Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Adope Flash Virus/Malware (https://www.trojaner-board.de/165428-adope-flash-virus-malware.html)

richipfadi 23.03.2015 22:41
Adope Flash Virus/Malware
 
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo
habe seit dem ich einen Brother Drucker und dessen Programme installiert habe, bei fast allen Internetseiten und auf all meinen drei Rechnern ein Adobe Flash Update Virus/Maleware

Programme wie: Norten, Malwarebytes, CCleaner finden nichts!

Es wird immer schlimmer! Kann auf fast keine Seite zugreifen und evt andere AntiMaleware herunter laden!
Danke für Hilfen
lg
Reinhard

schrauber 23.03.2015 22:49
Hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


richipfadi 23.03.2015 22:51
Danke für die rasche Antwort!
kann aber die Datei nicht runter laden, da sobald sich die Page öffnet sich das Fenster darüber legt und mich blockiert!!!

schrauber 24.03.2015 10:46
Schliess das Fenster, nimm nen andern Browser, oder lade es von einem andern Rechner. Ohne die Logs kann ich nix machen.

richipfadi 24.03.2015 18:05
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Reini (administrator) on FIRMASTAND on 24-03-2015 18:03:44
Running from C:\Users\Reini\Desktop
Loaded Profiles: Reini (Available profiles: UpdatusUser & Reini & Administrator)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\Polar\Daemon\polard.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files (x86)\Polar\WebSync\WebSync.exe
(Dropbox, Inc.) C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\AutoCAD 2015\acad.exe
(Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
(Autodesk, Inc.) C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(Autodesk) C:\Program Files\Autodesk\AutoCAD 2015\AcWebBrowser\AcWebBrowser.exe
(Autodesk) C:\Program Files\Autodesk\AutoCAD 2015\AcWebBrowser\AcWebBrowser.exe
(Autodesk) C:\Program Files\Autodesk\AutoCAD 2015\AcWebBrowser\AcWebBrowser.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\ws.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794704 2015-03-11] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-08-16] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Acrobat Assistant 7.0] => C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2004-12-14] (Adobe Systems Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-11-26] (Autodesk Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3723728 2015-03-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TERRATEC\Remote\TTTvRc.exe [1842760 2012-03-22] (Elgato Systems)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2015-01-28] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [OneDrive] => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-12] (Microsoft Corporation)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat - Schnellstart.lnk
ShortcutTarget: Adobe Acrobat - Schnellstart.lnk -> C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Polar WebSync.lnk
ShortcutTarget: Polar WebSync.lnk -> C:\Program Files (x86)\Polar\WebSync\WebSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\USB 2.0 Switch.lnk
ShortcutTarget: USB 2.0 Switch.lnk -> C:\Program Files (x86)\USB-Switch\USwitch.exe ()
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.at/
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-05] (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Toolbar: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-15] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2015-03-24]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-01-07]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-19]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-11-26] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3416016 2015-03-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [309232 2015-03-06] (AVG Technologies CZ, s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [517464 2015-01-28] (Garmin Ltd or its subsidiaries)
R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-08-16] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\NIS.exe [276336 2015-03-07] (Symantec Corporation)
R3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2015-02-25] (AVG Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-03-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-03-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [280544 2015-02-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-02-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [289248 2015-02-20] (AVG Technologies CZ, s.r.o.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20150309.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1507000.00B\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2015-01-11] (Symantec Corporation)
S3 ErrDev; C:\Windows\System32\drivers\errdev.sys [10240 2013-08-22] (Microsoft Corporation) [File not signed]
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20150323.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-24] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150323.022\ENG64.SYS [129752 2015-03-20] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150323.022\EX64.SYS [2137304 2015-03-20] (Symantec Corporation)
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation                          )
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1507000.00B\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1507000.00B\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1507000.00B\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-07] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1507000.00B\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1507000.00B\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2015-01-13] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-03-21] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-24 17:59 - 2015-03-24 18:03 - 00000000 ____D () C:\FRST
2015-03-24 17:59 - 2015-03-24 14:54 - 02095616 _____ (Farbar) C:\Users\Reini\Desktop\FRST64.exe
2015-03-24 07:01 - 2015-03-24 07:01 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-03-24 00:27 - 2015-03-24 00:27 - 00002762 _____ () C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-03-23 23:29 - 2015-03-23 23:29 - 00002287 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2015-03-23 23:29 - 2015-03-23 23:29 - 00002275 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-03-23 23:29 - 2015-03-23 23:29 - 00002263 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
2015-03-23 23:29 - 2015-02-25 09:25 - 00041784 _____ (AVG Technologies) C:\WINDOWS\system32\TURegOpt.exe
2015-03-23 23:29 - 2015-02-25 09:24 - 00030520 _____ (AVG Technologies) C:\WINDOWS\system32\authuitu.dll
2015-03-23 23:29 - 2015-02-25 09:24 - 00025912 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\authuitu.dll
2015-03-23 23:27 - 2015-03-23 23:27 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\AVG
2015-03-23 23:21 - 2015-03-23 23:21 - 00000000 ____D () C:\Users\Reini\AppData\Local\Avg
2015-03-23 23:20 - 2015-03-23 23:29 - 00000000 ____D () C:\ProgramData\AVG
2015-03-23 23:18 - 2015-03-23 23:18 - 113398072 _____ (AVG Technologies) C:\Users\Reini\Downloads\avg_tuh_stf_all_2015_403_24c4.exe
2015-03-23 23:02 - 2015-03-23 23:02 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\AVG2015
2015-03-23 23:01 - 2015-03-23 23:02 - 00000000 ____D () C:\ProgramData\AVG2015
2015-03-23 23:01 - 2015-03-23 23:01 - 00001039 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-03-23 23:01 - 2015-03-23 23:01 - 00000000 ___HD () C:\$AVG
2015-03-23 23:01 - 2015-03-23 23:01 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\TuneUp Software
2015-03-23 23:01 - 2015-03-23 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-03-23 22:59 - 2015-03-23 23:24 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-03-23 22:57 - 2015-03-24 17:32 - 00000000 ____D () C:\ProgramData\MFAData
2015-03-23 22:57 - 2015-03-23 23:11 - 00000000 ____D () C:\Users\Reini\AppData\Local\Avg2015
2015-03-23 22:57 - 2015-03-23 22:57 - 04578024 _____ (AVG Technologies) C:\Users\Reini\Downloads\avg_avct_stb_all_2015_5315_ppc17.exe
2015-03-23 22:57 - 2015-03-23 22:57 - 00000000 ____D () C:\Users\Reini\AppData\Local\MFAData
2015-03-23 22:18 - 2015-03-23 22:18 - 00259584 _____ (OldTimer Tools) C:\Users\Reini\Desktop\OTH.scr
2015-03-23 18:05 - 2015-03-23 18:05 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2015-03-22 17:59 - 2015-03-22 17:59 - 00000155 _____ () C:\WINDOWS\SysWOW64\pp.log
2015-03-22 17:49 - 2015-03-22 17:50 - 00000000 ____D () C:\NPE
2015-03-22 17:41 - 2015-03-22 17:54 - 00000000 ____D () C:\Users\Reini\AppData\Local\NPE
2015-03-21 15:25 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-03-21 15:25 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-03-21 15:25 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-03-21 15:25 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-03-21 15:25 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-03-21 15:25 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-03-21 15:25 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-03-21 15:25 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-03-21 15:25 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-03-21 14:10 - 2015-03-24 17:30 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2B38278A-D2A7-48B0-B8AE-6045A9BF8E26}
2015-03-21 13:56 - 2015-03-21 13:56 - 00000000 __SHD () C:\Users\Reini\AppData\Local\EmieUserList
2015-03-21 13:56 - 2015-03-21 13:56 - 00000000 __SHD () C:\Users\Reini\AppData\Local\EmieSiteList
2015-03-21 13:56 - 2015-03-21 13:56 - 00000000 __SHD () C:\Users\Reini\AppData\Local\EmieBrowserModeList
2015-03-21 13:55 - 2015-03-24 17:27 - 00000000 ____D () C:\Users\Reini\OneDrive
2015-03-21 13:53 - 2015-03-21 13:53 - 00002119 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-03-21 13:53 - 2015-03-21 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-21 13:52 - 2015-03-21 13:52 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1097902264-1857806769-1598425798-1003
2015-03-21 13:52 - 2015-03-21 13:52 - 00000000 ____D () C:\Users\Reini\AppData\Local\NVIDIA
2015-03-21 13:49 - 2015-03-21 13:49 - 00001496 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-21 13:47 - 2015-03-21 13:47 - 00000020 ___SH () C:\Users\Reini\ntuser.ini
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-03-21 13:38 - 2015-03-21 13:38 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-03-21 13:17 - 2015-03-21 13:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-03-21 13:17 - 2015-03-21 13:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-03-21 13:16 - 2015-03-21 13:16 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-21 13:09 - 2015-03-21 13:09 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2015-03-21 13:08 - 2015-03-21 13:55 - 00000000 ____D () C:\Users\Reini
2015-03-21 13:08 - 2015-03-21 13:39 - 00041913 _____ () C:\WINDOWS\diagwrn.xml
2015-03-21 13:08 - 2015-03-21 13:39 - 00041913 _____ () C:\WINDOWS\diagerr.xml
2015-03-21 13:08 - 2015-03-21 13:31 - 00000000 ____D () C:\Users\Administrator
2015-03-21 13:08 - 2015-03-21 13:09 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 13:08 - 2015-03-21 13:09 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 13:08 - 2015-03-21 13:09 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Vorlagen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Startmenü
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Netzwerkumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Lokale Einstellungen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Eigene Dateien
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Druckumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Documents\Eigene Musik
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Documents\Eigene Bilder
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\AppData\Local\Verlauf
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\AppData\Local\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-21 12:59 - 2015-02-05 20:07 - 06861128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 03517584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 00935056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-03-21 12:59 - 2015-02-05 20:07 - 00062792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-03-21 12:59 - 2015-02-05 20:06 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-03-21 12:59 - 2015-02-05 18:57 - 00621384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-03-21 12:59 - 2015-02-05 13:50 - 04236870 _____ () C:\WINDOWS\system32\nvcoproc.bin
2015-03-21 12:58 - 2015-03-24 17:53 - 01126702 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-21 12:58 - 2015-03-21 13:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-21 12:58 - 2015-03-21 13:14 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-21 12:58 - 2015-03-21 12:59 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-03-21 12:58 - 2015-03-21 12:58 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-03-21 12:58 - 2015-03-21 12:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2015-03-21 12:58 - 2015-03-21 12:58 - 00000000 ____D () C:\Program Files\Realtek
2015-03-21 12:58 - 2015-03-11 10:10 - 00074056 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-03-21 12:58 - 2015-03-11 10:10 - 00060560 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-03-21 12:52 - 2015-03-21 13:50 - 00000000 ___DC () C:\WINDOWS\Panther
