSHIBA Sleep Utility (Version: 1.4.2.7)
TOSHIBA Sync Utility (Version: 2.0.3060)
TOSHIBA Value Added Package (Version: 1.5.10.64)
TOSHIBA Web Camera Application (Version: 1.1.7.1)
TOSHIBA Wireless Display Monitor (Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (Version: 1.0.4)
TOSHIBA Wireless Manager (Version: 6.3.2.1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update Installer for WildTangent Games App
VLC media player 2.0.7 (Version: 2.0.7)
Wedding Dash 2 - Rings Around the World (Version: 2.2.0.95)
WildTangent Games (Version: 1.0.2.5)
WildTangent Games App (Toshiba Games) (Version: 4.0.5.5)
Windows Live (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Wissen für Kinder - Der Körper
Zuma Deluxe (Version: 2.2.0.95)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)

========================= Memory info: ===================================

Percentage of memory in use: 49%
Total physical RAM: 2047.55 MB
Available physical RAM: 1037.46 MB
Total Pagefile: 4095.11 MB
Available Pagefile: 2817.34 MB
Total Virtual: 4095.88 MB
Available Virtual: 3983.9 MB

========================= Partitions: =====================================

1 Drive c: (TI30810600A) (Fixed) (Total:281.99 GB) (Free:167.51 GB) NTFS
2 Drive d: (VBOXADDITIONS_4.) (CDROM) (Total:0.06 GB) (Free:0 GB) CDFS

========================= Users: ========================================

Benutzerkonten fr \\SUSANNS-TOSHIBA

Administrator            Gast                    Susann                 
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found


**** End of log ****

schrauber 23.05.2014 11:04
Mal ne bescheidene Frage:

Wie gehst Du Online? LAN oder WLAN? Schau mal in der Systemsteuerung Netzwerk und FreigabeCenter, Adaptereinstellungen sowie im Gerätemanager ob überhaupt ein Treiber installiert ist für die Netzwerkkarte....

suppenhuhn12 23.05.2014 11:28
Mahlzeit!

Wie im ersten Beitrag von mir beschrieben:

- Beim Verbinden mit einem Netzwerk (egal ob Lan oder WLan) bekomme ich keine Kommunikation über TCP IP v4 zum laufen.
- ist DHCP aktiviert wird keine IP vom Router bezogen
- ist eine Statische IP konfiguriert, bekomme ich keine Antwort aus dem Netz
- Ping auf 127.0.0.1, eigene IP oder Router -> allgemeiner Fehler
- Meldung im Netzwerk und Freigabecenter: Nicht identifiziertes Netzwerk, IPv4 keine Internetverbindung, IPv6 keine Verbindung
[...]
- alle Netzwerkkarten entfernt und neu installiert
- Winsock und Co lt gängigen Anleitungen zurückgesetzt.

Ein Fehler der mir aufgefallen ist: der IKE IPSec Dienst lässt sich nicht starten - Fehlermeldung:

kein Erfolg.

schrauber 24.05.2014 10:57
NEtzwerkkarten werden also fehlerfrei angezeigt? Als aktiv und bereit?


http://www.trojaner-board.de/126216-...epair-aio.html
Mach das mal.

suppenhuhn12 24.05.2014 17:57
Mahlzeit!

Alle Karten sind ohne Fehler im Gerätemanager, sie erkennen eine Verbindung und melden dann eingeschränkte Konnektivität. Meines erachtens ist es ein TCPIPv4 Problem. Hardwarefehler ist auszuschliessen da es sowohl am eigentlichen Rechner als auch in der Virtualbox das selbe Problem ist.

Hier die Logs nach der Reparatur keine Änderung des Fehlerbildes:

Code:
System Variables
--------------------------------------------------------------------------------
OS: Windows 7 Professional
OS Architecture: 64-bit
OS Version: 6.1.7601
OS Service Pack: Service Pack 1
Computer Name: SUSANNS-TOSHIBA
Windows Drive: C:\
Windows Path: C:\Windows
Current Profile: C:\Users\Susann
Current Profile SID: S-1-5-21-2252115965-1886336526-2189544158-1000
Current Profile Classes: S-1-5-21-2252115965-1886336526-2189544158-1000_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\Susann\AppData\Local
--------------------------------------------------------------------------------

System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:21:07

Process Count: 80
Commit Total: 1,33 GB
Commit Limit: 4,00 GB
Commit Peak: 1,40 GB
Handle Count: 23760
Kernel Total: 454,80 MB
Kernel Paged: 370,57 MB
Kernel Non Paged: 84,24 MB
System Cache: 930,84 MB
Thread Count: 819
--------------------------------------------------------------------------------

Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 2,00 GB
Memory Used: 1,18 GB(59,2031%)
Memory Avail.: 835,34 MB
--------------------------------------------------------------------------------

Cleaning Memory Before Starting Repairs...

Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 2,00 GB
Memory Used: 1,18 GB(59,0653%)
Memory Avail.: 838,16 MB
--------------------------------------------------------------------------------

Starting Repairs...
  Start (24.05.2014 18:25:20)

01 - Reset Registry Permissions 01/03
  HKEY_CURRENT_USER & Sub Keys
  Start (24.05.2014 18:25:33)
  Running Repair Under Current User Account
  Done (24.05.2014 18:25:56)

01 - Reset Registry Permissions 02/03
  HKEY_LOCAL_MACHINE & Sub Keys
  Start (24.05.2014 18:25:56)
  Running Repair Under System Account
  Done (24.05.2014 18:28:15)

01 - Reset Registry Permissions 03/03
  HKEY_CLASSES_ROOT & Sub Keys
  Start (24.05.2014 18:28:15)
  Running Repair Under System Account
  Done (24.05.2014 18:29:23)

03 - Register System Files
  Start (24.05.2014 18:29:23)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:30:26)

04 - Repair WMI
  Start (24.05.2014 18:30:26)

  Starting Security Center So We Can Export The Security Info.

  Exporting Antivirus Info...
  Norton AntiVirus Exported.

  Exporting AntiSpyware Info...
  Windows Defender Exported.
  Norton AntiVirus Exported.

  Exporting 3rd Party Firewall Info...
  No Firewall Products Reported.

  Running Repair Under Current User Account
  Done (24.05.2014 18:37:06)

05 - Repair Windows Firewall
  Start (24.05.2014 18:37:06)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:37:50)

06 - Repair Internet Explorer
  Start (24.05.2014 18:37:50)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:38:44)

07 - Repair MDAC/MS Jet
  Start (24.05.2014 18:38:44)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:39:03)

08 - Repair Hosts File
  Start (24.05.2014 18:39:03)
  Running Repair Under System Account
  Done (24.05.2014 18:39:05)

09 - Remove Policies Set By Infections
  Start (24.05.2014 18:39:05)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:39:11)

10 - Repair Start Menu Icons Removed By Infections
  Start (24.05.2014 18:39:11)
  Running Repair Under System Account
  Done (24.05.2014 18:39:13)

11 - Repair Icons
  Start (24.05.2014 18:39:13)
  Running Repair Under Current User Account
  Done (24.05.2014 18:39:16)

12 - Repair Winsock & DNS Cache
  Start (24.05.2014 18:39:16)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:39:44)

14 - Repair Proxy Settings
  Start (24.05.2014 18:39:44)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:39:49)

16 - Repair Windows Updates
  Start (24.05.2014 18:39:49)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:40:22)

17 - Repair CD/DVD Missing/Not Working
  Start (24.05.2014 18:40:22)
  iTunes not found, not applying UpperFilters iTunes Reg Key
  Done (24.05.2014 18:40:22)

18 - Repair Volume Shadow Copy Service
  Start (24.05.2014 18:40:22)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:40:32)

20 - Repair MSI (Windows Installer)
  Start (24.05.2014 18:40:33)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:40:49)

22.01 - Repair bat Association
  Start (24.05.2014 18:40:49)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:40:56)

22.02 - Repair cmd Association
  Start (24.05.2014 18:40:56)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:01)

22.03 - Repair com Association
  Start (24.05.2014 18:41:01)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:06)

22.04 - Repair Directory Association
  Start (24.05.2014 18:41:06)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:11)

22.05 - Repair Drive Association
  Start (24.05.2014 18:41:11)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:16)

22.06 - Repair exe Association
  Start (24.05.2014 18:41:16)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:20)

22.07 - Repair Folder Association
  Start (24.05.2014 18:41:20)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:25)

22.08 - Repair inf Association
  Start (24.05.2014 18:41:26)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:31)

22.09 - Repair lnk (Shortcuts) Association
  Start (24.05.2014 18:41:31)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:36)

22.10 - Repair msc Association
  Start (24.05.2014 18:41:36)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:41)

22.11 - Repair reg Association
  Start (24.05.2014 18:41:41)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:46)

22.12 - Repair scr Association
  Start (24.05.2014 18:41:46)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:52)

23 - Repair Windows Safe Mode
  Start (24.05.2014 18:41:52)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:41:57)

24 - Repair Print Spooler
  Start (24.05.2014 18:41:57)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:42:16)

25 - Restore Important Windows Services
  Start (24.05.2014 18:42:16)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:42:55)

26 - Set Windows Services To Default Startup
  Start (24.05.2014 18:42:55)
  Running Repair Under Current User Account
  Running Repair Under System Account
  Done (24.05.2014 18:43:13)

  Skipping Repair.
  Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
  Current version: 6.1

  Skipping Repair.
  Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
  Current version: 6.1

  Skipping Repair.
  Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
  Current version: 6.1

Cleaning up empty logs...

