| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
18.01.2012, 07:32
| #16 |
| /// Selecta Jahrusso   |  Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Versuchen wir mal folgendes. Windows-Explorer öffnen (Windows-Taste + E) und unter => Extras => Ordneroptionen => im Reiter "Ansicht"
Downloade Dir bitte exehelper von Raktor. Speichere die Datei auf dem Desktop. Doppelklick auf die exeHelper.com um das Tool zu starten. Es sollte ein schwarzes Fenster aufpoppen. Drücke nach dem das Tool fertig ist eine beliebige Taste um es zu schließen. Poste nun den Inhalt der exehelperlog.txt. ( Diese befindet sich dort, wo Du exehelper gespeichert hast ) Folgendes Tool muss im Normalmodus laufen. Downloade dir bitte Farbar's Service Scanner
Bitte poste in deiner nächsten Antwort exehelperlog.txt FSS.txt
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
18.01.2012, 19:50
| #17 |
 | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen exehelperlog.txt
__________________exeHelper by Raktor Build 20100414 Run at 19:02:17 on 01/18/12 Now searching... Checking for numerical processes... Checking for sysguard processes... Checking for bad processes... Checking for bad files... Checking for bad registry entries... Resetting filetype association for .exe Resetting filetype association for .com Resetting userinit and shell values... Resetting policies... --Finished-- FSS.com lässt sich im normalen Betrieb nicht ausführen. Unter Eigenschaften der Datei steht auch, dass "Die Datei von einem anderen Computer stammt. Der Zugriff wurde aus Sicherheitsgründen eventuell blockiert." Obwohl ich die Datei im normal Modus herunter geladen habe. Ein Klick auf "Zulassen" bringt keine Besserung...  |
|
18.01.2012, 22:20
| #18 |
| /// Selecta Jahrusso | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Downloade dir bitte Farbar's Recovery Scan Tool x64 und speichere diese auf einen USB Stick.
__________________Schließe den USB Stick an das infizierte System an Du musst das System nun in die System Reparatur Option booten. Über den Boot Manager
Mit Windows CD/DVD
Wähle in den Reparaturoptionen Eingabeaufforderung
__________________ |
|
18.01.2012, 23:59
| #19 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen So. Hat leider etwas länger gedauert, weil das Tool am Anfang ständig meinte, ich soll es doch noch einmal starten. Nach mehreren Neustarts und über F8 -> Computer reparieren hat es dann funktioniert. frst.txt Scan result of Farbar Recovery Tool (FRST written by farbar) Version: 17-01-2012 00 Ran by SYSTEM at 2012-01-18 23:35:21 Running from G:\ Windows 7 Professional (X64) OS Language: German Standard The current controlset is ControlSet001 ========================== Registry (Whitelisted) ============= HKLM\...\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui [190536 2010-06-14] (Logitech Inc.) HKLM\...\Run: [itype] "c:\Program Files\Microsoft IntelliType Pro\itype.exe" [1873288 2011-08-01] (Microsoft Corporation) HKLM-x32\...\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe [36864 2010-03-07] () HKLM-x32\...\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [311296 2010-03-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2011-06-09] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [CTxfiHlp] CTXFIHLP.EXE [x] HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [343168 2011-11-09] (Advanced Micro Devices, Inc.) HKU\PotatoHead_Desktop\...\Policies\system: [disableregistrytools] 0 HKU\PotatoHead_Desktop\...\Policies\system: [DisableTaskMgr] 0 HKU\PotatoHead_Desktop\...\Policies\system: [DisableCMD] 0 Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 ==================== Services (Whitelisted) ====== 2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) 4 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [60552 2011-10-21] (CHENGDU YIWO Tech Development Co., Ltd) 4 ekrn; "C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe" [974944 2011-09-22] (ESET) 4 Futuremark SystemInfo Service; "C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe" [130976 2011-03-01] (Futuremark Corporation) 4 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23176 2011-10-21] (CHENGDU YIWO Tech Development Co., Ltd) 2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [652872 2011-12-24] (Malwarebytes Corporation) 2 simptcp; C:\Windows\System32\tcpsvcs.exe [10240 2009-07-14] (Microsoft Corporation) 2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [x] ========================== Drivers (Whitelisted) ============= 3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [10567680 2011-11-10] (Advanced Micro Devices, Inc.) 2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2011-03-09] () 3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-14] (Microsoft Corporation) 3 CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [202840 2011-08-22] (Creative Technology Ltd.) 2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [202576 2011-08-09] (ESET) 1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146432 2011-08-04] (ESET) 2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2011-08-04] (ESET) 0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [44680 2011-10-21] (CHENGDU YIWO Tech Development Co., Ltd) 0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [50312 2011-10-21] () 1 EUDSKACS; \??\C:\Windows\system32\drivers\eudskacs.sys [19592 2011-10-21] (CHENGDU YIWO Tech Development Co., Ltd) 1 EUFDDISK; \??\C:\Windows\system32\drivers\EuFdDisk.sys [189576 2011-10-21] (CHENGDU YIWO Tech Development Co., Ltd) 0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [109480 2010-03-07] (JMicron Technology Corp.) 2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2011-03-09] () 3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [23152 2011-12-10] (Malwarebytes Corporation) 3 MSI_MSIBIOS_010507; \??\C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [33592 2010-05-10] (Your Corporation) 3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] () 3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI) 3 RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14648 2010-08-31] () 0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-03-07] (Duplex Secure Ltd.) 3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] () 3 catchme; \??\C:\ComboFix\catchme.sys [x] 3 cpuz130; \??\C:\Users\POTATO~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] 3 EverestDriver; \??\C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [x] 3 FLASHSYS; \??\C:\Program Files (x86)\MSI\Live Update 4\LU4\FLASHSYS64.sys [x] 3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [x] 3 XBCD; C:\Windows\System32\DRIVERS\XBCD.sys [x] ========================== NetSvcs (Whitelisted) =========== ============ One Month Created Files and Folders ============== 2012-01-18 19:39 - 2012-01-18 19:39 - 0334421 ____A C:\Users\PotatoHead_Desktop\Downloads\FSS.com 2012-01-18 19:05 - 2012-01-18 19:05 - 0000414 ____A C:\Users\PotatoHead_Desktop\Desktop\___exehelperlog.txt 2012-01-18 19:02 - 2012-01-18 19:02 - 0000414 ____A C:\Users\PotatoHead_Desktop\Desktop\exehelperlog.txt 2012-01-18 19:01 - 2012-01-18 19:01 - 0294400 ____A C:\Users\PotatoHead_Desktop\Desktop\exeHelper.com 2012-01-17 23:19 - 2012-01-17 23:19 - 0082502 ____A C:\Users\PotatoHead_Desktop\Desktop\geräte_manager_ausgeblendete_geräte.JPG 2012-01-17 22:47 - 2012-01-17 22:47 - 0000000 ___SD C:\ComboFix 2012-01-17 22:44 - 2012-01-17 22:44 - 0000000 __SHD C:\$RECYCLE.BIN 2012-01-17 21:52 - 2010-09-07 15:39 - 0150392 ____A (Sysinternals - Windows Sysinternals: Documentation, downloads and additional resources) C:\junction.exe 2012-01-17 21:51 - 2012-01-17 21:51 - 0079623 ____A C:\Users\PotatoHead_Desktop\Downloads\Junction.zip 2012-01-17 21:51 - 2010-09-07 15:39 - 0150392 ____A (Sysinternals - Windows Sysinternals: Documentation, downloads and additional resources) C:\Program Files\junction.exe 2012-01-17 21:12 - 2012-01-17 22:51 - 0022218 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix_17_1.txt 2012-01-17 21:03 - 2012-01-17 21:03 - 0021565 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix.txt 2012-01-17 20:59 - 2012-01-14 17:19 - 0021730 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix2.txt 2012-01-17 20:59 - 2012-01-14 17:19 - 0003031 ____A C:\Users\PotatoHead_Desktop\Desktop\Add-Remove Programs.txt 2012-01-17 20:59 - 2012-01-14 17:19 - 0000654 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix-quarantined-files.txt 2012-01-16 20:00 - 2012-01-16 20:00 - 0085448 ____A C:\Users\PotatoHead_Desktop\Desktop\TDSSKiller.2.7.2.0_16.01.2012_19.59.48_log.txt 2012-01-16 19:59 - 2012-01-16 20:00 - 0085530 ____A C:\TDSSKiller.2.7.2.0_16.01.2012_19.59.48_log.txt 2012-01-16 