2015-03-21 12:50 - 2015-03-23 20:08 - 00000000 ____D () C:\Windows.old
2015-03-21 12:47 - 2015-03-23 23:15 - 00430110 _____ () C:\WINDOWS\system32\perfh00B.dat
2015-03-21 12:47 - 2015-03-23 23:15 - 00082632 _____ () C:\WINDOWS\system32\perfc00B.dat
2015-03-21 12:47 - 2015-03-21 12:47 - 00287002 _____ () C:\WINDOWS\system32\perfi00B.dat
2015-03-21 12:47 - 2015-03-21 12:47 - 00040770 _____ () C:\WINDOWS\system32\perfd00B.dat
2015-03-21 12:47 - 2015-03-21 12:47 - 00000000 ____D () C:\WINDOWS\SysWOW64\fi
2015-03-21 12:47 - 2015-03-21 12:47 - 00000000 ____D () C:\WINDOWS\system32\fi
2015-03-21 12:39 - 2015-03-21 12:39 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-03-21 12:39 - 2015-03-21 12:39 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-03-21 12:38 - 2015-03-21 12:38 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-03-21 12:38 - 2015-03-21 12:38 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-03-21 12:38 - 2015-03-21 12:38 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-03-21 12:37 - 2015-03-23 23:15 - 00796904 _____ () C:\WINDOWS\system32\perfh010.dat
2015-03-21 12:37 - 2015-03-23 23:15 - 00157264 _____ () C:\WINDOWS\system32\perfc010.dat
2015-03-21 12:37 - 2015-03-21 12:37 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00340806 _____ () C:\WINDOWS\system32\perfi010.dat
2015-03-21 12:37 - 2015-03-21 12:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00039784 _____ () C:\WINDOWS\system32\perfd010.dat
2015-03-21 12:37 - 2015-03-21 12:37 - 00000000 ____D () C:\WINDOWS\SysWOW64\it
2015-03-21 12:37 - 2015-03-21 12:37 - 00000000 ____D () C:\WINDOWS\system32\it
2015-03-21 12:29 - 2015-03-21 12:29 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-03-21 12:29 - 2015-03-21 12:29 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-03-21 12:29 - 2015-03-21 12:29 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-03-21 12:28 - 2015-03-21 12:28 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-03-21 12:28 - 2015-03-21 12:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-03-21 12:28 - 2015-03-21 12:28 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-03-21 12:27 - 2015-03-21 12:27 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-03-21 12:27 - 2015-03-21 12:27 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-03-21 12:27 - 2015-03-21 12:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-03-21 12:27 - 2015-03-21 12:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 01384712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 01123848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-03-21 12:26 - 2015-03-21 12:26 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-03-21 12:26 - 2015-03-21 12:26 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-03-21 12:26 - 2015-03-21 12:26 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-03-21 12:25 - 2015-03-21 12:25 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-03-21 12:25 - 2015-03-21 12:25 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-03-21 12:24 - 2015-03-23 23:15 - 00746306 _____ () C:\WINDOWS\system32\perfh00E.dat
2015-03-21 12:24 - 2015-03-23 23:15 - 00178832 _____ () C:\WINDOWS\system32\perfc00E.dat
2015-03-21 12:24 - 2015-03-21 12:24 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-03-21 12:24 - 2015-03-21 12:24 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-03-21 12:24 - 2015-03-21 12:24 - 00293832 _____ () C:\WINDOWS\system32\perfi00E.dat
2015-03-21 12:24 - 2015-03-21 12:24 - 00050224 _____ () C:\WINDOWS\system32\perfd00E.dat
2015-03-21 12:24 - 2015-03-21 12:24 - 00000000 ____D () C:\WINDOWS\SysWOW64\hu
2015-03-21 12:24 - 2015-03-21 12:24 - 00000000 ____D () C:\WINDOWS\system32\hu
2015-03-21 12:16 - 2015-03-21 12:16 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-03-21 12:16 - 2015-03-21 12:16 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-03-21 12:16 - 2015-03-21 12:16 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-03-21 12:16 - 2015-03-21 12:16 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-03-21 12:16 - 2015-03-21 12:16 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-03-21 12:16 - 2015-03-21 12:16 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-03-21 12:15 - 2015-03-21 12:15 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-03-21 12:14 - 2015-03-21 12:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2015-03-21 12:13 - 2015-03-21 13:19 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-03-21 12:13 - 2015-03-21 12:47 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2015-03-21 12:13 - 2015-03-21 12:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-03-21 12:13 - 2015-03-21 12:13 - 00000000 ____D () C:\Program Files\MSBuild
2015-03-21 12:13 - 2015-03-21 12:13 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-03-21 12:12 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-03-21 12:12 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-03-21 12:12 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-03-21 12:12 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-03-21 11:47 - 2015-03-21 13:39 - 00006578 _____ () C:\WINDOWS\comsetup.log
2015-03-21 10:43 - 2015-03-21 10:43 - 00000000 ____D () C:\Program Files\Reason
2015-03-21 09:43 - 2015-03-21 09:43 - 00000000 _____ () C:\Users\Reini\AppData\Local\{4D933EA0-9422-4AD6-8326-3F20F2C22F60}
2015-03-21 09:28 - 2015-03-21 09:28 - 00000000 ____D () C:\Users\Reini\AppData\Local\Apps\2.0
2015-03-21 09:25 - 2015-03-21 09:28 - 00263202 _____ () C:\WINDOWS\msxml4-KB2758694-enu.LOG
2015-03-16 07:32 - 2015-03-21 12:05 - 00570203 _____ () C:\WINDOWS\WindowsUpdate (1).log
2015-03-15 22:43 - 2015-03-15 22:43 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-03-15 22:43 - 2015-03-15 22:43 - 00000864 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-15 22:43 - 2015-03-15 22:43 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-15 21:52 - 2015-03-15 21:52 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\FLEXnet
2015-03-15 21:41 - 2015-03-15 21:41 - 00000000 ____D () C:\Program Files\Nuance
2015-03-15 21:39 - 2015-03-22 17:59 - 00000000 ____D () C:\ProgramData\ScanSoft
2015-03-15 21:39 - 2015-03-15 21:39 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Nuance
2015-03-15 21:38 - 2015-03-22 17:59 - 00000000 ____D () C:\ProgramData\Nuance
2015-03-15 21:38 - 2015-03-22 17:56 - 00000000 ____D () C:\Program Files (x86)\Nuance
2015-03-15 21:36 - 2015-03-15 21:36 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2015-03-15 14:10 - 2015-03-15 14:25 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-03-15 14:10 - 2015-03-15 14:10 - 10995632 _____ (SurfRight B.V.) C:\Users\Reini\Downloads\HitmanPro_x64.exe
2015-03-15 14:08 - 2015-03-21 09:25 - 00000000 ____D () C:\WINDOWS\CryptoGuard
2015-03-15 14:04 - 2015-03-15 14:04 - 01876816 _____ (SurfRight B.V.) C:\Users\Reini\Downloads\hmpalert_2-6-5-77.exe
2015-03-14 19:21 - 2015-03-24 17:27 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-03-14 19:21 - 2015-03-23 18:23 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-14 19:21 - 2015-03-21 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-14 19:21 - 2015-03-14 19:21 - 00001148 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-14 19:21 - 2015-03-14 19:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-14 19:21 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-03-14 19:21 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-03-14 19:21 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-03-14 19:14 - 2015-03-15 14:04 - 00000000 ____D () C:\AdwCleaner
2015-03-14 11:45 - 2015-03-14 11:48 - 788387105 _____ () C:\Users\Reini\Downloads\HIIT - 35 Minute Cycle Training Workout - Hill Training.mp4
2015-03-11 10:09 - 2015-03-11 10:09 - 32106640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 24768144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 18575880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 17253848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 16017040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 14119744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 13294528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 13208200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 10773704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 10713256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 10284872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-03-11 10:09 - 2015-03-11 10:09 - 03610768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 03247248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 01895240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434752.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434752.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 01540240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00995248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00969872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00943760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00929936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00908104 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00877816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00496272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00399504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00390472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00353224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00345744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00305136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00195728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-03-11 10:09 - 2015-03-11 10:09 - 00177624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00164752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00030536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00027441 _____ () C:\WINDOWS\system32\nvinfo.pb
2015-03-11 10:08 - 2015-03-11 10:08 - 25460880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-03-11 10:08 - 2015-03-11 10:08 - 20466496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-03-11 10:08 - 2015-03-11 10:08 - 03299512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-03-11 10:08 - 2015-03-11 10:08 - 02902784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-03-10 19:22 - 2015-03-10 19:22 - 00140317 _____ () C:\Users\Reini\Desktop\HL600_2_d.dwg
2015-03-10 18:40 - 2015-03-10 18:40 - 00480768 _____ () C:\Users\Reini\Downloads\FSG_Gehalt_2015a.xls
2015-03-10 18:34 - 2015-03-10 18:34 - 00527360 _____ () C:\Users\Reini\Downloads\Gehaltstabellen2014x.xls
2015-03-03 19:41 - 2015-03-03 19:41 - 00000642 _____ () C:\Users\Reini\Desktop\Scan - Verknüpfung.lnk
2015-03-03 19:35 - 2015-03-03 19:35 - 00000000 _____ () C:\Users\Reini\Sti_Trace.log
2015-03-03 19:19 - 2015-03-15 21:45 - 00000092 _____ () C:\WINDOWS\brpcfx.ini
2015-03-03 19:19 - 2015-03-15 21:45 - 00000024 _____ () C:\WINDOWS\Brpfx04a.ini
2015-03-03 19:18 - 2015-03-03 19:18 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx
2015-03-03 19:18 - 2015-03-03 19:18 - 00000000 ____D () C:\ProgramData\PCFaxTx
2015-03-03 19:18 - 2013-07-12 06:03 - 00251392 ____R (brother) C:\WINDOWS\system32\NSSRH64.dll
2015-03-03 19:18 - 2013-07-03 03:46 - 00065024 ____R (Brother Industries,Ltd) C:\WINDOWS\system32\Brnsplg.dll
2015-03-03 19:18 - 2013-03-08 07:45 - 00059904 ____R (Brother Industries,Ltd.) C:\WINDOWS\system32\BrWiaNCp.dll
2015-03-03 19:18 - 2013-03-08 07:44 - 00087040 ____R (Brother Industries, Ltd.) C:\WINDOWS\system32\BrNetSti.dll
2015-03-03 19:18 - 2012-12-12 11:37 - 00318464 _____ (Brother Industries, Ltd.) C:\WINDOWS\system32\BrFaxTxAppRun64.dll
2015-03-03 19:18 - 2005-04-22 05:36 - 00143360 ____R () C:\WINDOWS\system32\BrSNMP64.dll
2015-03-03 19:05 - 2015-03-21 11:22 - 00000000 ____D () C:\Program Files (x86)\Brother
2015-03-03 19:05 - 2015-03-03 19:05 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Brother
2015-03-03 19:00 - 2015-03-12 19:16 - 00026730 _____ () C:\WINDOWS\BRRBCOM.INI
2015-03-03 18:56 - 2009-07-14 06:21 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01009.dll
2015-03-03 18:56 - 2009-07-13 23:37 - 01002728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WinUSBCoInstaller2.dll
2015-03-03 18:54 - 2015-03-03 19:00 - 00000000 ____D () C:\ProgramData\Brother
2015-03-01 22:46 - 2015-03-21 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-03-01 22:46 - 2015-03-04 13:23 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Garmin
2015-03-01 22:46 - 2015-03-01 22:46 - 00003556 _____ () C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2015-03-01 22:46 - 2015-03-01 22:46 - 00001930 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2015-03-01 22:46 - 2015-03-01 22:46 - 00000000 ____D () C:\Users\Reini\AppData\Local\Garmin
2015-03-01 22:46 - 2015-03-01 22:46 - 00000000 ____D () C:\ProgramData\Garmin
2015-03-01 22:46 - 2015-03-01 22:46 - 00000000 ____D () C:\Program Files (x86)\Garmin
2015-02-28 20:40 - 2015-03-21 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bwin Poker
2015-02-24 16:46 - 2015-02-24 16:46 - 00280544 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys
2015-02-23 16:17 - 2015-02-23 16:17 - 00362995 _____ () C:\Users\Reini\Downloads\Neugebauer1.m4a