All Selected Repairs Done.
  Done (24.05.2014 18:43:13)
  Total Repair Time: 00:17:54


...YOU MUST RESTART YOUR SYSTEM...
  Running Repair Under Current User Account
Vielleicht noch interessant:

Restore_Important_Windows_Services

Code:
Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Die Datei oder das Verzeichnis ist kein Analysepunkt.

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert

Fehler:  Zugriff verweigert
Repair WMI im Anhang weil gross

Winsock und DNS Cache

Code:
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.

OK.

Global wird zurckgesetzt, OK!
Schnittstelle wird zurckgesetzt, OK!
Unicastadresse wird zurckgesetzt, OK!
Route wird zurckgesetzt, OK!
Starten Sie den Computer neu, um die Aktion abzuschlieáen.


Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.

Der folgende Befehl wurde nicht gefunden: int 6to4 reset all.
Es sind keine vom Benutzer festgelegten Einstellungen zum Zurcksetzen vorhanden.

Es sind keine vom Benutzer festgelegten Einstellungen zum Zurcksetzen vorhanden.


Der folgende Befehl wurde nicht gefunden: int isatap reset all.


Fehler beim Zurcksetzen aller TCP-Parameter: global konnte nicht auf ipv4 festgelegt werden.
Falscher Parameter.


Der folgende Befehl wurde nicht gefunden: int teredo reset all.

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

Windows-IP-Konfiguration

Die Registrierung der DNS-Ressourceneintr„ge fr alle Adapter dieses Computer wurde initialisiert. Fehler werden in der Ereignisanzeige in 15 Minuten aufgefhrt.

Der Winsock-Katalog wurde zurückgesetzt.
Sie müssen den Computer neu starten, um den Vorgang abzuschließen.

OK.

Schnittstelle wird zurückgesetzt, OK!
Starten Sie den Computer neu, um die Aktion abzuschließen.


Der Winsock-Katalog wurde zurückgesetzt.
Sie müssen den Computer neu starten, um den Vorgang abzuschließen.

Der folgende Befehl wurde nicht gefunden: int 6to4 reset all.
Es sind keine vom Benutzer festgelegten Einstellungen zum Zurücksetzen vorhanden.

Es sind keine vom Benutzer festgelegten Einstellungen zum Zurücksetzen vorhanden.


Der folgende Befehl wurde nicht gefunden: int isatap reset all.


Das Zurücksetzen aller TCP-Parameter war erfolgreich.
OK.

Der folgende Befehl wurde nicht gefunden: int teredo reset all.

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

Windows-IP-Konfiguration

Die Registrierung der DNS-Ressourceneintr„ge fr alle Adapter dieses Computer wurde initialisiert. Fehler werden in der Ereignisanzeige in 15 Minuten aufgefhrt.

schrauber 25.05.2014 18:12
hi,

Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.



suppenhuhn12 26.05.2014 08:24
Code:
Farbar Service Scanner Version: 21-05-2014
Ran by Susann (administrator) on 26-05-2014 at 08:51:47
Running from "\\VBOXSVR\Virtualtauschordner"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Attempt to access Local Host IP returned error: Localhost is blocked: Destination is unreachable
There is no connection to network.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
Nachtrag: Es wird die Windows Firewall eingesetzt, diese wurde testweise auf Standardeinstellung zurückgesetzt und deaktiviert - keine Veränderung des Fehlerbildes.

schrauber 26.05.2014 19:52
FSS öffnen, in das Suchfeld

ikeext

eintragen und auf Export Service klicken. Report hier posten.

suppenhuhn12 27.05.2014 07:14
Code:
Note: The export is in "Windows Registry Editor Version 5.00" format.

================== Result for "ikeext" ==================

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\ikeext]
"DisplayName"="@%SystemRoot%\\system32\\ikeext.dll,-501"
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Description"="@%SystemRoot%\\system32\\ikeext.dll,-502"
"ObjectName"="LocalSystem"
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000020
"DependOnService"=hex(7):42,00,46,00,45,00,00,00,00,00
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,\
  00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6d,00,\
  70,00,65,00,72,00,73,00,6f,00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,\
  00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,54,00,63,00,62,00,50,00,\
  72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,44,00,65,\
  00,62,00,75,00,67,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\
  00,00,00,00
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\ikeext\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  69,00,6b,00,65,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceDllUnloadOnStop"=dword:00000001
"ServiceMain"="IkeServiceMain"

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\ikeext\TriggerInfo]

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\ikeext\TriggerInfo\0]
"Type"=dword:00000004
"Action"=dword:00000001
"GUID"=hex:07,9e,56,b7,21,84,e0,4e,ad,10,86,91,5a,fd,ad,09
"Data0"=hex:35,00,30,00,30,00,00,00,55,00,44,00,50,00,00,00,25,00,77,00,69,00,\
  6e,00,64,00,69,00,72,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,\
  00,32,00,5c,00,73,00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,\
  65,00,00,00,49,00,4b,00,45,00,45,00,58,00,54,00,00,00,00,00
"DataType0"=dword:00000002



================== End Of Export =============

schrauber 28.05.2014 09:21
das passt auch. Bitte mal VM komplett beenden, VM Netzwerkadapter deaktivieren, Minitoolbox nochmal von deinem Desktop aus laufen lassen.

suppenhuhn12 28.05.2014 15:04
Code:
MiniToolBox by Farbar  Version: 23-01-2014
Ran by Susann (administrator) on 28-05-2014 at 15:57:47
Running from "\\VBOXSVR\Virtualtauschordner"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================




127.0.0.1      localhost

========================= IP Configuration: ================================

========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/26/2014 08:50:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:46:47 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:46:45 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:06:11 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:03:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/24/2014 05:43:55 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/22/2014 01:54:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/21/2014 00:48:05 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/21/2014 00:48:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (05/28/2014 03:55:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0

Error: (05/28/2014 03:55:29 PM) (Source: DCOM) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (05/28/2014 03:55:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058

Error: (05/28/2014 03:55:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet:
%%-2147024891

Error: (05/28/2014 03:55:02 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueue[::]:5357

Error: (05/28/2014 11:26:58 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/28/2014 11:26:58 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/27/2014 07:58:26 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/27/2014 07:58:26 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/26/2014 08:50:59 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.


Microsoft Office Sessions:
=========================
Error: (05/26/2014 08:50:55 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\esetsmartinstaller_deu.exe

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:46:47 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:46:45 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:06:11 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:03:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/24/2014 05:43:55 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/22/2014 01:54:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/21/2014 00:48:05 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/21/2014 00:48:03 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 15:21:18.530
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 15:21:18.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