19:59 - 2012-01-16 19:59 - 1974064 ____A (Kaspersky Lab ZAO) C:\Users\PotatoHead_Desktop\Downloads\tdsskiller.exe 2012-01-16 19:58 - 2012-01-16 19:58 - 0002091 ____A C:\Users\PotatoHead_Desktop\Desktop\aswMBR.txt 2012-01-16 19:58 - 2012-01-16 19:58 - 0000512 ____A C:\Users\PotatoHead_Desktop\Desktop\MBR.dat 2012-01-16 19:43 - 2012-01-16 19:43 - 4713472 ____A (AVAST Software) C:\Users\PotatoHead_Desktop\Downloads\aswMBR.exe 2012-01-16 19:43 - 2012-01-16 19:43 - 0004671 ____A C:\Users\PotatoHead_Desktop\Desktop\Attach.txt 2012-01-16 19:37 - 2012-01-16 19:41 - 0018671 ____A C:\Users\PotatoHead_Desktop\Desktop\DDS.txt 2012-01-16 19:36 - 2012-01-16 19:36 - 0607260 ____R (Swearware) C:\Users\PotatoHead_Desktop\Downloads\dds.com 2012-01-15 18:35 - 2011-11-17 07:49 - 0152432 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2012-01-15 18:35 - 2011-11-17 07:49 - 0095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys 2012-01-15 18:35 - 2011-11-17 07:44 - 0459232 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2012-01-15 18:35 - 2011-11-17 07:35 - 1447936 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll 2012-01-15 18:35 - 2011-11-17 07:35 - 0395776 ____A (Microsoft Corporation) C:\Windows\System32\webio.dll 2012-01-15 18:35 - 2011-11-17 07:35 - 0340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll 2012-01-15 18:35 - 2011-11-17 07:35 - 0136192 ____A (Microsoft Corporation) C:\Windows\System32\sspicli.dll 2012-01-15 18:35 - 2011-11-17 07:35 - 0029184 ____A (Microsoft Corporation) C:\Windows\System32\sspisrv.dll 2012-01-15 18:35 - 2011-11-17 07:35 - 0028160 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll 2012-01-15 18:35 - 2011-11-17 07:33 - 0031232 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe 2012-01-15 18:35 - 2011-11-17 06:35 - 0314880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2012-01-15 18:35 - 2011-11-17 06:34 - 0224768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2012-01-15 18:35 - 2011-11-17 06:34 - 0022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2012-01-15 18:35 - 2011-11-17 06:28 - 0096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2012-01-14 19:11 - 2011-11-19 15:58 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll 2012-01-14 19:11 - 2011-11-19 15:01 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2012-01-14 19:11 - 2011-10-26 06:25 - 1572864 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll 2012-01-14 19:11 - 2011-10-26 06:25 - 0366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll 2012-01-14 19:11 - 2011-10-26 05:32 - 1328128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2012-01-14 19:11 - 2011-10-26 05:32 - 0514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2012-01-14 19:04 - 2012-01-14 19:04 - 0050477 ____A C:\Users\PotatoHead_Desktop\Downloads\Defogger.exe 2012-01-14 18:33 - 2012-01-14 18:33 - 0000000 ____D C:\Users\Test_User\AppData\Roaming\Mozilla 2012-01-14 18:33 - 2012-01-14 18:33 - 0000000 ____D C:\Users\Test_User\AppData\Local\Mozilla 2012-01-14 18:28 - 2012-01-14 18:28 - 0057952 ____A C:\Users\Test_User\AppData\Local\GDIPFONTCACHEV1.DAT 2012-01-14 18:28 - 2012-01-14 18:28 - 0000000 ____D C:\Users\Test_User\AppData\Roaming\ATI 2012-01-14 18:28 - 2012-01-14 18:28 - 0000000 ____D C:\Users\Test_User\AppData\Local\ATI 2012-01-14 18:26 - 2012-01-14 18:27 - 0000174 ___SH C:\Users\Test_User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 2012-01-14 18:26 - 2012-01-14 18:26 - 0000020 __ASH C:\Users\Test_User\ntuser.ini 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Vorlagen 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Startmenü 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Netzwerkumgebung 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Lokale Einstellungen 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Eigene Dateien 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Druckumgebung 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Documents\Eigene Videos 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Documents\Eigene Musik 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Documents\Eigene Bilder 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\AppData\Local\Verlauf 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\AppData\Local\Temporary Internet Files 