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-24 18:03 - 2012-12-08 12:42 - 00000000 ____D () C:\Outlook
2015-03-24 18:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-24 17:51 - 2014-08-06 11:01 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\gSyncit
2015-03-24 17:48 - 2014-10-12 20:34 - 00005142 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for FIRMASTAND-Reini FirmaStand
2015-03-24 17:48 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-03-24 17:30 - 2014-03-09 20:36 - 00000000 ____D () C:\Users\Reini\AppData\Local\CrashDumps
2015-03-24 17:28 - 2013-02-11 17:06 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Dropbox
2015-03-24 17:28 - 2012-12-10 10:06 - 00000000 ___RD () C:\Users\Reini\Dropbox
2015-03-24 07:44 - 2013-02-11 19:26 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1097902264-1857806769-1598425798-1003
2015-03-24 07:25 - 2015-01-07 17:07 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2015-03-24 07:01 - 2014-11-20 19:24 - 00012042 _____ () C:\WINDOWS\PFRO.log
2015-03-24 07:01 - 2013-08-22 15:46 - 00368657 _____ () C:\WINDOWS\setupact.log
2015-03-24 07:01 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-24 07:01 - 2012-09-11 13:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-24 01:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-03-24 00:16 - 2013-02-11 19:26 - 00000000 ____D () C:\Users\Reini\AppData\Local\Microsoft Help
2015-03-23 23:15 - 2014-11-21 04:35 - 04179478 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-23 23:15 - 2014-11-21 03:45 - 00768888 _____ () C:\WINDOWS\system32\perfh007.dat
2015-03-23 23:15 - 2014-11-21 03:45 - 00160706 _____ () C:\WINDOWS\system32\perfc007.dat
2015-03-23 23:10 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-03-23 23:07 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2015-03-23 18:00 - 2013-02-11 16:01 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2015-03-23 18:00 - 2013-02-11 16:00 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2015-03-23 17:59 - 2014-02-07 09:43 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2015-03-23 17:59 - 2013-02-11 16:01 - 00002563 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2015-03-23 17:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2015-03-23 17:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2015-03-23 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-23 17:24 - 2013-02-11 19:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-22 21:59 - 2013-02-11 22:43 - 00159976 _____ () C:\Users\Reini\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-22 18:02 - 2013-08-22 15:44 - 00568784 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-03-22 17:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2015-03-22 17:48 - 2015-02-04 09:23 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-03-22 17:42 - 2013-02-11 15:55 - 00000000 ____D () C:\ProgramData\Norton
2015-03-22 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-21 13:55 - 2014-10-08 13:12 - 00000000 ___RD () C:\Users\Reini\OneDrive.old
2015-03-21 13:54 - 2012-12-05 17:26 - 00000000 ____D () C:\Users\Reini\AppData\Local\Packages
2015-03-21 13:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-03-21 13:41 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-03-21 13:41 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2015-03-21 13:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-03-21 13:34 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-03-21 13:34 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-03-21 13:28 - 2012-09-10 11:57 - 04203592 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-03-21 13:19 - 2015-02-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2015-03-21 13:19 - 2015-01-07 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2015-03-21 13:19 - 2014-11-21 04:13 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-03-21 13:19 - 2014-11-10 20:38 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Schoener Fernsehen
2015-03-21 13:19 - 2014-10-27 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-03-21 13:19 - 2014-10-13 18:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap
2015-03-21 13:19 - 2014-10-13 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD Architecture 2015 - Deutsch (German)
2015-03-21 13:19 - 2014-10-08 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-21 13:19 - 2014-08-06 10:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gSyncit
2015-03-21 13:19 - 2014-08-06 09:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-03-21 13:19 - 2014-05-17 17:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auer Success
2015-03-21 13:19 - 2013-12-06 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB 2.0 Switch
2015-03-21 13:19 - 2013-11-18 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\fr
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\es
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\el
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\de
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\da
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\tr
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\sv
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\sl
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\pl
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\nl
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\it
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\hu
2015-03-21 13:19 - 2013-10-29 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GRAPHISOFT
2015-03-21 13:19 - 2013-10-14 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-21 13:19 - 2013-08-22 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-03-21 13:19 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-03-21 13:19 - 2013-06-19 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung SCX-4x16 Series
2015-03-21 13:19 - 2013-06-19 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-21 13:19 - 2013-03-17 12:12 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2015-03-21 13:19 - 2013-03-07 11:45 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Auer Success
2015-03-21 13:19 - 2013-03-06 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-03-21 13:19 - 2013-02-14 21:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2015-03-21 13:19 - 2013-02-11 19:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-03-21 13:19 - 2013-02-11 17:07 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-21 13:19 - 2013-02-11 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs
2015-03-21 13:19 - 2013-02-11 16:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
2015-03-21 13:19 - 2013-02-11 15:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer TERRATEC Edition
2015-03-21 13:19 - 2012-09-10 12:39 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeCinema
2015-03-21 13:19 - 2012-09-10 11:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-03-21 13:19 - 2012-07-26 10:43 - 00000000 ____D () C:\WINDOWS\en-GB
2015-03-21 13:17 - 2013-08-22 16:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
2015-03-21 13:17 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2015-03-21 13:16 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-03-21 13:16 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-03-21 13:16 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-03-21 13:16 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-03-21 13:16 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe
2015-03-21 13:16 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2015-03-21 13:16 - 2013-06-19 16:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2015-03-21 13:14 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-21 13:14 - 2013-03-27 09:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Polar
2015-03-21 13:14 - 2013-02-11 15:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TerraTec
2015-03-21 13:14 - 2012-09-10 12:43 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3
2015-03-21 13:14 - 2012-08-28 12:32 - 00000000 ____D () C:\ProgramData\PRICache
2015-03-21 13:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-03-21 13:09 - 2012-09-12 10:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Packages
2015-03-21 12:59 - 2012-12-10 16:05 - 00000000 ____D () C:\Temp
2015-03-21 12:52 - 2013-02-11 16:27 - 00000000 __SHD () C:\Recovery
2015-03-21 12:50 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2015-03-21 12:47 - 2014-11-21 04:13 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-21 12:47 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm
2015-03-21 12:47 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr
2015-03-21 12:47 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-03-21 12:47 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\winrm
2015-03-21 12:47 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\slmgr
2015-03-21 12:47 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Com
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\migwiz
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Com
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-21 12:47 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2015-03-21 12:47 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2015-03-21 12:47 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\servicing
2015-03-21 12:37 - 2013-08-22 16:36 - 00000000 ___SD () C:\WINDOWS\system32\dsc
2015-03-21 12:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 12:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 12:26 - 2013-08-22 16:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 12:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-03-21 11:19 - 2012-09-10 11:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-21 10:39 - 2013-02-11 17:06 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-21 10:27 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2015-03-21 10:03 - 2013-09-25 13:17 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-03-21 09:34 - 2013-02-11 17:06 - 00000000 ____D () C:\Users\Reini\AppData\Local\Google
2015-03-17 23:26 - 2013-03-14 14:19 - 00038233 _____ () C:\Users\Reini\Documents\plot.log
2015-03-15 22:50 - 2015-02-04 09:37 - 00000000 ____D () C:\Program Files\PDFCreator
2015-03-15 22:50 - 2014-02-03 13:41 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\TeamViewer
2015-03-15 21:38 - 2013-03-06 22:38 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-03-15 15:43 - 2013-02-11 15:55 - 00000000 ____D () C:\Program Files (x86)\DVBViewer TERRATEC Edition
2015-03-14 14:40 - 2014-10-08 13:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-12 21:12 - 2014-10-08 13:12 - 00002289 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-03-11 18:48 - 2013-09-25 13:16 - 122905856 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-03-11 11:33 - 2013-02-11 17:10 - 00001025 _____ () C:\Users\Reini\Desktop\Dropbox.lnk
2015-03-04 22:24 - 2014-11-21 12:01 - 00792032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-03-04 22:24 - 2014-11-21 12:01 - 00178144 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-03 21:24 - 2013-02-14 21:43 - 00000099 _____ () C:\Users\Public\LMDebug.log
2015-03-01 22:46 - 2014-10-13 17:39 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-01 22:46 - 2013-02-11 15:53 - 00000000 ____D () C:\Program Files\DIFX
2015-02-28 20:40 - 2013-10-14 21:52 - 00001489 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\bwin Poker.lnk
2015-02-28 20:40 - 2013-01-31 14:09 - 00001483 _____ () C:\Users\Reini\Desktop\bwin Poker.lnk

==================== Files in the root of some directories =======

2015-03-21 09:43 - 2015-03-21 09:43 - 0000000 _____ () C:\Users\Reini\AppData\Local\{4D933EA0-9422-4AD6-8326-3F20F2C22F60}
2013-03-06 22:34 - 2013-03-06 22:34 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-10-22 21:14 - 2014-10-22 21:14 - 0000032 _____ () C:\ProgramData\Temp.log