=========================== Installed Programs ============================

Adobe Flash Player 13 ActiveX (Version: 13.0.0.206)
Adobe Flash Player 13 Plugin (Version: 13.0.0.206)
Adobe Reader XI (11.0.06) - Deutsch (Version: 11.0.06)
ALPS Touch Pad Driver (Version: 7.106.303.203)
ArcSoft PhotoStudio 5.5
AuthenTec WinBio FingerPrint Software (Version: 3.2.3.1157)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Bejeweled 3 (Version: 2.2.0.97)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.06(T))
Canon Easy-PhotoPrint EX (Version: 4.1.6)
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (Version: 4.0.0)
Canon MG2200 series Benutzerregistrierung
Canon MG2200 series MP Drivers (Version: 1.00)
Canon MG2200 series On-screen Manual (Version: 7.5.0)
Canon My Image Garden (Version: 1.0.0)
Canon My Image Garden Design Files (Version: 1.0.0)
Canon My Printer (Version: 3.1.0)
Canon Quick Menu (Version: 2.0.0)
CanoScan Toolbox Ver4.9
Chicken Invaders 3 - Revenge of the Yolk (Version: 2.2.0.95)
Chuzzle Deluxe (Version: 2.2.0.95)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
FATE (Version: 2.2.0.97)
Final Drive: Nitro (Version: 2.2.0.95)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Google Chrome (Version: 34.0.1847.116)
Google Update Helper (Version: 1.3.23.9)
HappyFoto-Designer 4.5
Insaniquarium Deluxe (Version: 2.2.0.97)
Intel PROSet Wireless
Intel(R) Management Engine Components (Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 15.4)
Intel(R) Processor Graphics (Version: 8.15.10.2827)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000)
Intel(R) Rapid Storage Technology (Version: 10.1.2.1004)
Intel(R) Wireless Display
Intel(R) Wireless Display (Version: 2.0.29.0)
Java Auto Updater (Version: 2.0.2.1)
Java(TM) 6 Update 20 (Version: 6.0.200)
Junk Mail filter update (Version: 15.4.3502.0922)
Malwarebytes Anti-Malware Version 2.0.1.1004 (Version: 2.0.1.1004)
Manual CanoScan LiDE 25
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.30214.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 28.0 (x86 de) (Version: 28.0)
Mozilla Maintenance Service (Version: 28.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 10 Movie ThemePack Basic (Version: 10.6.10000.1.0)
Nero 12 Content Pack (Version: 12.0.00400)
Nero Abstract Themes (Version: 12.0.11500)
Nero BackItUp 10 (Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (Version: 10.6.10700)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nero Blu-ray Player (Version: 12.0.17700)
Nero BurnRights 10 (Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (Version: 10.6.10700)
Nero Cliparts (Version: 12.0.11500)
Nero Control Center 10 (Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (Version: 10.6.10800)
Nero Core Components 10 (Version: 2.0.20000.9.12)
Nero Disc Menus 1 (Version: 12.0.11500)
Nero Disc Menus 2 (Version: 12.0.11500)
Nero Disc Menus 3 (Version: 12.0.11500)
Nero Disc Menus Basic (Version: 12.0.11500)
Nero Effects Basic (Version: 12.0.11500)
Nero Express 10 (Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (Version: 10.6.10700)
Nero Family and Events Themes (Version: 12.0.11500)
Nero Football (Soccer) Themes (Version: 12.0.11500)
Nero Holiday and Sports Themes (Version: 12.0.11500)
Nero Image Samples (Version: 12.0.11500)
Nero InfoTool 10 (Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (Version: 10.6.10700)
Nero Kwik Media (Version: 1.18.18900)
Nero Kwik Media Help (CHM) (Version: 12.0.4000)
Nero Kwik Themes Basic (Version: 12.0.11500)
Nero Multimedia Suite 10 Essentials (Version: 10.6.10300)
Nero PiP Effects 1 (Version: 12.0.11500)
Nero PiP Effects Basic (Version: 12.0.11500)
Nero Platinum Effects 12 (Version: 12.0.11500)
Nero RescueAgent 10 (Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (Version: 10.6.10800)
Nero Retro Film Themes (Version: 12.0.11500)
Nero StartSmart 10 (Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (Version: 10.6.10700)
Nero Update (Version: 11.0.11800.31.0)
Nero Video Samples (Version: 12.0.11500)
Nero Video Transitions 1 (Version: 12.0.11500)
Norton AntiVirus (Version: 21.0.1.3)
O2Micro OZ776 SCR Driver (Version: 2.1.4.207G)
Oracle VM VirtualBox Guest Additions 4.3.6 (Version: 4.3.6.0)
Penguins! (Version: 2.2.0.95)
PL-2303 USB-to-Serial (Version: 1.3.0)
Plants vs. Zombies - Game of the Year (Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (Version: 2.2.0.97)
PowerDVD
Prerequisite installer (Version: 12.0.0002)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (Version: 6.0.1.6293)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.1)
Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)
RICOH Media Driver v2.14.17.02 (Version: 2.14.17.02)
ScanSoft OmniPage SE 4.0 (Version: 15.00.0020)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype™ 6.14 (Version: 6.14.104)
Slingo Deluxe (Version: 2.2.0.95)
Smiley Sync (Version: 6.0.1)
TOSHIBA Assist (Version: 4.02.02)
TOSHIBA Bulletin Board (Version: 2.1.10.64)
TOSHIBA ConfigFree (Version: 8.0.38)
TOSHIBA Disc Creator (Version: 2.1.0.9 for x64)
TOSHIBA eco Utility (Version: 1.3.2.64)
TOSHIBA Face Recognition (Version: 3.1.8.64)
TOSHIBA Fingerprint Utility (Version: 2.0.0.6409)
TOSHIBA HDD Protection (Version: 2.2.1.13)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.8)
Toshiba Manuals (Version: 10.02)
TOSHIBA Media Controller (Version: 1.0.86.2)
TOSHIBA Media Controller Plug-in (Version: 1.0.6.1)
TOSHIBA Mobile Broadband Device (Version: 6.3.2.2)
TOSHIBA Online Product Information (Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.7.64)
TOSHIBA Places Icon Utility (Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (Version: 2.1.3.5109)
TOSHIBA Recovery Media Creator Reminder (Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.18.64)
TOSHIBA Security Assist (Version: 2.0.9)
TOSHIBA Service Station (Version: 2.1.52)
TOSHIBA Sleep Utility (Version: 1.4.2.7)
TOSHIBA Sync Utility (Version: 2.0.3060)
TOSHIBA Value Added Package (Version: 1.5.10.64)
TOSHIBA Web Camera Application (Version: 1.1.7.1)
TOSHIBA Wireless Display Monitor (Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (Version: 1.0.4)
TOSHIBA Wireless Manager (Version: 6.3.2.1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update Installer for WildTangent Games App
VLC media player 2.0.7 (Version: 2.0.7)
Wedding Dash 2 - Rings Around the World (Version: 2.2.0.95)
WildTangent Games (Version: 1.0.2.5)
WildTangent Games App (Toshiba Games) (Version: 4.0.5.5)
Windows Live (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Wissen für Kinder - Der Körper
Zuma Deluxe (Version: 2.2.0.95)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 47%
Total physical RAM: 2047.55 MB
Available physical RAM: 1080.12 MB
Total Pagefile: 4095.11 MB
Available Pagefile: 2957.83 MB
Total Virtual: 4095.88 MB
Available Virtual: 3975.36 MB

========================= Partitions: =====================================

1 Drive c: (TI30810600A) (Fixed) (Total:281.99 GB) (Free:167.43 GB) NTFS
2 Drive d: (VBOXADDITIONS_4.) (CDROM) (Total:0.06 GB) (Free:0 GB) CDFS

========================= Users: ========================================

Benutzerkonten fr \\SUSANNS-TOSHIBA

Administrator            Gast                    Susann                 
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

18-05-2014 08:37:31 Gerätetreiber-Paketinstallation: Oracle Corporation Systemgeräte
18-05-2014 08:41:52 Gerätetreiber-Paketinstallation: Oracle Corporation Grafikkarte
24-05-2014 16:21:54 Tweaking.com - Windows Repair

**** End of log ****

schrauber 29.05.2014 14:01
Laut diesem Log läuft überhaupt kein Adapter. SPrich keine Hardware eingebaut, oder keine Treiber, oder alle Netzwerkverbindungen sind deaktiviert.

suppenhuhn12 30.05.2014 06:27
Mahlzeit!

Oh - dass ich danach die Netzwerkgeschichte wieder aktivieren soll ist an mir vorbeigegangen....

Code:
MiniToolBox by Farbar  Version: 23-01-2014
Ran by Susann (administrator) on 30-05-2014 at 07:26:10
Running from "\\VBOXSVR\Virtualtauschordner"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================




127.0.0.1      localhost

========================= IP Configuration: ================================

Intel(R) PRO/1000 MT-Desktopadapter = LAN-Verbindung 2 (Connected)
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/30/2014 07:23:49 AM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/28/2014 03:58:22 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/26/2014 08:50:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:46:47 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:46:45 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:06:11 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:03:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/24/2014 05:43:55 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/22/2014 01:54:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/30/2014 07:19:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0

Error: (05/30/2014 07:19:44 AM) (Source: DCOM) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (05/30/2014 07:19:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058

Error: (05/30/2014 07:19:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet:
%%-2147024891

Error: (05/30/2014 07:19:22 AM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueue[::]:5357

Error: (05/30/2014 07:19:01 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/30/2014 07:19:01 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/28/2014 03:55:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0

Error: (05/28/2014 03:55:29 PM) (Source: DCOM) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (05/28/2014 03:55:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058


Microsoft Office Sessions:
=========================
Error: (05/30/2014 07:23:49 AM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/28/2014 03:58:22 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/26/2014 08:50:55 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\esetsmartinstaller_deu.exe

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:46:47 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:46:45 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:06:11 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:03:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/24/2014 05:43:55 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/22/2014 01:54:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 15:21:18.530
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 15:21:18.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