Some content of TEMP:
====================
C:\Users\Reini\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps_dvam.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

richipfadi 24.03.2015 18:06
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Reini at 2015-03-24 18:01:53
Running from C:\Users\Reini\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Internet Security (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG AntiVirus 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
AS: Norton Internet Security (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Internet Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat 7.0 Professional - English, Français, Deutsch (HKLM-x32\...\Adobe Acrobat 7.0 Professional - English, Français, Deutsch - V) (Version: 7.0.0 - Adobe Systems)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
ArchiCAD 17 AUT (HKLM\...\001FFF2FFF17FF00FF0901F01F02F000-R1) (Version: 17.0 - GRAPHISOFT)
AUER Success NG (HKLM-x32\...\{F038622F-6F90-432F-8116-2B49C8D7A806}) (Version: 05.00.0245 - AUER - Die Bausoftware GmbH)
AUER Success.6 Lernversion (HKLM-x32\...\{A467C375-4DBB-4B63-991D-FA66948A4B67}) (Version: 06.00.0228 - AUER - Die Bausoftware GmbH)
AutoCAD Architecture 2013 - Deutsch (German) (HKLM\...\AutoCAD Architecture 2013 - Deutsch (German)) (Version: 7.0.50.0 - Autodesk)
AutoCAD Architecture 2013 - Deutsch (German) (Version: 7.0.50.0 - Autodesk) Hidden
AutoCAD Architecture 2013 Language Pack - Deutsch (Version: 7.0.50.0 - Autodesk) Hidden
AutoCAD Architecture 2015 - Deutsch (German) (Version: 7.7.49.0 - Autodesk) Hidden
AutoCAD Architecture 2015 Language Pack - Deutsch (German) (Version: 7.7.49.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.2.3.1000 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.66.0 - Autodesk)
Autodesk AutoCAD Architecture 2015 - Deutsch (German) (HKLM\...\AutoCAD Architecture 2015 - Deutsch (German)) (Version: 7.7.49.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{9D589081-AFC2-4932-9071-AC585AC1EA83}) (Version: 3.32.3004 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.1.39 - Autodesk)
Autodesk ReCap (Version: 1.3.1.39 - Autodesk) Hidden
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5856 - AVG Technologies)
AVG 2015 (Version: 15.0.4315 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5856 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (de-DE) (x32 Version: 15.0.1001.403 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (HKLM-x32\...\AVG PC TuneUp) (Version: 15.0.1001.403 - AVG Technologies)
AVG PC TuneUp 2015 (x32 Version: 15.0.1001.403 - AVG Technologies) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
CyberLink PowerDirector (Version: 9.0.0.3815c - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)
Dropbox (HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
DVBViewer TERRATEC Edition (HKLM-x32\...\DVBViewer TERRATEC Edition_is1) (Version:  - CM&V)
Elevated Installer (x32 Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - FreeCodecPack)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Video to DVD Converter version 5.0.28.812 (HKLM-x32\...\Free Video to DVD Converter_is1) (Version: 5.0.28.812 - DVDVideoSoft Ltd.)
Galeria de Fotografias (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{714dc1e5-69a4-4ecd-9552-93397e084298}) (Version: 3.2.29.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden
gSyncit (HKLM-x32\...\{7775E9FE-1477-426C-9623-46D19FF112D5}) (Version: 4.0.564 - Fieldston Software)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Medion Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
Medion Home Cinema 10 (x32 Version: 10.1924 - CyberLink Corp.) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4701.1002 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.7.0.11 - Symantec Corporation)
NVIDIA 3D Vision Treiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0807 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0807 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0000 - Nuance Communications, Inc.)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Polar Daemon (HKLM-x32\...\{2BA9320D-E061-4C71-ACCB-AC0E9D4FC82B}) (Version: 2.2.20000 - Polar Electro Oy)
Polar WebSync (HKLM-x32\...\{320453EE-6AEA-4E1A-8E64-72F33C0C928F}) (Version: 2.8.10006 - Polar Electro Oy)
QuickLaunch (HKLM-x32\...\{A802F1E3-34C8-4C84-9948-C1C4E37D0FA9}) (Version: 1.00.0019 - Lenovo Group Limited)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6710 - Realtek Semiconductor Corp.)
Samsung SCX-4x16 Series - TWAIN (HKLM-x32\...\{4518D543-6A80-4856-AFA7-10836B42113A}) (Version:  - )
Samsung Universal Print Driver (HKLM-x32\...\Samsung Universal Print Driver) (Version: 2.03.09.00 - Samsung Electronics Co., Ltd.)
Schoener Fernsehen 0.0.0.2c (HKLM-x32\...\Schoener Fernsehen) (Version: 0.0.0.2c - © schoener-fernsehen.com)
SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Sun ODF Plugin for Microsoft Office 3.2 (HKLM-x32\...\{BD136CE7-6666-4273-A056-8D92F8625AAB}) (Version: 3.2.9483 - Sun Microsystems)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.38846 - TeamViewer)
TERRATEC Cinergy HTC USB XS HD (64 Bit) (HKLM-x32\...\{D4DC2182-41B4-4623-81A7-2A69AB169E6B}) (Version: 5.09.1202.00 - TERRATEC)
TerraTec Remote Control (HKLM-x32\...\{483213DE-E8FC-44D9-8826-11D480BEE38D}) (Version: 5.53 - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
USB 2.0 Switch Utility Software (HKLM-x32\...\{0105F5C0-6216-11D8-A7C6-444553540000}) (Version:  - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Win8 x64Components v1.4.3 (HKLM\...\Win8 x64Components_is1) (Version: 1.4.3 - Shark007)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows-Treiberpaket - TerraTec  (USB28xxBGA) Media  (12/02/2009 5.09.1202.00) (HKLM\...\65164506FD435CC3986FDA4C94F3FFBAE17E7F97) (Version: 12/02/2009 5.09.1202.00 - TerraTec )
Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\de-DE\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

23-03-2015 23:00:08 Installed AVG 2015

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1DDE5426-B1B3-4616-AD16-96A4E5ACFF7D} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2014-11-21] (Microsoft Corporation)
Task: {6A6EA899-58EA-40B3-A0FD-9C1BAE064F52} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2015-01-28] ()
Task: {785C0886-388D-41E1-8D00-F5FAB0AA84A1} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-02-10] (Microsoft Corporation)
Task: {7AB23B34-C91A-40F8-9EC6-33C2C722D31F} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {AFA57307-0E3C-4D17-A016-D9569C190DEF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-03-11] (Microsoft Corporation)
Task: {B616E97E-C185-4ED7-9619-649D5AEACA31} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {BE73239B-8EAD-448C-848A-1C061943E4B3} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2015-02-25] (AVG Technologies)
Task: {C861B53F-E891-44BC-8A67-C96B8FCED9AA} - System32\Tasks\Microsoft Office 15 Sync Maintenance for FIRMASTAND-Reini FirmaStand => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
Task: {D42B5842-DB03-4D1F-93D6-266E9CE4D7DA} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\WSCStub.exe [2015-03-07] (Symantec Corporation)
Task: {D4BDB844-A5DE-425E-BB7A-1B69590CADD3} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1097902264-1857806769-1598425798-1003 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {DB682DB3-F5AC-4BA1-90B3-F860A2135C9C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {E753CE50-4832-491D-844F-7437439F4C02} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E9D826FE-639D-4BCF-9BD9-94A2AE74903D} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {F72D6E08-F7EF-497E-A08B-0F1DF3D4CB48} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)

==================== Loaded Modules (whitelisted) ==============

2009-11-19 03:34 - 2009-11-19 03:34 - 00022016 _____ () C:\WINDOWS\System32\suge1l6.dll
2014-09-20 14:42 - 2014-09-10 16:24 - 00020240 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2014-10-08 13:01 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-12-12 15:20 - 2012-12-12 15:20 - 00419536 _____ () C:\Program Files (x86)\Polar\Daemon\polard.exe
2012-09-10 12:42 - 2010-08-19 17:43 - 00386344 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2015-02-25 09:25 - 2015-02-25 09:25 - 00712504 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\avgrepliba.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-02-25 09:25 - 2015-02-25 09:25 - 00855864 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\tulnga.dll
2013-02-26 16:59 - 2013-02-26 16:59 - 06227512 _____ () C:\Program Files (x86)\Polar\WebSync\WebSync.exe
2015-02-19 22:40 - 2015-02-19 22:40 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-09-23 18:52 - 2013-09-23 18:52 - 00059784 _____ () C:\Program Files\Autodesk\AutoCAD 2015\qoauth_Ad_1.dll
2013-09-23 18:52 - 2013-09-23 18:52 - 00232328 _____ () C:\Program Files\Autodesk\AutoCAD 2015\qjson_Ad_0.dll
2013-09-23 18:52 - 2013-09-23 18:52 - 00048520 _____ () C:\Program Files\Autodesk\AutoCAD 2015\QtSolutions_MFCMigrationFramework_Ad_2.dll
2013-09-23 18:51 - 2013-09-23 18:51 - 00922504 _____ () C:\Program Files\Autodesk\AutoCAD 2015\qca_Ad_2.dll
2011-04-29 19:27 - 2011-04-29 19:27 - 01315264 _____ () C:\Program Files\Autodesk\AutoCAD 2015\libxml2.dll
2013-07-11 12:21 - 2013-07-11 12:21 - 00143752 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\axutil.dll
2013-04-25 14:43 - 2013-04-25 14:43 - 00472904 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\axis2_engine.dll
2013-07-11 12:21 - 2013-07-11 12:21 - 00179592 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\axiom.dll
2013-04-25 14:44 - 2013-04-25 14:44 - 00040264 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\axis2_parser.dll
2013-04-25 14:43 - 2013-04-25 14:43 - 00140104 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\neethi.dll
2013-04-25 14:44 - 2013-04-25 14:44 - 01310024 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\libxml2.dll
2013-07-11 12:21 - 2013-07-11 12:21 - 00067912 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\axis2_http_sender.dll
2013-07-11 12:21 - 2013-07-11 12:21 - 00023368 _____ () C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\axis2_http_receiver.dll
2014-10-13 18:09 - 2014-11-26 10:35 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2014-10-13 18:09 - 2014-11-26 10:35 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2012-12-12 15:20 - 2012-12-12 15:20 - 03483856 _____ () C:\Program Files (x86)\Polar\Daemon\libpolar.dll
2015-03-23 18:36 - 2015-03-23 18:36 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\63948598d919af60addb114fdd3ccb56\PSIClient.ni.dll
2012-09-10 12:14 - 2012-07-18 19:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-02-26 16:59 - 2013-02-26 16:59 - 00110648 _____ () C:\Program Files (x86)\Polar\WebSync\PTransform.dll
2013-02-26 16:59 - 2013-02-26 16:59 - 03722296 _____ () C:\Program Files (x86)\Polar\WebSync\libpolar.dll
2010-02-10 16:06 - 2010-02-10 16:06 - 00334848 _____ () C:\Program Files (x86)\Polar\WebSync\QtXml4.dll
2010-02-10 16:22 - 2010-02-10 16:22 - 07971840 _____ () C:\Program Files (x86)\Polar\WebSync\QtGui4.dll
2010-02-10 16:07 - 2010-02-10 16:07 - 00929280 _____ () C:\Program Files (x86)\Polar\WebSync\QtNetwork4.dll
2011-01-14 16:01 - 2011-01-14 16:01 - 02142720 _____ () C:\Program Files (x86)\Polar\WebSync\QtCore4.dll
2010-02-10 18:45 - 2010-02-10 18:45 - 00025600 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qgif4.dll
2010-02-10 18:45 - 2010-02-10 18:45 - 00119808 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qjpeg4.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00750080 _____ () C:\Users\Reini\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-24 17:28 - 2015-03-24 17:28 - 00043008 _____ () c:\users\reini\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps_dvam.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00047616 _____ () C:\Users\Reini\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00865280 _____ () C:\Users\Reini\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:07 - 2015-03-04 23:07 - 00200704 _____ () C:\Users\Reini\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-11-15 16:11 - 2014-11-15 16:11 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2014-10-08 13:01 - 2014-10-08 13:03 - 00122024 _____ () C:\Program Files\Microsoft Office 15\root\Office15\JitV.dll
2014-11-15 16:10 - 2014-11-15 16:10 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\Office15\AppVIsvStream32.dll
2014-01-14 19:03 - 2014-01-14 19:03 - 38602752 _____ () C:\Program Files\Autodesk\AutoCAD 2015\acwebbrowser\libcef.dll
2009-02-26 12:46 - 2009-02-26 12:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2004-12-14 00:57 - 2004-12-14 00:57 - 01994752 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\PDFMaker\Common\AdobePDFMakerX.dll
2004-12-14 02:28 - 2004-12-14 02:28 - 01249280 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\PDFMaker\Common\AdobePDFMakerX.DEU
2011-06-22 10:46 - 2011-06-22 10:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2013-12-14 02:46 - 2013-12-14 02:46 - 00880640 _____ () C:\Program Files\Autodesk\AutoCAD 2015\acwebbrowser\libglesv2.dll
2013-12-14 02:46 - 2013-12-14 02:46 - 00102912 _____ () C:\Program Files\Autodesk\AutoCAD 2015\acwebbrowser\libegl.dll
2013-12-14 02:46 - 2013-12-14 02:46 - 00873984 _____ () C:\Program Files\Autodesk\AutoCAD 2015\acwebbrowser\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Reini\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Reini\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\wallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "USB 2.0 Switch.lnk"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 7.0"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "DivXUpdate"
HKLM\...\StartupApproved\Run32: => "ADSKAppManager"
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\StartupApproved\Run: => "Remote Control Editor"
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\StartupApproved\Run: => "Autodesk Sync"
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\StartupApproved\Run: => "ISUSPM"