=========================== Installed Programs ============================

Adobe Flash Player 13 ActiveX (Version: 13.0.0.206)
Adobe Flash Player 13 Plugin (Version: 13.0.0.206)
Adobe Reader XI (11.0.06) - Deutsch (Version: 11.0.06)
ALPS Touch Pad Driver (Version: 7.106.303.203)
ArcSoft PhotoStudio 5.5
AuthenTec WinBio FingerPrint Software (Version: 3.2.3.1157)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Bejeweled 3 (Version: 2.2.0.97)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.06(T))
Canon Easy-PhotoPrint EX (Version: 4.1.6)
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (Version: 4.0.0)
Canon MG2200 series Benutzerregistrierung
Canon MG2200 series MP Drivers (Version: 1.00)
Canon MG2200 series On-screen Manual (Version: 7.5.0)
Canon My Image Garden (Version: 1.0.0)
Canon My Image Garden Design Files (Version: 1.0.0)
Canon My Printer (Version: 3.1.0)
Canon Quick Menu (Version: 2.0.0)
CanoScan Toolbox Ver4.9
Chicken Invaders 3 - Revenge of the Yolk (Version: 2.2.0.95)
Chuzzle Deluxe (Version: 2.2.0.95)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
FATE (Version: 2.2.0.97)
Final Drive: Nitro (Version: 2.2.0.95)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Google Chrome (Version: 34.0.1847.116)
Google Update Helper (Version: 1.3.23.9)
HappyFoto-Designer 4.5
Insaniquarium Deluxe (Version: 2.2.0.97)
Intel PROSet Wireless
Intel(R) Management Engine Components (Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 15.4)
Intel(R) Processor Graphics (Version: 8.15.10.2827)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000)
Intel(R) Rapid Storage Technology (Version: 10.1.2.1004)
Intel(R) Wireless Display
Intel(R) Wireless Display (Version: 2.0.29.0)
Java Auto Updater (Version: 2.0.2.1)
Java(TM) 6 Update 20 (Version: 6.0.200)
Junk Mail filter update (Version: 15.4.3502.0922)
Malwarebytes Anti-Malware Version 2.0.1.1004 (Version: 2.0.1.1004)
Manual CanoScan LiDE 25
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.30214.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 28.0 (x86 de) (Version: 28.0)
Mozilla Maintenance Service (Version: 28.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 10 Movie ThemePack Basic (Version: 10.6.10000.1.0)
Nero 12 Content Pack (Version: 12.0.00400)
Nero Abstract Themes (Version: 12.0.11500)
Nero BackItUp 10 (Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (Version: 10.6.10700)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nero Blu-ray Player (Version: 12.0.17700)
Nero BurnRights 10 (Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (Version: 10.6.10700)
Nero Cliparts (Version: 12.0.11500)
Nero Control Center 10 (Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (Version: 10.6.10800)
Nero Core Components 10 (Version: 2.0.20000.9.12)
Nero Disc Menus 1 (Version: 12.0.11500)
Nero Disc Menus 2 (Version: 12.0.11500)
Nero Disc Menus 3 (Version: 12.0.11500)
Nero Disc Menus Basic (Version: 12.0.11500)
Nero Effects Basic (Version: 12.0.11500)
Nero Express 10 (Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (Version: 10.6.10700)
Nero Family and Events Themes (Version: 12.0.11500)
Nero Football (Soccer) Themes (Version: 12.0.11500)
Nero Holiday and Sports Themes (Version: 12.0.11500)
Nero Image Samples (Version: 12.0.11500)
Nero InfoTool 10 (Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (Version: 10.6.10700)
Nero Kwik Media (Version: 1.18.18900)
Nero Kwik Media Help (CHM) (Version: 12.0.4000)
Nero Kwik Themes Basic (Version: 12.0.11500)
Nero Multimedia Suite 10 Essentials (Version: 10.6.10300)
Nero PiP Effects 1 (Version: 12.0.11500)
Nero PiP Effects Basic (Version: 12.0.11500)
Nero Platinum Effects 12 (Version: 12.0.11500)
Nero RescueAgent 10 (Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (Version: 10.6.10800)
Nero Retro Film Themes (Version: 12.0.11500)
Nero StartSmart 10 (Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (Version: 10.6.10700)
Nero Update (Version: 11.0.11800.31.0)
Nero Video Samples (Version: 12.0.11500)
Nero Video Transitions 1 (Version: 12.0.11500)
Norton AntiVirus (Version: 21.0.1.3)
O2Micro OZ776 SCR Driver (Version: 2.1.4.207G)
Oracle VM VirtualBox Guest Additions 4.3.6 (Version: 4.3.6.0)
Penguins! (Version: 2.2.0.95)
PL-2303 USB-to-Serial (Version: 1.3.0)
Plants vs. Zombies - Game of the Year (Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (Version: 2.2.0.97)
PowerDVD
Prerequisite installer (Version: 12.0.0002)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (Version: 6.0.1.6293)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.1)
Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)
RICOH Media Driver v2.14.17.02 (Version: 2.14.17.02)
ScanSoft OmniPage SE 4.0 (Version: 15.00.0020)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype™ 6.14 (Version: 6.14.104)
Slingo Deluxe (Version: 2.2.0.95)
Smiley Sync (Version: 6.0.1)
TOSHIBA Assist (Version: 4.02.02)
TOSHIBA Bulletin Board (Version: 2.1.10.64)
TOSHIBA ConfigFree (Version: 8.0.38)
TOSHIBA Disc Creator (Version: 2.1.0.9 for x64)
TOSHIBA eco Utility (Version: 1.3.2.64)
TOSHIBA Face Recognition (Version: 3.1.8.64)
TOSHIBA Fingerprint Utility (Version: 2.0.0.6409)
TOSHIBA HDD Protection (Version: 2.2.1.13)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.8)
Toshiba Manuals (Version: 10.02)
TOSHIBA Media Controller (Version: 1.0.86.2)
TOSHIBA Media Controller Plug-in (Version: 1.0.6.1)
TOSHIBA Mobile Broadband Device (Version: 6.3.2.2)
TOSHIBA Online Product Information (Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.7.64)
TOSHIBA Places Icon Utility (Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (Version: 2.1.3.5109)
TOSHIBA Recovery Media Creator Reminder (Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.18.64)
TOSHIBA Security Assist (Version: 2.0.9)
TOSHIBA Service Station (Version: 2.1.52)
TOSHIBA Sleep Utility (Version: 1.4.2.7)
TOSHIBA Sync Utility (Version: 2.0.3060)
TOSHIBA Value Added Package (Version: 1.5.10.64)
TOSHIBA Web Camera Application (Version: 1.1.7.1)
TOSHIBA Wireless Display Monitor (Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (Version: 1.0.4)
TOSHIBA Wireless Manager (Version: 6.3.2.1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update Installer for WildTangent Games App
VLC media player 2.0.7 (Version: 2.0.7)
Wedding Dash 2 - Rings Around the World (Version: 2.2.0.95)
WildTangent Games (Version: 1.0.2.5)
WildTangent Games App (Toshiba Games) (Version: 4.0.5.5)
Windows Live (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Wissen für Kinder - Der Körper
Zuma Deluxe (Version: 2.2.0.95)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 46%
Total physical RAM: 2047.55 MB
Available physical RAM: 1104.31 MB
Total Pagefile: 4095.11 MB
Available Pagefile: 2877.28 MB
Total Virtual: 4095.88 MB
Available Virtual: 3979.61 MB

========================= Partitions: =====================================

1 Drive c: (TI30810600A) (Fixed) (Total:281.99 GB) (Free:167.35 GB) NTFS
2 Drive d: (VBOXADDITIONS_4.) (CDROM) (Total:0.06 GB) (Free:0 GB) CDFS

========================= Users: ========================================

Benutzerkonten fr \\SUSANNS-TOSHIBA

Administrator            Gast                    Susann                 
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

18-05-2014 08:37:31 Gerätetreiber-Paketinstallation: Oracle Corporation Systemgeräte
18-05-2014 08:41:52 Gerätetreiber-Paketinstallation: Oracle Corporation Grafikkarte
24-05-2014 16:21:54 Tweaking.com - Windows Repair

**** End of log ****

schrauber 30.05.2014 22:12
irgendwie reden wir aneinander vorbei....

Zitat:
Running from "\\VBOXSVR\Virtualtauschordner"
Du sollst den VM Scheiss jetzt mal sein lasen, den Netzwerkadapter der VM, der alles zerballert (macht er bei mir immer) deaktivieren und dein normales Netzwerk, LAN oder WLAN, am Laptop/Hosts aktivieren und Minitoolbox vom Desktop aus laufen lassen.

In keinem der Logs sieht man eine aktive NEtzwerkverbindung, da ist TCPIP dein geringstes Problem.

suppenhuhn12 31.05.2014 12:49
Liste der Anhänge anzeigen (Anzahl: 1)
Mahlzeit!

Ja, wir reden aneinander vorbei. Also es ist so:

Der Rechner ist IN der VirtualBox. Das "\\VBOXSVR\Virtualtauschordner" ist das Share am Physischen Rechner in den ich die Daten reinkopiere (sonst hätte ich ja keine Downloads am Rechner da er ja keine Netzwerkverbindung schafft).

Natürlich kann ich die Datei auf das Desktop kopieren - tue ich hiermit - und deaktiviere den "shared Hostordner".

Aber: es sind sehr wohl Netzwerkverbindungen da - siehe Screenprint.

Nun sieht es so aus:
- virtuelle Maschine mit dem Problem (der Originalrechner von dem das Image stammt muss derzeit anders genutzt werden - wenn der Fehler behoben ist soll das Image wieder zurück auf den Originalrechner)
- keine Shared Ordner zum Host
- nur LAN Verbindung die nicht funktioniert
- und hier habe ich die Minitoolbox ausgeführt

Screenprint von rechts oben nach links:
- Meldung des NEtzwerk- und Freigabecenter
- Minitoolbox wie ich sie ausführe
- Lan Verbindung der VM (siehe 0 empfangen)
- Eigenschaften der LAN
- IPv4 Konfig
- ausserhalb: Netzwerkeinstellung der VM

Anmerkung: alles exakt gleich wie am echten Rechner

Code:
MiniToolBox by Farbar  Version: 23-01-2014
Ran by Susann (administrator) on 31-05-2014 at 13:46:54
Running from "C:\Users\Susann\Desktop"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================




127.0.0.1      localhost

========================= IP Configuration: ================================

Intel(R) PRO/1000 MT-Desktopadapter = LAN-Verbindung 2 (Connected)


# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4

reset


popd
# Ende der IPv4-Konfiguration



Windows-IP-Konfiguration

  Hostname  . . . . . . . . . . . . : Susanns-TOSHIBA
  Prim„res DNS-Suffix . . . . . . . :
  Knotentyp . . . . . . . . . . . . : Hybrid
  IP-Routing aktiviert  . . . . . . : Nein
  WINS-Proxy aktiviert  . . . . . . : Nein

Ethernet-Adapter LAN-Verbindung 2:

  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Intel(R) PRO/1000 MT-Desktopadapter
  Physikalische Adresse . . . . . . : 08-00-27-1C-79-31
  DHCP aktiviert. . . . . . . . . . : Ja
  Autokonfiguration aktiviert . . . : Ja
  Verbindungslokale IPv6-Adresse  . : fe80::e585:c8d8:35cf:6ede%22(Bevorzugt)
  IPv4-Adresse (Auto. Konfiguration): 169.254.110.222(Bevorzugt)
  Subnetzmaske  . . . . . . . . . . : 255.255.0.0
  Standardgateway . . . . . . . . . :
  DHCPv6-IAID . . . . . . . . . . . : 436731943
  DHCPv6-Client-DUID. . . . . . . . : 00-01-00-18-1B-04-F2-BE-02-80-37-EC-02-00
  DNS-Server  . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                      fec0:0:0:ffff::2%1
                                      fec0:0:0:ffff::3%1
  NetBIOS ber TCP/IP . . . . . . . : Aktiviert

Tunneladapter isatap.{6176B24B-6133-41F3-8E9A-1856D5A0CB37}:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 4:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{5E441EED-7FCD-416F-B869-0131206F514A}:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #4
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja
Server:  UnKnown
Address:  fec0:0:0:ffff::1

Ping-Anforderung konnte Host "google.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.
Server:  UnKnown
Address:  fec0:0:0:ffff::1

Ping-Anforderung konnte Host "yahoo.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.

Ping wird ausgefhrt fr 127.0.0.1 mit 32 Bytes Daten:
Allgemeiner Fehler.
Allgemeiner Fehler.

Ping-Statistik fr 127.0.0.1:
    Pakete: Gesendet = 2, Empfangen = 0, Verloren = 2
    (100% Verlust),
===========================================================================
Schnittstellenliste
 22...08 00 27 1c 79 31 ......Intel(R) PRO/1000 MT-Desktopadapter
  1...........................Software Loopback Interface 1
 18...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter
 13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 17...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
    Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
        127.0.0.0        255.0.0.0  Auf Verbindung        127.0.0.1    306
        127.0.0.1  255.255.255.255  Auf Verbindung        127.0.0.1    306
  127.255.255.255  255.255.255.255  Auf Verbindung        127.0.0.1    306
      169.254.0.0      255.255.0.0  Auf Verbindung  169.254.110.222    266
  169.254.110.222  255.255.255.255  Auf Verbindung  169.254.110.222    266
  169.254.255.255  255.255.255.255  Auf Verbindung  169.254.110.222    266
        224.0.0.0        240.0.0.0  Auf Verbindung        127.0.0.1    306
        224.0.0.0        240.0.0.0  Auf Verbindung  169.254.110.222    266
  255.255.255.255  255.255.255.255  Auf Verbindung        127.0.0.1    306
  255.255.255.255  255.255.255.255  Auf Verbindung  169.254.110.222    266
===========================================================================
St„ndige Routen:
  Keine

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel            Gateway
  1    306 ::1/128                  Auf Verbindung
 22    266 fe80::/64                Auf Verbindung
 22    266 fe80::e585:c8d8:35cf:6ede/128
                                    Auf Verbindung
  1    306 ff00::/8                Auf Verbindung
 22    266 ff00::/8                Auf Verbindung
===========================================================================
St„ndige Routen:
  Keine
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/31/2014 01:43:27 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/31/2014 01:41:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mini_WMCore.exe, Version: 6.3.2.1, Zeitstempel: 0x4d26e69e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x888
Startzeit der fehlerhaften Anwendung: 0xmini_WMCore.exe0
Pfad der fehlerhaften Anwendung: mini_WMCore.exe1
Pfad des fehlerhaften Moduls: mini_WMCore.exe2
Berichtskennung: mini_WMCore.exe3

Error: (05/30/2014 07:23:49 AM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/28/2014 03:58:22 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/26/2014 08:50:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:46:47 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:46:45 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:06:11 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:03:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/31/2014 01:41:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0

Error: (05/31/2014 01:41:13 PM) (Source: DCOM) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (05/31/2014 01:40:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058

Error: (05/31/2014 01:40:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet:
%%-2147024891

Error: (05/31/2014 01:40:52 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueue[::]:5357

Error: (05/31/2014 01:40:30 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/31/2014 01:40:30 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/30/2014 07:27:19 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/30/2014 07:27:19 AM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (05/30/2014 07:19:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0


Microsoft Office Sessions:
=========================
Error: (05/31/2014 01:43:27 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/31/2014 01:41:02 PM) (Source: Application Error)(User: )
Description: mini_WMCore.exe6.3.2.14d26e69eunknown0.0.0.000000000c00000050000000088801cf7cc53112d478C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exeunknown70bcc5d3-e8b8-11e3-aa81-0800271c7931

Error: (05/30/2014 07:23:49 AM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/28/2014 03:58:22 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/26/2014 08:50:55 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\esetsmartinstaller_deu.exe

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:46:47 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:46:45 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/24/2014 06:06:11 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/24/2014 06:03:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 15:21:18.530
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 15:21:18.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


=========================== Installed Programs ============================

Adobe Flash Player 13 ActiveX (Version: 13.0.0.206)
Adobe Flash Player 13 Plugin (Version: 13.0.0.206)
Adobe Reader XI (11.0.06) - Deutsch (Version: 11.0.06)
ALPS Touch Pad Driver (Version: 7.106.303.203)
ArcSoft PhotoStudio 5.5
AuthenTec WinBio FingerPrint Software (Version: 3.2.3.1157)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Bejeweled 3 (Version: 2.2.0.97)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.06(T))
Canon Easy-PhotoPrint EX (Version: 4.1.6)
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (Version: 4.0.0)
Canon MG2200 series Benutzerregistrierung
Canon MG2200 series MP Drivers (Version: 1.00)
Canon MG2200 series On-screen Manual (Version: 7.5.0)
Canon My Image Garden (Version: 1.0.0)
Canon My Image Garden Design Files (Version: 1.0.0)
Canon My Printer (Version: 3.1.0)
Canon Quick Menu (Version: 2.0.0)
CanoScan Toolbox Ver4.9
Chicken Invaders 3 - Revenge of the Yolk (Version: 2.2.0.95)
Chuzzle Deluxe (Version: 2.2.0.95)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
FATE (Version: 2.2.0.97)
Final Drive: Nitro (Version: 2.2.0.95)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Google Chrome (Version: 34.0.1847.116)
Google Update Helper (Version: 1.3.23.9)
HappyFoto-Designer 4.5
Insaniquarium Deluxe (Version: 2.2.0.97)
Intel PROSet Wireless
Intel(R) Management Engine Components (Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 15.4)
Intel(R) Processor Graphics (Version: 8.15.10.2827)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000)
Intel(R) Rapid Storage Technology (Version: 10.1.2.1004)
Intel(R) Wireless Display
Intel(R) Wireless Display (Version: 2.0.29.0)
Java Auto Updater (Version: 2.0.2.1)
Java(TM) 6 Update 20 (Version: 6.0.200)
Junk Mail filter update (Version: 15.4.3502.0922)
Malwarebytes Anti-Malware Version 2.0.1.1004 (Version: 2.0.1.1004)
Manual CanoScan LiDE 25
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.30214.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 28.0 (x86 de) (Version: 28.0)
Mozilla Maintenance Service (Version: 28.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 10 Movie ThemePack Basic (Version: 10.6.10000.1.0)
Nero 12 Content Pack (Version: 12.0.00400)
Nero Abstract Themes (Version: 12.0.11500)
Nero BackItUp 10 (Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (Version: 10.6.10700)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nero Blu-ray Player (Version: 12.0.17700)
Nero BurnRights 10 (Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (Version: 10.6.10700)
Nero Cliparts (Version: 12.0.11500)
Nero Control Center 10 (Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (Version: 10.6.10800)
Nero Core Components 10 (Version: 2.0.20000.9.12)
Nero Disc Menus 1 (Version: 12.0.11500)
Nero Disc Menus 2 (Version: 12.0.11500)
Nero Disc Menus 3 (Version: 12.0.11500)
Nero Disc Menus Basic (Version: 12.0.11500)
Nero Effects Basic (Version: 12.0.11500)
Nero Express 10 (Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (Version: 10.6.10700)
Nero Family and Events Themes (Version: 12.0.11500)
Nero Football (Soccer) Themes (Version: 12.0.11500)
Nero Holiday and Sports Themes (Version: 12.0.11500)
Nero Image Samples (Version: 12.0.11500)
Nero InfoTool 10 (Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (Version: 10.6.10700)
Nero Kwik Media (Version: 1.18.18900)
Nero Kwik Media Help (CHM) (Version: 12.0.4000)
Nero Kwik Themes Basic (Version: 12.0.11500)
Nero Multimedia Suite 10 Essentials (Version: 10.6.10300)
Nero PiP Effects 1 (Version: 12.0.11500)
Nero PiP Effects Basic (Version: 12.0.11500)
Nero Platinum Effects 12 (Version: 12.0.11500)
Nero RescueAgent 10 (Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (Version: 10.6.10800)
Nero Retro Film Themes (Version: 12.0.11500)
Nero StartSmart 10 (Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (Version: 10.6.10700)
Nero Update (Version: 11.0.11800.31.0)
Nero Video Samples (Version: 12.0.11500)
Nero Video Transitions 1 (Version: 12.0.11500)
Norton AntiVirus (Version: 21.0.1.3)
O2Micro OZ776 SCR Driver (Version: 2.1.4.207G)
Oracle VM VirtualBox Guest Additions 4.3.6 (Version: 4.3.6.0)
Penguins! (Version: 2.2.0.95)
PL-2303 USB-to-Serial (Version: 1.3.0)
Plants vs. Zombies - Game of the Year (Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (Version: 2.2.0.97)
PowerDVD
Prerequisite installer (Version: 12.0.0002)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (Version: 6.0.1.6293)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.1)
Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)
RICOH Media Driver v2.14.17.02 (Version: 2.14.17.02)
ScanSoft OmniPage SE 4.0 (Version: 15.00.0020)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype™ 6.14 (Version: 6.14.104)
Slingo Deluxe (Version: 2.2.0.95)
Smiley Sync (Version: 6.0.1)
TOSHIBA Assist (Version: 4.02.02)
TOSHIBA Bulletin Board (Version: 2.1.10.64)
TOSHIBA ConfigFree (Version: 8.0.38)
TOSHIBA Disc Creator (Version: 2.1.0.9 for x64)
TOSHIBA eco Utility (Version: 1.3.2.64)
TOSHIBA Face Recognition (Version: 3.1.8.64)
TOSHIBA Fingerprint Utility (Version: 2.0.0.6409)
TOSHIBA HDD Protection (Version: 2.2.1.13)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.8)
Toshiba Manuals (Version: 10.02)
TOSHIBA Media Controller (Version: 1.0.86.2)
TOSHIBA Media Controller Plug-in (Version: 1.0.6.1)
TOSHIBA Mobile Broadband Device (Version: 6.3.2.2)
TOSHIBA Online Product Information (Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.7.64)
TOSHIBA Places Icon Utility (Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (Version: 2.1.3.5109)
TOSHIBA Recovery Media Creator Reminder (Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.18.64)
TOSHIBA Security Assist (Version: 2.0.9)
TOSHIBA Service Station (Version: 2.1.52)
TOSHIBA Sleep Utility (Version: 1.4.2.7)
TOSHIBA Sync Utility (Version: 2.0.3060)
TOSHIBA Value Added Package (Version: 1.5.10.64)
TOSHIBA Web Camera Application (Version: 1.1.7.1)
TOSHIBA Wireless Display Monitor (Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (Version: 1.0.4)
TOSHIBA Wireless Manager (Version: 6.3.2.1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update Installer for WildTangent Games App
VLC media player 2.0.7 (Version: 2.0.7)
Wedding Dash 2 - Rings Around the World (Version: 2.2.0.95)
WildTangent Games (Version: 1.0.2.5)
WildTangent Games App (Toshiba Games) (Version: 4.0.5.5)
Windows Live (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Wissen für Kinder - Der Körper
Zuma Deluxe (Version: 2.2.0.95)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 39%
Total physical RAM: 2047.55 MB
Available physical RAM: 1247.62 MB
Total Pagefile: 4095.11 MB
Available Pagefile: 3007.41 MB
Total Virtual: 4095.88 MB
Available Virtual: 3985.52 MB