==================== Accounts: =============================

Administrator (S-1-5-21-1097902264-1857806769-1598425798-500 - Administrator - Disabled) => C:\Users\Administrator
Gast (S-1-5-21-1097902264-1857806769-1598425798-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-1097902264-1857806769-1598425798-1006 - Limited - Enabled)
Karin (S-1-5-21-1097902264-1857806769-1598425798-1007 - Limited - Enabled)
Reini (S-1-5-21-1097902264-1857806769-1598425798-1003 - Administrator - Enabled) => C:\Users\Reini
UpdatusUser (S-1-5-21-1097902264-1857806769-1598425798-1002 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/24/2015 05:57:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingSports_8wekyb3d8bbwe!AppexSports“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 05:57:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingNews_8wekyb3d8bbwe!AppexNews“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 05:42:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingSports_8wekyb3d8bbwe!AppexSports“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 05:42:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingNews_8wekyb3d8bbwe!AppexNews“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 05:42:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingFinance_8wekyb3d8bbwe!AppexFinance“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 05:42:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 05:41:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SchoenerFernsehen.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1aa4

Startzeit: 01d06650f866c2f5

Endzeit: 6

Anwendungspfad: C:\Program Files (x86)\SchoenerFernsehen\SchoenerFernsehen.exe

Berichts-ID: 64dab3c3-d244-11e4-bf0b-d43d7e2e0c3f

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (03/24/2015 05:29:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WSCommCntr4.exe, Version: 4.0.3.0, Zeitstempel: 0x52df746e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c850f5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000037e69
ID des fehlerhaften Prozesses: 0x17f8
Startzeit der fehlerhaften Anwendung: 0xWSCommCntr4.exe0
Pfad der fehlerhaften Anwendung: WSCommCntr4.exe1
Pfad des fehlerhaften Moduls: WSCommCntr4.exe2
Berichtskennung: WSCommCntr4.exe3
Vollständiger Name des fehlerhaften Pakets: WSCommCntr4.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WSCommCntr4.exe5

Error: (03/24/2015 07:32:08 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingFinance_8wekyb3d8bbwe!AppexFinance“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/24/2015 07:17:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FIRMASTAND)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


System errors:
=============
Error: (03/24/2015 05:56:01 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "REINITAB",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{281685EA-5281-425D-A206-752B81C1E90D}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/24/2015 07:04:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (03/24/2015 07:04:28 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/24/2015 07:02:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20

Error: (03/24/2015 01:03:20 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Garmin Core Update Service erreicht.

Error: (03/23/2015 11:11:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (03/23/2015 11:11:15 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/23/2015 11:09:36 PM) (Source: DCOM) (EventID: 10016) (User: FIRMASTAND)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}FirmaStandReiniS-1-5-21-1097902264-1857806769-1598425798-1003LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (03/23/2015 11:09:36 PM) (Source: DCOM) (EventID: 10016) (User: FIRMASTAND)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}FirmaStandReiniS-1-5-21-1097902264-1857806769-1598425798-1003LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (03/23/2015 11:09:36 PM) (Source: DCOM) (EventID: 10016) (User: FIRMASTAND)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}FirmaStandReiniS-1-5-21-1097902264-1857806769-1598425798-1003LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================
Error: (09/12/2014 08:18:13 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 4655 seconds with 540 seconds of active time.  This session ended with a crash.

Error: (06/23/2014 10:05:29 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 12966 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (06/17/2014 11:03:39 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 615 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/23/2014 06:37:14 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 33649 seconds with 4140 seconds of active time.  This session ended with a crash.

Error: (05/17/2014 08:38:05 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 11473 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/13/2014 02:58:16 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 60866 seconds with 2880 seconds of active time.  This session ended with a crash.

Error: (04/08/2014 08:32:26 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 82 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/15/2013 09:50:10 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 725 seconds with 120 seconds of active time.  This session ended with a crash.

Error: (06/05/2013 05:51:38 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 4211 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/12/2013 06:57:09 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 194655 seconds with 360 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2015-03-21 09:20:57.558
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-21 09:20:44.572
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-19 23:56:39.985
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-19 23:41:45.957
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-19 21:58:24.018
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-19 21:56:07.595
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-19 19:03:55.739
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-19 18:52:30.947
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-18 21:29:29.555
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-18 19:10:41.841
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Percentage of memory in use: 78%
Total physical RAM: 4037.84 MB
Available physical RAM: 861.41 MB
Total Pagefile: 5445.84 MB
Available Pagefile: 1012.27 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:1800.86 GB) (Free:1674.12 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:44.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

schrauber 25.03.2015 09:09
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

richipfadi 25.03.2015 10:39
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 25.03.2015
Suchlauf-Zeit: 09:43:02
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.03.25.02
Rootkit Datenbank: v2015.02.25.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Reini

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 476586
Verstrichene Zeit: 12 Min, 34 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
Code:
# AdwCleaner v4.113 - Bericht erstellt 25/03/2015 um 10:05:39
# Aktualisiert 22/03/2015 von Xplode
# Datenbank : 2015-03-23.1 [Server]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : Reini - FIRMASTAND
# Gestarted von : C:\Users\Reini\Desktop\adwcleaner_4.113.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [2563 Bytes] - [14/03/2015 19:14:31]
AdwCleaner[R1].txt - [939 Bytes] - [14/03/2015 19:23:27]
AdwCleaner[R2].txt - [993 Bytes] - [15/03/2015 14:03:20]
AdwCleaner[R3].txt - [1808 Bytes] - [25/03/2015 10:02:54]
AdwCleaner[S0].txt - [2298 Bytes] - [14/03/2015 19:16:01]
AdwCleaner[S1].txt - [1053 Bytes] - [15/03/2015 14:04:32]
AdwCleaner[S2].txt - [1722 Bytes] - [25/03/2015 10:05:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1781  Bytes] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.6 (03.22.2015:1)
OS: Windows 8.1 x64
Ran by Reini on 25.03.2015 at 10:18:48,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\flexnet"
Successfully deleted: [Folder] "C:\Users\Reini\AppData\Roaming\flexnet"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.03.2015 at 10:22:08,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Reini (administrator) on FIRMASTAND on 25-03-2015 10:37:25
Running from C:\Users\Reini\Desktop
Loaded Profiles: Reini (Available profiles: UpdatusUser & Reini & Administrator)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\Polar\Daemon\polard.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Windows\System32\mcbuilder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
() C:\Program Files (x86)\Polar\WebSync\WebSync.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Dropbox, Inc.) C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794704 2015-03-11] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-08-16] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Acrobat Assistant 7.0] => C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2004-12-14] (Adobe Systems Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-11-26] (Autodesk Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3723728 2015-03-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TERRATEC\Remote\TTTvRc.exe [1842760 2012-03-22] (Elgato Systems)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2015-01-28] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [OneDrive] => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-12] (Microsoft Corporation)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat - Schnellstart.lnk
ShortcutTarget: Adobe Acrobat - Schnellstart.lnk -> C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Polar WebSync.lnk
ShortcutTarget: Polar WebSync.lnk -> C:\Program Files (x86)\Polar\WebSync\WebSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\USB 2.0 Switch.lnk
ShortcutTarget: USB 2.0 Switch.lnk -> C:\Program Files (x86)\USB-Switch\USwitch.exe ()
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.at/
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-05] (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-15] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2015-03-25]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-01-07]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-19]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-11-26] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3416016 2015-03-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [309232 2015-03-06] (AVG Technologies CZ, s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [517464 2015-01-28] (Garmin Ltd or its subsidiaries)
R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-08-16] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\NIS.exe [276336 2015-03-07] (Symantec Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2015-02-25] (AVG Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-03-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-03-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [280544 2015-02-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-02-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [289248 2015-02-20] (AVG Technologies CZ, s.r.o.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20150321.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1507000.00B\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2015-01-11] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20150323.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-25] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150323.022\ENG64.SYS [129752 2015-03-20] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150323.022\EX64.SYS [2137304 2015-03-20] (Symantec Corporation)
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation                          )
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1507000.00B\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1507000.00B\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1507000.00B\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-07] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1507000.00B\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1507000.00B\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2015-01-13] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-03-21] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.6 (03.22.2015:1)
OS: Windows 8.1 x64
Ran by Reini on 25.03.2015 at 10:18:48,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\flexnet"
Successfully deleted: [Folder] "C:\Users\Reini\AppData\Roaming\flexnet"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.03.2015 at 10:22:08,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

schrauber 25.03.2015 19:29

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

richipfadi 25.03.2015 21:29
Code:
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=cdb49185ffd1914cac2b8ce2e767a397
# engine=23076
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-25 08:02:54
# local_time=2015-03-25 09:02:54 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='AVG AntiVirus 2015'
# compatibility_mode=1054 16777213 100 100 44999 114447758 0 0
# compatibility_mode_1='Norton Internet Security'
# compatibility_mode=3597 16777213 100 100 187340 189910359 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 42967 52195067 0 0
# scanned=358042
# found=2
# cleaned=2
# scan_time=4720
sh=37CCAD86409E08816A4C00F1DBEA4604BA36D3A1 ft=1 fh=919a9505016e0e1e vn="Variante von Win32/Toolbar.Babylon.F evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Reini\AppData\Roaming\OpenCandy\77E227501C254279B5C0D7ABF753E32E\DeltaTB.exe.vir"
sh=BCF43267B4416C6DDEFAAD5AE0A63E3F682C5BB0 ft=1 fh=905be375e5c80006 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Reini\Downloads\PDFCreator-1_6_2_setup.exe"
Code:
Results of screen317's Security Check version 0.99.97 
  x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Norton Internet Security 
Windows Defender         
AVG AntiVirus 2015       
 Antivirus out of date! 
`````````Anti-malware/Other Utilities Check:`````````
 Java 8 Update 31 
 Java version 32-bit out of Date!
  Java 64-bit 8 Update 31 
 Adobe Flash Player        17.0.0.134 
````````Process Check: objlist.exe by Laurent```````` 
 AVG avgwdsvc.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  %
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Reini (administrator) on FIRMASTAND on 25-03-2015 21:20:49
Running from C:\Users\Reini\Desktop
Loaded Profiles: Reini (Available profiles: UpdatusUser & Reini & Administrator)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\Polar\Daemon\polard.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
() C:\Program Files (x86)\Polar\WebSync\WebSync.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Dropbox, Inc.) C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\ws.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794704 2015-03-11] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-08-16] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Acrobat Assistant 7.0] => C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2004-12-14] (Adobe Systems Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-11-26] (Autodesk Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3723728 2015-03-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TERRATEC\Remote\TTTvRc.exe [1842760 2012-03-22] (Elgato Systems)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2015-01-28] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [OneDrive] => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-12] (Microsoft Corporation)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat - Schnellstart.lnk
ShortcutTarget: Adobe Acrobat - Schnellstart.lnk -> C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Polar WebSync.lnk
ShortcutTarget: Polar WebSync.lnk -> C:\Program Files (x86)\Polar\WebSync\WebSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\USB 2.0 Switch.lnk
ShortcutTarget: USB 2.0 Switch.lnk -> C:\Program Files (x86)\USB-Switch\USwitch.exe ()
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Reini\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Reini\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Reini\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.at/
HKU\S-1-5-21-1097902264-1857806769-1598425798-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-05] (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1097902264-1857806769-1598425798-1003 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-15] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2015-03-25]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-01-07]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-19]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-11-26] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3416016 2015-03-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [309232 2015-03-06] (AVG Technologies CZ, s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [517464 2015-01-28] (Garmin Ltd or its subsidiaries)
R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-08-16] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\NIS.exe [276336 2015-03-07] (Symantec Corporation)
R3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-03-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-03-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [280544 2015-02-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-02-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [289248 2015-02-20] (AVG Technologies CZ, s.r.o.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20150321.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1507000.00B\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2015-01-11] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20150323.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150324.034\ENG64.SYS [129752 2015-03-24] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150324.034\EX64.SYS [2137304 2015-03-24] (Symantec Corporation)
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation                          )
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1507000.00B\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1507000.00B\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1507000.00B\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-07] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1507000.00B\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1507000.00B\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-03-21] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-25 21:20 - 2015-03-25 21:20 - 00000833 _____ () C:\Users\Reini\Desktop\checkup.txt
2015-03-25 21:19 - 2015-03-25 19:40 - 00852604 _____ () C:\Users\Reini\Desktop\SecurityCheck.exe
2015-03-25 10:22 - 2015-03-25 10:22 - 00000746 _____ () C:\Users\Reini\Desktop\JRT.txt
2015-03-25 10:16 - 2015-03-25 10:06 - 01388782 _____ (Thisisu) C:\Users\Reini\Desktop\JRT.exe
2015-03-25 10:15 - 2015-03-25 10:15 - 00001869 _____ () C:\Users\Reini\Desktop\AdwCleaner[S2].txt
2015-03-25 10:01 - 2015-03-25 09:59 - 02168320 _____ () C:\Users\Reini\Desktop\adwcleaner_4.113.exe
2015-03-25 09:56 - 2015-03-25 09:56 - 00001188 _____ () C:\Users\Reini\Desktop\mbam.txt
2015-03-24 18:01 - 2015-03-24 18:03 - 00048939 _____ () C:\Users\Reini\Desktop\Addition.txt
2015-03-24 18:00 - 2015-03-25 21:20 - 00025075 _____ () C:\Users\Reini\Desktop\FRST.txt
2015-03-24 17:59 - 2015-03-25 21:20 - 00000000 ____D () C:\FRST
2015-03-24 17:59 - 2015-03-24 14:54 - 02095616 _____ (Farbar) C:\Users\Reini\Desktop\FRST64.exe
2015-03-24 07:01 - 2015-03-24 07:01 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-03-23 23:27 - 2015-03-23 23:27 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\AVG
2015-03-23 23:21 - 2015-03-23 23:21 - 00000000 ____D () C:\Users\Reini\AppData\Local\Avg
2015-03-23 23:20 - 2015-03-23 23:29 - 00000000 ____D () C:\ProgramData\AVG
2015-03-23 23:18 - 2015-03-23 23:18 - 113398072 _____ (AVG Technologies) C:\Users\Reini\Downloads\avg_tuh_stf_all_2015_403_24c4.exe
2015-03-23 23:02 - 2015-03-23 23:02 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\AVG2015
2015-03-23 23:01 - 2015-03-23 23:02 - 00000000 ____D () C:\ProgramData\AVG2015
2015-03-23 23:01 - 2015-03-23 23:01 - 00001039 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-03-23 23:01 - 2015-03-23 23:01 - 00000000 ___HD () C:\$AVG
2015-03-23 23:01 - 2015-03-23 23:01 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\TuneUp Software
2015-03-23 23:01 - 2015-03-23 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-03-23 22:59 - 2015-03-23 23:24 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-03-23 22:57 - 2015-03-25 19:32 - 00000000 ____D () C:\ProgramData\MFAData
2015-03-23 22:57 - 2015-03-23 23:11 - 00000000 ____D () C:\Users\Reini\AppData\Local\Avg2015
2015-03-23 22:57 - 2015-03-23 22:57 - 04578024 _____ (AVG Technologies) C:\Users\Reini\Downloads\avg_avct_stb_all_2015_5315_ppc17.exe
2015-03-23 22:57 - 2015-03-23 22:57 - 00000000 ____D () C:\Users\Reini\AppData\Local\MFAData
2015-03-23 22:18 - 2015-03-23 22:18 - 00259584 _____ (OldTimer Tools) C:\Users\Reini\Desktop\OTH.scr
2015-03-23 18:05 - 2015-03-23 18:05 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2015-03-22 17:59 - 2015-03-22 17:59 - 00000155 _____ () C:\WINDOWS\SysWOW64\pp.log
2015-03-22 17:49 - 2015-03-22 17:50 - 00000000 ____D () C:\NPE
2015-03-22 17:41 - 2015-03-22 17:54 - 00000000 ____D () C:\Users\Reini\AppData\Local\NPE
2015-03-21 15:25 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-03-21 15:25 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-03-21 15:25 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-03-21 15:25 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-03-21 15:25 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-03-21 15:25 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-03-21 15:25 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-03-21 15:25 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-03-21 15:25 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-03-21 13:56 - 2015-03-21 13:56 - 00000000 __SHD () C:\Users\Reini\AppData\Local\EmieUserList
2015-03-21 13:56 - 2015-03-21 13:56 - 00000000 __SHD () C:\Users\Reini\AppData\Local\EmieSiteList
2015-03-21 13:56 - 2015-03-21 13:56 - 00000000 __SHD () C:\Users\Reini\AppData\Local\EmieBrowserModeList
2015-03-21 13:55 - 2015-03-25 10:26 - 00000000 ____D () C:\Users\Reini\OneDrive
2015-03-21 13:53 - 2015-03-21 13:53 - 00002119 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-03-21 13:53 - 2015-03-21 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-21 13:52 - 2015-03-21 13:52 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1097902264-1857806769-1598425798-1003
2015-03-21 13:52 - 2015-03-21 13:52 - 00000000 ____D () C:\Users\Reini\AppData\Local\NVIDIA
2015-03-21 13:49 - 2015-03-21 13:49 - 00001496 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-21 13:47 - 2015-03-21 13:47 - 00000020 ___SH () C:\Users\Reini\ntuser.ini
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-03-21 13:41 - 2015-03-21 13:41 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-03-21 13:38 - 2015-03-21 13:38 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-03-21 13:17 - 2015-03-21 13:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-03-21 13:17 - 2015-03-21 13:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-03-21 13:16 - 2015-03-21 13:16 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-21 13:09 - 2015-03-21 13:09 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2015-03-21 13:08 - 2015-03-21 13:55 - 00000000 ____D () C:\Users\Reini
2015-03-21 13:08 - 2015-03-21 13:39 - 00041913 _____ () C:\WINDOWS\diagwrn.xml
2015-03-21 13:08 - 2015-03-21 13:39 - 00041913 _____ () C:\WINDOWS\diagerr.xml
2015-03-21 13:08 - 2015-03-21 13:31 - 00000000 ____D () C:\Users\Administrator
2015-03-21 13:08 - 2015-03-21 13:09 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 13:08 - 2015-03-21 13:09 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 13:08 - 2015-03-21 13:09 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Vorlagen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Startmenü
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Netzwerkumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Lokale Einstellungen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Eigene Dateien
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Druckumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Documents\Eigene Musik
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Documents\Eigene Bilder
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\AppData\Local\Verlauf
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\AppData\Local\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Reini\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten
2015-03-21 13:08 - 2015-03-21 13:08 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 13:08 - 2014-11-21 11:52 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-21 13:08 - 2014-11-21 04:42 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-21 12:59 - 2015-02-05 20:07 - 06861128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 03517584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-03-21 12:59 - 2015-02-05 20:07 - 00935056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-03-21 12:59 - 2015-02-05 20:07 - 00062792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-03-21 12:59 - 2015-02-05 20:06 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-03-21 12:59 - 2015-02-05 18:57 - 00621384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-03-21 12:59 - 2015-02-05 13:50 - 04236870 _____ () C:\WINDOWS\system32\nvcoproc.bin
2015-03-21 12:58 - 2015-03-25 20:29 - 01415767 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-21 12:58 - 2015-03-21 13:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-21 12:58 - 2015-03-21 13:14 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-21 12:58 - 2015-03-21 12:59 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-03-21 12:58 - 2015-03-21 12:58 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-03-21 12:58 - 2015-03-21 12:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2015-03-21 12:58 - 2015-03-21 12:58 - 00000000 ____D () C:\Program Files\Realtek
2015-03-21 12:58 - 2015-03-11 10:10 - 00074056 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-03-21 12:58 - 2015-03-11 10:10 - 00060560 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-03-21 12:52 - 2015-03-21 13:50 - 00000000 ___DC () C:\WINDOWS\Panther
2015-03-21 12:50 - 2015-03-23 20:08 - 00000000 ____D () C:\Windows.old
2015-03-21 12:39 - 2015-03-21 12:39 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-03-21 12:39 - 2015-03-21 12:39 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-03-21 12:39 - 2015-03-21 12:39 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-03-21 12:38 - 2015-03-21 12:38 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-03-21 12:38 - 2015-03-21 12:38 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-03-21 12:38 - 2015-03-21 12:38 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-03-21 12:38 - 2015-03-21 12:38 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-21 12:37 - 2015-03-21 12:37 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-03-21 12:29 - 2015-03-21 12:29 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-03-21 12:29 - 2015-03-21 12:29 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-03-21 12:29 - 2015-03-21 12:29 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-03-21 12:28 - 2015-03-21 12:28 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-03-21 12:28 - 2015-03-21 12:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-03-21 12:28 - 2015-03-21 12:28 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-03-21 12:28 - 2015-03-21 12:28 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-03-21 12:28 - 2015-03-21 12:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-03-21 12:27 - 2015-03-21 12:27 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-03-21 12:27 - 2015-03-21 12:27 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-03-21 12:27 - 2015-03-21 12:27 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-03-21 12:27 - 2015-03-21 12:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-03-21 12:27 - 2015-03-21 12:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 01384712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 01123848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-03-21 12:26 - 2015-03-21 12:26 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-03-21 12:26 - 2015-03-21 12:26 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-03-21 12:26 - 2015-03-21 12:26 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-03-21 12:26 - 2015-03-21 12:26 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-03-21 12:25 - 2015-03-21 12:25 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-03-21 12:25 - 2015-03-21 12:25 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-03-21 12:25 - 2015-03-21 12:25 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-03-21 12:24 - 2015-03-21 12:24 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-03-21 12:24 - 2015-03-21 12:24 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-03-21 12:16 - 2015-03-21 12:16 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-03-21 12:16 - 2015-03-21 12:16 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-03-21 12:16 - 2015-03-21 12:16 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-03-21 12:16 - 2015-03-21 12:16 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-03-21 12:16 - 2015-03-21 12:16 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-03-21 12:16 - 2015-03-21 12:16 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-03-21 12:15 - 2015-03-21 12:15 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-03-21 12:15 - 2015-03-21 12:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-03-21 12:15 - 2015-03-21 12:15 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-03-21 12:14 - 2015-03-21 12:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2015-03-21 12:13 - 2015-03-25 10:06 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2015-03-21 12:13 - 2015-03-21 13:19 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-03-21 12:13 - 2015-03-21 12:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-03-21 12:13 - 2015-03-21 12:13 - 00000000 ____D () C:\Program Files\MSBuild
2015-03-21 12:13 - 2015-03-21 12:13 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-03-21 12:12 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-03-21 12:12 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-03-21 12:12 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-03-21 12:12 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-03-21 11:47 - 2015-03-21 13:39 - 00006578 _____ () C:\WINDOWS\comsetup.log
2015-03-21 10:43 - 2015-03-21 10:43 - 00000000 ____D () C:\Program Files\Reason
2015-03-21 09:43 - 2015-03-21 09:43 - 00000000 _____ () C:\Users\Reini\AppData\Local\{4D933EA0-9422-4AD6-8326-3F20F2C22F60}
2015-03-21 09:28 - 2015-03-21 09:28 - 00000000 ____D () C:\Users\Reini\AppData\Local\Apps\2.0
2015-03-21 09:25 - 2015-03-21 09:28 - 00263202 _____ () C:\WINDOWS\msxml4-KB2758694-enu.LOG
2015-03-16 07:32 - 2015-03-21 12:05 - 00570203 _____ () C:\WINDOWS\WindowsUpdate (1).log
2015-03-15 22:43 - 2015-03-15 22:43 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-03-15 22:43 - 2015-03-15 22:43 - 00000864 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-15 22:43 - 2015-03-15 22:43 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-15 21:41 - 2015-03-15 21:41 - 00000000 ____D () C:\Program Files\Nuance
2015-03-15 21:39 - 2015-03-22 17:59 - 00000000 ____D () C:\ProgramData\ScanSoft
2015-03-15 21:39 - 2015-03-15 21:39 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Nuance
2015-03-15 21:38 - 2015-03-22 17:59 - 00000000 ____D () C:\ProgramData\Nuance
2015-03-15 21:38 - 2015-03-22 17:56 - 00000000 ____D () C:\Program Files (x86)\Nuance
2015-03-15 21:36 - 2015-03-15 21:36 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2015-03-15 14:10 - 2015-03-15 14:25 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-03-15 14:10 - 2015-03-15 14:10 - 10995632 _____ (SurfRight B.V.) C:\Users\Reini\Downloads\HitmanPro_x64.exe
2015-03-15 14:08 - 2015-03-21 09:25 - 00000000 ____D () C:\WINDOWS\CryptoGuard
2015-03-15 14:04 - 2015-03-15 14:04 - 01876816 _____ (SurfRight B.V.) C:\Users\Reini\Downloads\hmpalert_2-6-5-77.exe
2015-03-14 19:21 - 2015-03-25 19:18 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-03-14 19:21 - 2015-03-25 19:17 - 00001160 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-14 19:21 - 2015-03-25 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-14 19:21 - 2015-03-25 19:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-14 19:21 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-03-14 19:21 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-03-14 19:21 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-03-14 19:21 - 2015-03-14 19:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-14 19:14 - 2015-03-25 10:05 - 00000000 ____D () C:\AdwCleaner
2015-03-14 11:45 - 2015-03-14 11:48 - 788387105 _____ () C:\Users\Reini\Downloads\HIIT - 35 Minute Cycle Training Workout - Hill Training.mp4
2015-03-11 10:09 - 2015-03-11 10:09 - 32106640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 24768144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 18575880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 17253848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 16017040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 14119744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 13294528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 13208200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 10773704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 10713256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 10284872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-03-11 10:09 - 2015-03-11 10:09 - 03610768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 03247248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 01895240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434752.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434752.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 01540240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00995248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00969872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00943760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00929936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00908104 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00877816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00496272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00399504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00390472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00353224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00345744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00305136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00195728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-03-11 10:09 - 2015-03-11 10:09 - 00177624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00164752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00030536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-03-11 10:09 - 2015-03-11 10:09 - 00027441 _____ () C:\WINDOWS\system32\nvinfo.pb
2015-03-11 10:08 - 2015-03-11 10:08 - 25460880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-03-11 10:08 - 2015-03-11 10:08 - 20466496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-03-11 10:08 - 2015-03-11 10:08 - 03299512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-03-11 10:08 - 2015-03-11 10:08 - 02902784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-03-10 19:22 - 2015-03-10 19:22 - 00140317 _____ () C:\Users\Reini\Desktop\HL600_2_d.dwg
2015-03-10 18:40 - 2015-03-10 18:40 - 00480768 _____ () C:\Users\Reini\Downloads\FSG_Gehalt_2015a.xls
2015-03-10 18:34 - 2015-03-10 18:34 - 00527360 _____ () C:\Users\Reini\Downloads\Gehaltstabellen2014x.xls
2015-03-03 19:41 - 2015-03-03 19:41 - 00000642 _____ () C:\Users\Reini\Desktop\Scan - Verknüpfung.lnk
2015-03-03 19:35 - 2015-03-03 19:35 - 00000000 _____ () C:\Users\Reini\Sti_Trace.log
2015-03-03 19:19 - 2015-03-15 21:45 - 00000092 _____ () C:\WINDOWS\brpcfx.ini
2015-03-03 19:19 - 2015-03-15 21:45 - 00000024 _____ () C:\WINDOWS\Brpfx04a.ini
2015-03-03 19:18 - 2015-03-03 19:18 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx
2015-03-03 19:18 - 2015-03-03 19:18 - 00000000 ____D () C:\ProgramData\PCFaxTx
2015-03-03 19:18 - 2013-07-12 06:03 - 00251392 ____R (brother) C:\WINDOWS\system32\NSSRH64.dll
2015-03-03 19:18 - 2013-07-03 03:46 - 00065024 ____R (Brother Industries,Ltd) C:\WINDOWS\system32\Brnsplg.dll
2015-03-03 19:18 - 2013-03-08 07:45 - 00059904 ____R (Brother Industries,Ltd.) C:\WINDOWS\system32\BrWiaNCp.dll
2015-03-03 19:18 - 2013-03-08 07:44 - 00087040 ____R (Brother Industries, Ltd.) C:\WINDOWS\system32\BrNetSti.dll
2015-03-03 19:18 - 2012-12-12 11:37 - 00318464 _____ (Brother Industries, Ltd.) C:\WINDOWS\system32\BrFaxTxAppRun64.dll
2015-03-03 19:18 - 2005-04-22 05:36 - 00143360 ____R () C:\WINDOWS\system32\BrSNMP64.dll
2015-03-03 19:05 - 2015-03-21 11:22 - 00000000 ____D () C:\Program Files (x86)\Brother
2015-03-03 19:05 - 2015-03-03 19:05 - 00000000 ___RD () C:\Users\Reini\AppData\Roaming\Brother
2015-03-03 19:00 - 2015-03-12 19:16 - 00026730 _____ () C:\WINDOWS\BRRBCOM.INI
2015-03-03 18:56 - 2009-07-14 06:21 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01009.dll
2015-03-03 18:56 - 2009-07-13 23:37 - 01002728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WinUSBCoInstaller2.dll
2015-03-03 18:54 - 2015-03-03 19:00 - 00000000 ____D () C:\ProgramData\Brother
2015-03-01 22:46 - 2015-03-21 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-03-01 22:46 - 2015-03-04 13:23 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Garmin
2015-03-01 22:46 - 2015-03-01 22:46 - 00003556 _____ () C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2015-03-01 22:46 - 2015-03-01 22:46 - 00001930 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2015-03-01 22:46 - 2015-03-01 22:46 - 00000000 ____D () C:\Users\Reini\AppData\Local\Garmin
2015-03-01 22:46 - 2015-03-01 22:46 - 00000000 ____D () C:\ProgramData\Garmin
2015-03-01 22:46 - 2015-03-01 22:46 - 00000000 ____D () C:\Program Files (x86)\Garmin
2015-02-28 20:40 - 2015-03-21 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bwin Poker
2015-02-24 16:46 - 2015-02-24 16:46 - 00280544 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys
2015-02-23 16:17 - 2015-02-23 16:17 - 00362995 _____ () C:\Users\Reini\Downloads\Neugebauer1.m4a