========================= Partitions: =====================================

1 Drive c: (TI30810600A) (Fixed) (Total:281.99 GB) (Free:167.39 GB) NTFS
2 Drive d: (VBOXADDITIONS_4.) (CDROM) (Total:0.06 GB) (Free:0 GB) CDFS

========================= Users: ========================================

Benutzerkonten fr \\SUSANNS-TOSHIBA

Administrator            Gast                    Susann                 
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

18-05-2014 08:37:31 Gerätetreiber-Paketinstallation: Oracle Corporation Systemgeräte
18-05-2014 08:41:52 Gerätetreiber-Paketinstallation: Oracle Corporation Grafikkarte
24-05-2014 16:21:54 Tweaking.com - Windows Repair

**** End of log ****
Und noch ein IP Config /all

Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>ipconfig /all

Windows-IP-Konfiguration

  Hostname  . . . . . . . . . . . . : Susanns-TOSHIBA
  Primäres DNS-Suffix . . . . . . . :
  Knotentyp . . . . . . . . . . . . : Hybrid
  IP-Routing aktiviert  . . . . . . : Nein
  WINS-Proxy aktiviert  . . . . . . : Nein

Ethernet-Adapter LAN-Verbindung 2:

  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Intel(R) PRO/1000 MT-Desktopadapter
  Physikalische Adresse . . . . . . : 08-00-27-1C-79-31
  DHCP aktiviert. . . . . . . . . . : Ja
  Autokonfiguration aktiviert . . . : Ja
  Verbindungslokale IPv6-Adresse  . : fe80::e585:c8d8:35cf:6ede%22(Bevorzugt)
  IPv4-Adresse (Auto. Konfiguration): 169.254.110.222(Bevorzugt)
  Subnetzmaske  . . . . . . . . . . : 255.255.0.0
  Standardgateway . . . . . . . . . :
  DHCPv6-IAID . . . . . . . . . . . : 436731943
  DHCPv6-Client-DUID. . . . . . . . : 00-01-00-18-1B-04-F2-BE-02-80-37-EC-02-00

  DNS-Server  . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                      fec0:0:0:ffff::2%1
                                      fec0:0:0:ffff::3%1
  NetBIOS über TCP/IP . . . . . . . : Aktiviert

Tunneladapter isatap.{6176B24B-6133-41F3-8E9A-1856D5A0CB37}:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 4:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{5E441EED-7FCD-416F-B869-0131206F514A}:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #4
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

C:\Windows\system32>
Wie man sieht bekommt er keine IP vom DHCP (müsste irgendwas wie 192.168.0.x sein). Auch wenn ich statisch eine Eintrage ändert sich nichts an der Kommunikation.

schrauber 01.06.2014 14:02
ah, jetzt steht auch endlich was im log von Minitoolbox.

CMD KOnsole mit Adminrechten starten, das eingeben:

netsh int ip reset c:\resetlog.txt

Inhalt von resetlog.txt posten.

suppenhuhn12 01.06.2014 21:11
Mahlzeit!

Der erste Versuch hat aufgrund des fehlenden > in der CMD ausgegeben:

Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>netsh int ip reset c:\resetlog.txt
Schnittstelle wird zurückgesetzt, OK!
Starten Sie den Computer neu, um die Aktion abzuschließen.


C:\Windows\system32>netsh int ip reset > c:\resetlog.txt

C:\Windows\system32>
der zweite hat folgendes ausgegeben:

Code:
Es sind keine vom Benutzer festgelegten Einstellungen zum Zurcksetzen vorhanden.
Code:
MiniToolBox by Farbar  Version: 23-01-2014
Ran by Susann (administrator) on 01-06-2014 at 22:26:03
Running from "C:\Users\Susann\Desktop"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================




127.0.0.1      localhost

========================= IP Configuration: ================================

Intel(R) PRO/1000 MT-Desktopadapter = LAN-Verbindung 2 (Connected)


# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4

reset


popd
# Ende der IPv4-Konfiguration



Windows-IP-Konfiguration

  Hostname  . . . . . . . . . . . . : Susanns-TOSHIBA
  Prim„res DNS-Suffix . . . . . . . :
  Knotentyp . . . . . . . . . . . . : Hybrid
  IP-Routing aktiviert  . . . . . . : Nein
  WINS-Proxy aktiviert  . . . . . . : Nein

Ethernet-Adapter LAN-Verbindung 2:

  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Intel(R) PRO/1000 MT-Desktopadapter
  Physikalische Adresse . . . . . . : 08-00-27-1C-79-31
  DHCP aktiviert. . . . . . . . . . : Ja
  Autokonfiguration aktiviert . . . : Ja
  Verbindungslokale IPv6-Adresse  . : fe80::e585:c8d8:35cf:6ede%22(Bevorzugt)
  IPv4-Adresse (Auto. Konfiguration): 169.254.110.222(Bevorzugt)
  Subnetzmaske  . . . . . . . . . . : 255.255.0.0
  Standardgateway . . . . . . . . . :
  DHCPv6-IAID . . . . . . . . . . . : 436731943
  DHCPv6-Client-DUID. . . . . . . . : 00-01-00-18-1B-04-F2-BE-02-80-37-EC-02-00
  DNS-Server  . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                      fec0:0:0:ffff::2%1
                                      fec0:0:0:ffff::3%1
  NetBIOS ber TCP/IP . . . . . . . : Aktiviert

Tunneladapter isatap.{6176B24B-6133-41F3-8E9A-1856D5A0CB37}:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 4:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{5E441EED-7FCD-416F-B869-0131206F514A}:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #4
  Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja
Server:  UnKnown
Address:  fec0:0:0:ffff::1

Ping-Anforderung konnte Host "google.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.
Server:  UnKnown
Address:  fec0:0:0:ffff::1

Ping-Anforderung konnte Host "yahoo.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.

Ping wird ausgefhrt fr 127.0.0.1 mit 32 Bytes Daten:
Allgemeiner Fehler.
Allgemeiner Fehler.

Ping-Statistik fr 127.0.0.1:
    Pakete: Gesendet = 2, Empfangen = 0, Verloren = 2
    (100% Verlust),
===========================================================================
Schnittstellenliste
 22...08 00 27 1c 79 31 ......Intel(R) PRO/1000 MT-Desktopadapter
  1...........................Software Loopback Interface 1
 18...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter
 13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 17...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
    Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
        127.0.0.0        255.0.0.0  Auf Verbindung        127.0.0.1    306
        127.0.0.1  255.255.255.255  Auf Verbindung        127.0.0.1    306
  127.255.255.255  255.255.255.255  Auf Verbindung        127.0.0.1    306
      169.254.0.0      255.255.0.0  Auf Verbindung  169.254.110.222    266
  169.254.110.222  255.255.255.255  Auf Verbindung  169.254.110.222    266
  169.254.255.255  255.255.255.255  Auf Verbindung  169.254.110.222    266
        224.0.0.0        240.0.0.0  Auf Verbindung        127.0.0.1    306
        224.0.0.0        240.0.0.0  Auf Verbindung  169.254.110.222    266
  255.255.255.255  255.255.255.255  Auf Verbindung        127.0.0.1    306
  255.255.255.255  255.255.255.255  Auf Verbindung  169.254.110.222    266
===========================================================================
St„ndige Routen:
  Keine

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel            Gateway
  1    306 ::1/128                  Auf Verbindung
 22    266 fe80::/64                Auf Verbindung
 22    266 fe80::e585:c8d8:35cf:6ede/128
                                    Auf Verbindung
  1    306 ff00::/8                Auf Verbindung
 22    266 ff00::/8                Auf Verbindung
===========================================================================
St„ndige Routen:
  Keine
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (06/01/2014 10:22:53 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (06/01/2014 10:15:53 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mini_WMCore.exe, Version: 6.3.2.1, Zeitstempel: 0x4d26e69e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xb7c
Startzeit der fehlerhaften Anwendung: 0xmini_WMCore.exe0
Pfad der fehlerhaften Anwendung: mini_WMCore.exe1
Pfad des fehlerhaften Moduls: mini_WMCore.exe2
Berichtskennung: mini_WMCore.exe3