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-25 21:17 - 2014-10-12 20:34 - 00005144 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for FIRMASTAND-Reini FirmaStand
2015-03-25 21:04 - 2013-02-11 19:26 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1097902264-1857806769-1598425798-1003
2015-03-25 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-25 20:01 - 2012-12-08 12:42 - 00000000 ____D () C:\Outlook
2015-03-25 19:34 - 2014-08-06 11:01 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\gSyncit
2015-03-25 15:59 - 2012-12-05 17:26 - 00000000 ____D () C:\Users\Reini\AppData\Local\Packages
2015-03-25 10:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-03-25 10:26 - 2013-02-11 17:06 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Dropbox
2015-03-25 10:26 - 2012-12-10 10:06 - 00000000 ___RD () C:\Users\Reini\Dropbox
2015-03-25 10:24 - 2013-08-22 15:46 - 00368811 _____ () C:\WINDOWS\setupact.log
2015-03-25 10:24 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-25 10:24 - 2012-09-11 13:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-25 10:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-03-25 10:06 - 2014-11-21 04:13 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-25 10:06 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm
2015-03-25 10:06 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-03-25 10:06 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr
2015-03-25 10:06 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\winrm
2015-03-25 10:06 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-03-25 10:06 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\slmgr
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ___SD () C:\WINDOWS\system32\dsc
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Com
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\migwiz
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Com
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-25 10:06 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-03-25 10:06 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe
2015-03-25 10:06 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2015-03-25 10:06 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-03-25 10:06 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2015-03-25 10:06 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2015-03-25 10:06 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\servicing
2015-03-25 03:52 - 2013-02-11 15:33 - 00000000 ____D () C:\Users\Reini\AppData\Local\VirtualStore
2015-03-24 22:18 - 2013-03-07 11:45 - 00000449 _____ () C:\WINDOWS\AuerSetups.ini
2015-03-24 22:18 - 2013-03-07 11:45 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Auer Success
2015-03-24 22:18 - 2013-03-07 11:45 - 00000000 ____D () C:\BS4
2015-03-24 19:44 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-03-24 19:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-24 19:41 - 2015-01-07 17:07 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2015-03-24 19:41 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-03-24 19:41 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts
2015-03-24 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-03-24 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-03-24 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-24 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2015-03-24 17:30 - 2014-03-09 20:36 - 00000000 ____D () C:\Users\Reini\AppData\Local\CrashDumps
2015-03-24 07:01 - 2014-11-20 19:24 - 00012042 _____ () C:\WINDOWS\PFRO.log
2015-03-24 00:16 - 2013-02-11 19:26 - 00000000 ____D () C:\Users\Reini\AppData\Local\Microsoft Help
2015-03-23 23:15 - 2014-11-21 04:35 - 04179478 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-23 23:15 - 2014-11-21 03:45 - 00768888 _____ () C:\WINDOWS\system32\perfh007.dat
2015-03-23 23:15 - 2014-11-21 03:45 - 00160706 _____ () C:\WINDOWS\system32\perfc007.dat
2015-03-23 23:10 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-03-23 23:07 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2015-03-23 18:00 - 2013-02-11 16:01 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2015-03-23 18:00 - 2013-02-11 16:00 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2015-03-23 17:59 - 2014-02-07 09:43 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2015-03-23 17:59 - 2013-02-11 16:01 - 00002563 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2015-03-23 17:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2015-03-23 17:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2015-03-23 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-23 17:24 - 2013-02-11 19:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-22 21:59 - 2013-02-11 22:43 - 00159976 _____ () C:\Users\Reini\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-22 18:02 - 2013-08-22 15:44 - 00568784 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-03-22 17:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2015-03-22 17:48 - 2015-02-04 09:23 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-03-22 17:42 - 2013-02-11 15:55 - 00000000 ____D () C:\ProgramData\Norton
2015-03-22 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-21 13:55 - 2014-10-08 13:12 - 00000000 ___RD () C:\Users\Reini\OneDrive.old
2015-03-21 13:41 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-03-21 13:41 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2015-03-21 13:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-03-21 13:34 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-03-21 13:34 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-03-21 13:28 - 2012-09-10 11:57 - 04203592 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-03-21 13:19 - 2015-02-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2015-03-21 13:19 - 2015-01-07 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2015-03-21 13:19 - 2014-11-21 04:13 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-03-21 13:19 - 2014-11-10 20:38 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Schoener Fernsehen
2015-03-21 13:19 - 2014-10-27 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-03-21 13:19 - 2014-10-13 18:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap
2015-03-21 13:19 - 2014-10-13 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD Architecture 2015 - Deutsch (German)
2015-03-21 13:19 - 2014-10-08 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-21 13:19 - 2014-08-06 10:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gSyncit
2015-03-21 13:19 - 2014-08-06 09:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-03-21 13:19 - 2014-05-17 17:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auer Success
2015-03-21 13:19 - 2013-12-06 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB 2.0 Switch
2015-03-21 13:19 - 2013-11-18 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\fr
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\es
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\el
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\de
2015-03-21 13:19 - 2013-11-05 08:39 - 00000000 ____D () C:\WINDOWS\da
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\tr
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\sv
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\sl
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\pl
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\nl
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\it
2015-03-21 13:19 - 2013-11-05 08:38 - 00000000 ____D () C:\WINDOWS\hu
2015-03-21 13:19 - 2013-10-29 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GRAPHISOFT
2015-03-21 13:19 - 2013-10-14 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-21 13:19 - 2013-08-22 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-03-21 13:19 - 2013-06-19 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung SCX-4x16 Series
2015-03-21 13:19 - 2013-06-19 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-21 13:19 - 2013-03-17 12:12 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2015-03-21 13:19 - 2013-03-06 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-03-21 13:19 - 2013-02-14 21:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2015-03-21 13:19 - 2013-02-11 19:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-03-21 13:19 - 2013-02-11 17:07 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-21 13:19 - 2013-02-11 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs
2015-03-21 13:19 - 2013-02-11 16:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
2015-03-21 13:19 - 2013-02-11 15:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer TERRATEC Edition
2015-03-21 13:19 - 2012-09-10 12:39 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeCinema
2015-03-21 13:19 - 2012-09-10 11:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-03-21 13:19 - 2012-07-26 10:43 - 00000000 ____D () C:\WINDOWS\en-GB
2015-03-21 13:17 - 2013-08-22 16:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
2015-03-21 13:17 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2015-03-21 13:16 - 2014-11-21 03:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-21 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-03-21 13:16 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-03-21 13:16 - 2013-06-19 16:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2015-03-21 13:14 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-03-21 13:14 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-03-21 13:14 - 2013-03-27 09:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Polar
2015-03-21 13:14 - 2013-02-11 15:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TerraTec
2015-03-21 13:14 - 2012-09-10 12:43 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3
2015-03-21 13:14 - 2012-08-28 12:32 - 00000000 ____D () C:\ProgramData\PRICache
2015-03-21 13:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-03-21 13:09 - 2012-09-12 10:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Packages
2015-03-21 12:59 - 2012-12-10 16:05 - 00000000 ____D () C:\Temp
2015-03-21 12:52 - 2013-02-11 16:27 - 00000000 __SHD () C:\Recovery
2015-03-21 12:50 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2015-03-21 12:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2015-03-21 12:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 12:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-21 12:26 - 2013-08-22 16:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-21 12:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-03-21 11:19 - 2012-09-10 11:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-21 10:39 - 2013-02-11 17:06 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-21 10:27 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2015-03-21 10:03 - 2013-09-25 13:17 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-03-21 09:34 - 2013-02-11 17:06 - 00000000 ____D () C:\Users\Reini\AppData\Local\Google
2015-03-17 23:26 - 2013-03-14 14:19 - 00038233 _____ () C:\Users\Reini\Documents\plot.log
2015-03-15 22:50 - 2015-02-04 09:37 - 00000000 ____D () C:\Program Files\PDFCreator
2015-03-15 22:50 - 2014-02-03 13:41 - 00000000 ____D () C:\Users\Reini\AppData\Roaming\TeamViewer
2015-03-15 15:43 - 2013-02-11 15:55 - 00000000 ____D () C:\Program Files (x86)\DVBViewer TERRATEC Edition
2015-03-14 14:40 - 2014-10-08 13:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-12 21:12 - 2014-10-08 13:12 - 00002289 _____ () C:\Users\Reini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-03-11 18:48 - 2013-09-25 13:16 - 122905856 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-03-11 11:33 - 2013-02-11 17:10 - 00001025 _____ () C:\Users\Reini\Desktop\Dropbox.lnk
2015-03-04 22:24 - 2014-11-21 12:01 - 00792032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-03-04 22:24 - 2014-11-21 12:01 - 00178144 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-03 21:24 - 2013-02-14 21:43 - 00000099 _____ () C:\Users\Public\LMDebug.log
2015-03-01 22:46 - 2014-10-13 17:39 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-01 22:46 - 2013-02-11 15:53 - 00000000 ____D () C:\Program Files\DIFX
2015-02-28 20:40 - 2013-10-14 21:52 - 00001489 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\bwin Poker.lnk
2015-02-28 20:40 - 2013-01-31 14:09 - 00001483 _____ () C:\Users\Reini\Desktop\bwin Poker.lnk

==================== Files in the root of some directories =======

2015-03-21 09:43 - 2015-03-21 09:43 - 0000000 _____ () C:\Users\Reini\AppData\Local\{4D933EA0-9422-4AD6-8326-3F20F2C22F60}
2013-03-06 22:34 - 2013-03-06 22:34 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-10-22 21:14 - 2014-10-22 21:14 - 0000032 _____ () C:\ProgramData\Temp.log

Some content of TEMP:
====================
C:\Users\Reini\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpof4lci.dll
C:\Users\Reini\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Reini\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Reini\AppData\Local\Temp\Quarantine.exe
C:\Users\Reini\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Reini\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Reini\AppData\Local\Temp\sqlite3.dll
C:\Users\Reini\AppData\Local\Temp\TUUUninstallHelper.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-21 12:54

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

Hallo

ich danke dir!!!!!!!
Scheinbar hat es funktioniert!!!:Boogie::Boogie::Boogie::applaus::applaus:

schrauber 26.03.2015 16:55
Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Reini\Downloads\PDFCreator-1_6_2_setup.exe

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.






Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren .
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.pngAbsicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

richipfadi 26.03.2015 22:49
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Reini at 2015-03-26 22:39:42 Run:1
Running from C:\Users\Reini\Desktop
Loaded Profiles: Reini (Available profiles: UpdatusUser & Reini & Administrator)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Reini\Downloads\PDFCreator-1_6_2_setup.exe

Emptytemp:
       
*****************

"C:\Users\Reini\Downloads\PDFCreator-1_6_2_setup.exe" => File/Directory not found.
EmptyTemp: => Removed 770.2 MB temporary data.


The system needed a reboot.

==== End of Fixlog 22:40:59 ====
Vorher ist das ganze nochmals kurz gewesen, wie ich in das Forum ging um deine Nachricht zu lesen. Hoffe dass ist mit der Aktion erledigt!

schrauber 27.03.2015 15:50
Beobachte mal und melde dich wieder :)

richipfadi 27.03.2015 15:54
Danke mache ich!:party:

schrauber 28.03.2015 03:08
Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:25 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131