Error: (06/01/2014 10:08:27 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (06/01/2014 10:03:08 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mini_WMCore.exe, Version: 6.3.2.1, Zeitstempel: 0x4d26e69e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x860
Startzeit der fehlerhaften Anwendung: 0xmini_WMCore.exe0
Pfad der fehlerhaften Anwendung: mini_WMCore.exe1
Pfad des fehlerhaften Moduls: mini_WMCore.exe2
Berichtskennung: mini_WMCore.exe3

Error: (05/31/2014 01:43:27 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/31/2014 01:41:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mini_WMCore.exe, Version: 6.3.2.1, Zeitstempel: 0x4d26e69e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x888
Startzeit der fehlerhaften Anwendung: 0xmini_WMCore.exe0
Pfad der fehlerhaften Anwendung: mini_WMCore.exe1
Pfad des fehlerhaften Moduls: mini_WMCore.exe2
Berichtskennung: mini_WMCore.exe3

Error: (05/30/2014 07:23:49 AM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/28/2014 03:58:22 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/26/2014 08:50:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station) (User: )
Description: TSS Load: could not communicate with TMachInfo service


System errors:
=============
Error: (06/01/2014 10:16:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0

Error: (06/01/2014 10:16:17 PM) (Source: DCOM) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (06/01/2014 10:15:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058

Error: (06/01/2014 10:15:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet:
%%-2147024891

Error: (06/01/2014 10:15:17 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueue[::]:5357

Error: (06/01/2014 10:14:27 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (06/01/2014 10:14:27 PM) (Source: NetBT) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (06/01/2014 10:03:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" ist vom Dienst "SSDP-Suche" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%0

Error: (06/01/2014 10:03:20 PM) (Source: DCOM) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (06/01/2014 10:02:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "risdxc" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1058


Microsoft Office Sessions:
=========================
Error: (06/01/2014 10:22:53 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (06/01/2014 10:15:53 PM) (Source: Application Error)(User: )
Description: mini_WMCore.exe6.3.2.14d26e69eunknown0.0.0.000000000c000000500000000b7c01cf7dd63f02000cC:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exeunknown875aa0ef-e9c9-11e3-9ee2-0800271c7931

Error: (06/01/2014 10:08:27 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (06/01/2014 10:03:08 PM) (Source: Application Error)(User: )
Description: mini_WMCore.exe6.3.2.14d26e69eunknown0.0.0.000000000c00000050000000086001cf7dd476f23fc2C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exeunknownbf69fda4-e9c7-11e3-80c1-0800271c7931

Error: (05/31/2014 01:43:27 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/31/2014 01:41:02 PM) (Source: Application Error)(User: )
Description: mini_WMCore.exe6.3.2.14d26e69eunknown0.0.0.000000000c00000050000000088801cf7cc53112d478C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exeunknown70bcc5d3-e8b8-11e3-aa81-0800271c7931

Error: (05/30/2014 07:23:49 AM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/28/2014 03:58:22 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service

Error: (05/26/2014 08:50:55 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\esetsmartinstaller_deu.exe

Error: (05/24/2014 06:49:15 PM) (Source: TOSHIBA Service Station)(User: )
Description: TSS Load: could not communicate with TMachInfo service


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 15:21:18.530
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 15:21:18.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


=========================== Installed Programs ============================

Adobe Flash Player 13 ActiveX (Version: 13.0.0.206)
Adobe Flash Player 13 Plugin (Version: 13.0.0.206)
Adobe Reader XI (11.0.06) - Deutsch (Version: 11.0.06)
ALPS Touch Pad Driver (Version: 7.106.303.203)
ArcSoft PhotoStudio 5.5
AuthenTec WinBio FingerPrint Software (Version: 3.2.3.1157)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Bejeweled 3 (Version: 2.2.0.97)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.06(T))
Canon Easy-PhotoPrint EX (Version: 4.1.6)
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (Version: 4.0.0)
Canon MG2200 series Benutzerregistrierung
Canon MG2200 series MP Drivers (Version: 1.00)
Canon MG2200 series On-screen Manual (Version: 7.5.0)
Canon My Image Garden (Version: 1.0.0)
Canon My Image Garden Design Files (Version: 1.0.0)
Canon My Printer (Version: 3.1.0)
Canon Quick Menu (Version: 2.0.0)
CanoScan Toolbox Ver4.9
Chicken Invaders 3 - Revenge of the Yolk (Version: 2.2.0.95)
Chuzzle Deluxe (Version: 2.2.0.95)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
FATE (Version: 2.2.0.97)
Final Drive: Nitro (Version: 2.2.0.95)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Google Chrome (Version: 34.0.1847.116)
Google Update Helper (Version: 1.3.23.9)
HappyFoto-Designer 4.5
Insaniquarium Deluxe (Version: 2.2.0.97)
Intel PROSet Wireless
Intel(R) Management Engine Components (Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 15.4)
Intel(R) Processor Graphics (Version: 8.15.10.2827)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000)
Intel(R) Rapid Storage Technology (Version: 10.1.2.1004)
Intel(R) Wireless Display
Intel(R) Wireless Display (Version: 2.0.29.0)
Java Auto Updater (Version: 2.0.2.1)
Java(TM) 6 Update 20 (Version: 6.0.200)
Junk Mail filter update (Version: 15.4.3502.0922)
Malwarebytes Anti-Malware Version 2.0.1.1004 (Version: 2.0.1.1004)
Manual CanoScan LiDE 25
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.30214.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 28.0 (x86 de) (Version: 28.0)
Mozilla Maintenance Service (Version: 28.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 10 Movie ThemePack Basic (Version: 10.6.10000.1.0)
Nero 12 Content Pack (Version: 12.0.00400)
Nero Abstract Themes (Version: 12.0.11500)
Nero BackItUp 10 (Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (Version: 10.6.10700)
Nero Backup Drivers (Version: 1.0.11100.8.0)
Nero Blu-ray Player (Version: 12.0.17700)
Nero BurnRights 10 (Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (Version: 10.6.10700)
Nero Cliparts (Version: 12.0.11500)
Nero Control Center 10 (Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (Version: 10.6.10800)
Nero Core Components 10 (Version: 2.0.20000.9.12)
Nero Disc Menus 1 (Version: 12.0.11500)
Nero Disc Menus 2 (Version: 12.0.11500)
Nero Disc Menus 3 (Version: 12.0.11500)
Nero Disc Menus Basic (Version: 12.0.11500)
Nero Effects Basic (Version: 12.0.11500)
Nero Express 10 (Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (Version: 10.6.10700)
Nero Family and Events Themes (Version: 12.0.11500)
Nero Football (Soccer) Themes (Version: 12.0.11500)
Nero Holiday and Sports Themes (Version: 12.0.11500)
Nero Image Samples (Version: 12.0.11500)
Nero InfoTool 10 (Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (Version: 10.6.10700)
Nero Kwik Media (Version: 1.18.18900)
Nero Kwik Media Help (CHM) (Version: 12.0.4000)
Nero Kwik Themes Basic (Version: 12.0.11500)
Nero Multimedia Suite 10 Essentials (Version: 10.6.10300)
Nero PiP Effects 1 (Version: 12.0.11500)
Nero PiP Effects Basic (Version: 12.0.11500)
Nero Platinum Effects 12 (Version: 12.0.11500)
Nero RescueAgent 10 (Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (Version: 10.6.10800)
Nero Retro Film Themes (Version: 12.0.11500)
Nero StartSmart 10 (Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (Version: 10.6.10700)
Nero Update (Version: 11.0.11800.31.0)
Nero Video Samples (Version: 12.0.11500)
Nero Video Transitions 1 (Version: 12.0.11500)
Norton AntiVirus (Version: 21.0.1.3)
O2Micro OZ776 SCR Driver (Version: 2.1.4.207G)
Oracle VM VirtualBox Guest Additions 4.3.6 (Version: 4.3.6.0)
Penguins! (Version: 2.2.0.95)
PL-2303 USB-to-Serial (Version: 1.3.0)
Plants vs. Zombies - Game of the Year (Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (Version: 2.2.0.97)
PowerDVD
Prerequisite installer (Version: 12.0.0002)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (Version: 6.0.1.6293)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.1)
Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)
RICOH Media Driver v2.14.17.02 (Version: 2.14.17.02)
ScanSoft OmniPage SE 4.0 (Version: 15.00.0020)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype™ 6.14 (Version: 6.14.104)
Slingo Deluxe (Version: 2.2.0.95)
Smiley Sync (Version: 6.0.1)
TOSHIBA Assist (Version: 4.02.02)
TOSHIBA Bulletin Board (Version: 2.1.10.64)
TOSHIBA ConfigFree (Version: 8.0.38)
TOSHIBA Disc Creator (Version: 2.1.0.9 for x64)
TOSHIBA eco Utility (Version: 1.3.2.64)
TOSHIBA Face Recognition (Version: 3.1.8.64)
TOSHIBA Fingerprint Utility (Version: 2.0.0.6409)
TOSHIBA HDD Protection (Version: 2.2.1.13)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.8)
Toshiba Manuals (Version: 10.02)
TOSHIBA Media Controller (Version: 1.0.86.2)
TOSHIBA Media Controller Plug-in (Version: 1.0.6.1)
TOSHIBA Mobile Broadband Device (Version: 6.3.2.2)
TOSHIBA Online Product Information (Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.7.64)
TOSHIBA Places Icon Utility (Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (Version: 2.1.3.5109)
TOSHIBA Recovery Media Creator Reminder (Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.18.64)
TOSHIBA Security Assist (Version: 2.0.9)
TOSHIBA Service Station (Version: 2.1.52)
TOSHIBA Sleep Utility (Version: 1.4.2.7)
TOSHIBA Sync Utility (Version: 2.0.3060)
TOSHIBA Value Added Package (Version: 1.5.10.64)
TOSHIBA Web Camera Application (Version: 1.1.7.1)
TOSHIBA Wireless Display Monitor (Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (Version: 1.0.4)
TOSHIBA Wireless Manager (Version: 6.3.2.1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update Installer for WildTangent Games App
VLC media player 2.0.7 (Version: 2.0.7)
Wedding Dash 2 - Rings Around the World (Version: 2.2.0.95)
WildTangent Games (Version: 1.0.2.5)
WildTangent Games App (Toshiba Games) (Version: 4.0.5.5)
Windows Live (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Wissen für Kinder - Der Körper
Zuma Deluxe (Version: 2.2.0.95)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 44%
Total physical RAM: 2047.55 MB
Available physical RAM: 1146.39 MB
Total Pagefile: 4095.11 MB
Available Pagefile: 2995.4 MB
Total Virtual: 4095.88 MB
Available Virtual: 3976.66 MB

========================= Partitions: =====================================

1 Drive c: (TI30810600A) (Fixed) (Total:281.99 GB) (Free:167.42 GB) NTFS
2 Drive d: (VBOXADDITIONS_4.) (CDROM) (Total:0.06 GB) (Free:0 GB) CDFS

========================= Users: ========================================

Benutzerkonten fr \\SUSANNS-TOSHIBA

Administrator            Gast                    Susann                 
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

18-05-2014 08:37:31 Gerätetreiber-Paketinstallation: Oracle Corporation Systemgeräte
18-05-2014 08:41:52 Gerätetreiber-Paketinstallation: Oracle Corporation Grafikkarte
24-05-2014 16:21:54 Tweaking.com - Windows Repair

**** End of log ****

schrauber 02.06.2014 18:51
Weit hergeholt, aber:

Zitat:
IPv4-Adresse (Auto. Konfiguration): 169.254.110.222(Bevorzugt)
Das ist eine APIPA Adresse, keine lokale von deinem Router, die normal mit 192.168. anfängt.

Anderes LAN Kabel, anderer LAN Port am Router testen.

suppenhuhn12 03.06.2014 06:17
Mahlzeit!

Es ist eine VM! Da gibt's kein Kabel! Jede andere VM mit gleichen Einstellungen bekommt eine IP. Das Notebook (also Normalmaschine) bekommt weder über LAN noch WLAN eine IP.

Auch eine statische IP hilft nichts - das ist mein Problem das bereits im ersten Post beschrieben ist!

mfg

schrauber 03.06.2014 19:43
Ok bringt nix, wir reden aneinander vorbei. ich hab jetzt zwanzig mal gesagt du sollst nicht von der vm scannen, die vm's intressieren mich nen müll.

Zitat:
Das Notebook (also Normalmaschine) bekommt weder über LAN noch WLAN eine IP.
Dann können auch die VMs kein Netzwerk haben wenn der Host nix hat!
JEtzt scheiss auf die VMs und mach die Scans so wie ich sage vom HOST aus. Is das so schwer?

Und wenn das Minitoolbox log dass Du zuletzt gepostet hast vom HOST ist hat der HOST eine APIPA Adresse, deswegen:

Zitat:
Anderes LAN Kabel, anderer LAN Port am Router testen.
Wenn WLAN auch nit geht anderen Router anklemmen und testen, WLAN Stick testen, wobei es unmöglich sit dass beide Netzwerkkarten im HOST defekt sind. Also Router tauschen.

suppenhuhn12 04.06.2014 08:59
Mahlzeit!

Offensichtlich haben Sie nicht die Zeit meine Beiträge wirklich zu lesen:

a) es gibt eine Originalmaschine (Toshiba Notebook) auf der dieses Problem entstanden ist. Von dieser Maschine wurde ein Image gezogen dass nun in der VM läuft um auszuprobieren während das Notebook wo anders im Einsatz ist.

b) die VM Maschine läuft am HOST und alles was hier gepostet wird ist aus der VM und entspricht damit dem Toshiba Notebook

c) der Host ist der Rechner von dem ich arbeite auf den die VM mit der Toshiba Installation zum testen läuft.

Dem Host geht es gut. Der VMware geht es gut. Die Toshiba Installation hat das Netzwerkproblem von dem ich seit dem ersten Post rede. Alle logs sind von der.

Die Frage: haben Sie eine Idee weshalb das Netzwerk (wobei ich bislang nur IPv4 getestet habe da ich kein anderes Protokoll verwende also könnte es auch ein TCPIP Problem sein) nicht funktioniert?

schrauber 05.06.2014 09:06
nö, so langsam keine Idee mehr. Aber das Image in der Vm ist nicht 100% sauber, da du einen anderen fiktiven Adapter nutzt als den, der auf dem echten Rechner läuft. Wenn da weiter gescannt werden soll muss das auf dem echten Rechner geschehen.

suppenhuhn12 06.06.2014 06:22
Mahlzeit!

Das verstehe ich nicht. Das Problem ist ja nicht Netzwerkadapterabhängig, sondern tritt immer auf. Wieso kann man den Fehler nicht in der VM behandeln?

Gibt es jemanden der noch eine Idee haben könnte?

Mfg ds

schrauber 07.06.2014 05:42
Zitat:
Das Problem ist ja nicht Netzwerkadapterabhängig
damit ist nicht nur die Hardware gemeint. ;)

Die Hardware kannste ausschliessen, da du in der VM per NAT oder BRücke den Adapter des Hosts benutzt.

Das Einzige was mir als Test noch einfällt, wenn wir es nicht schon gemacht haben:

http://www.trojaner-board.de/126216-...epair-aio.html

suppenhuhn12 07.06.2014 08:06
Mahlzeit!

Dann direkt die Frage: gibt es im Board jemanden der sich mit Windows wirklich auskennt oder läuft alles über fertige Tools?`

mfg

schrauber 08.06.2014 09:11
teils teils, es läuft über Tools die extra dafür gebaut wurden, die spezielle Bereiche scannen, ebenso kannste mit diesen Tools "von Hand" spezielle Bereiche scannen, was wir auch gemacht haben.

Hier in diesem Thema werde nur ich antworten. Also wenn musste im Diskussionsbereich nen Thema eröffnen. Ich persönlich hätte ja schon lange ein Inplace Upgrade gemacht.

suppenhuhn12 08.06.2014 12:23
Lieber schrauber!

Das InPlace Upgrade habe ich schon versucht bevor ich hier überhaupt zu schreiben begonnen haben - das steht auch in meinem ersten Post....

mfg

schrauber 09.06.2014 06:36
sory dass ich mich bei 400 Usern am Tag verteilt auf 2 Sprachen und 40 Boards nicht mehr an jeden Post erinnern kann. Tut mir echt traurig.

was ich jetzt auf Anhieb nicht gefunden habe in deinem ersten Post:

Gerätemanager gecheckt?
Treiber der Netzwerkkarte deinstalliert und rebootet?
TCPIPv4 Protokoll deinstalliert und rebootet?
Windows FW aus?
Schutzsoftware komplett aus?

Windows Vista kann eine IP-Adresse von bestimmten Routern oder DHCP-Servern nicht abrufen
Is zwar für Vista, aber schaden tut es nicht.

ISATA und Tunneladapter deinstallierne.

suppenhuhn12 09.06.2014 10:51
Mahlzeit!

Ja, wurde alles versucht. DHCP ist nicht das Argument da die statische IP nichts am Fehlerbild verändert.

danke für die Hilfe

schrauber 09.06.2014 16:15
sorry, irgendwie ist das technisch unmöglich. Windows itself hat daran fast keine Aktien. Die paar WIndows Sachen werden durch das All in One Repair Tool oder das Inplace Upgrade gehandlet, mir fällt spontan kein Unterschied zwischen Inplace Upgrade und Neuaufsetzen ein, der in diesem Bereich spielt.

Das TCPIP Protokoll zieht auch erst viel später, da hapert es schon früher. Womit wir wieder bei der einzig technischen Möglichkeiten wären (neben Schutzsoftware)

NIC/MAC
Treiber der Netzwerkkarte
Chipsatztreiber

suppenhuhn12 09.06.2014 17:00
Mahlzeit!

Ich stimme zu. Ein Inplace Upgrade ersetzt alle Systemdateien. Allerdings übernimmt es Unmengen von Informationen aus der Registrierung. Tatsache ist, dass das Inplace Upgrade NIX bringt und das Problem weiter besteht, während die Neuinstallation (die ja derzeit als Übergangslösung am Notebook ist) sauber läuft mit Netzwerk.

Was solls - ich hab mal in Windows Probleme gepostet mit verweis hierhin - vielleicht hat noch wer eine Idee....

mfg ds

schrauber 09.06.2014 17:11
Zitat:
Ein Inplace Upgrade ersetzt alle Systemdateien
Falsch, dann könntest du auch einfach sfc laufen lassen.
Zitat:
Allerdings übernimmt es Unmengen von Informationen aus der Registrierung
auch falsch.
Zitat:
Tatsache ist, dass das Inplace Upgrade NIX bringt und das Problem weiter besteht, während die Neuinstallation (die ja derzeit als Übergangslösung am Notebook ist) sauber läuft mit Netzwerk.
dann weiß ich jetzt schon was die Antwort in dem anderen Thema sein wird. Installiere neu.

Keiner wird sich deine Registry als Export zuschicken lassen und Zeile für Zeile checken, wenn es einen annehmbaren Workaround gibt.

Mal abgesehen davon dass alle windows-seitigen Schlüssel und Dienste gecheckt sind.


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:11 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131