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\AppData\Local\Anwendungsdaten 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Anwendungsdaten 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 ____D C:\Users\Test_User\AppData\LocalLow 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 ____D C:\Users\Test_User\AppData\Local\VirtualStore 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 ____D C:\users\Test_User 2012-01-14 18:26 - 2009-07-14 19:18 - 0000000 ____D C:\Users\Test_User\AppData\Roaming\Media Center Programs 2012-01-14 17:49 - 2012-01-14 17:49 - 17268512 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jre-6u30-windows-x64 (1).exe 2012-01-14 17:48 - 2012-01-14 17:48 - 0910112 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jxpiinstall.exe 2012-01-14 17:47 - 2012-01-14 17:47 - 17159968 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jre-6u30-windows-i586-s.exe 2012-01-14 17:41 - 2012-01-14 17:41 - 17268512 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jre-6u30-windows-x64.exe 2012-01-14 17:35 - 2012-01-14 17:35 - 0879683 ____A C:\Users\PotatoHead_Desktop\Downloads\SecurityCheck (1).exe 2012-01-14 17:27 - 2012-01-14 17:27 - 0302592 ____A C:\Users\PotatoHead_Desktop\Downloads\0rc8znot.exe 2012-01-14 17:11 - 2011-06-26 07:45 - 0256000 ____A C:\Windows\PEV.exe 2012-01-14 17:11 - 2010-11-07 18:20 - 0208896 ____A C:\Windows\MBR.exe 2012-01-14 17:11 - 2009-04-20 05:56 - 0060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2012-01-14 17:11 - 2000-08-31 01:00 - 0518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2012-01-14 17:11 - 2000-08-31 01:00 - 0406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2012-01-14 17:11 - 2000-08-31 01:00 - 0098816 ____A C:\Windows\sed.exe 2012-01-14 17:11 - 2000-08-31 01:00 - 0080412 ____A C:\Windows\grep.exe 2012-01-14 17:11 - 2000-08-31 01:00 - 0068096 ____A C:\Windows\zip.exe 2012-01-14 17:09 - 2012-01-14 17:19 - 0000000 ____D C:\Windows\ERDNT 2012-01-14 17:04 - 2012-01-17 22:47 - 0000000 ____D C:\Qoobox 2012-01-14 17:02 - 2012-01-17 22:32 - 4386439 ____R (Swearware) C:\Users\PotatoHead_Desktop\Downloads\ComboFix.exe 2012-01-14 15:56 - 2012-01-14 15:56 - 0000000 ____D C:\Program Files (x86)\ESET 2012-01-14 02:03 - 2012-01-14 02:03 - 0000284 ____A C:\repair.bat 2012-01-14 01:48 - 2012-01-14 01:48 - 10847608 ____A (Malwarebytes Corporation ) C:\Users\PotatoHead_Desktop\Downloads\mbam-setup-1.60.0.1800.exe 2012-01-14 01:48 - 2012-01-14 01:48 - 0001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Malwarebytes 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\Users\All Users\Malwarebytes 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\ProgramData\Malwarebytes 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2012-01-14 01:48 - 2011-12-10 15:24 - 0023152 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys 2012-01-14 01:43 - 2012-01-14 01:43 - 0150612 ____A C:\Users\PotatoHead_Desktop\Downloads\OTL.Txt 2012-01-14 01:43 - 2012-01-14 01:43 - 0041168 ____A C:\Users\PotatoHead_Desktop\Downloads\Extras.Txt 2012-01-14 01:28 - 2012-01-14 01:28 - 0584192 ____A (OldTimer Tools) C:\Users\PotatoHead_Desktop\Downloads\OTL.exe 2012-01-14 01:24 - 2012-01-14 01:24 - 0001066 ____A C:\Users\PotatoHead_Desktop\Desktop\MSI Kombustor.lnk 2012-01-14 01:24 - 2012-01-14 01:24 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\MSIAfterburnerSetup210 2012-01-14 01:24 - 2012-01-14 01:24 - 0000000 ____D C:\Program Files (x86)\MSI Kombustor 2012-01-14 01:23 - 2012-01-14 01:24 - 25854771 ____A C:\Users\PotatoHead_Desktop\Downloads\MSIAfterburnerSetup210.zip 2012-01-14 01:15 - 2012-01-14 01:15 - 0513160 ____A (AMD Inc.) C:\Users\PotatoHead_Desktop\Downloads\amd_catalyst_11.12_cap2.exe 2012-01-13 20:29 - 2012-01-13 20:29 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\ESET 2012-01-10 19:45 - 2011-11-17 07:41 - 1731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2012-01-10 19:45 - 2011-11-17 06:38 - 1292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2012-01-06 21:06 - 2012-01-06 21:06 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\skse_1_04_02 2011-12-28 21:31 - 2011-12-28 21:46 - 0000401 ____A C:\Users\PotatoHead_Desktop\d3d_antilag.log 2011-12-28 21:13 - 2011-12-28 21:13 - 0001541 ____A C:\Users\PotatoHead_Desktop\Desktop\skyrim - Verknüpfung.lnk 2011-12-28 20:24 - 2011-12-28 20:24 - 0001907 ____A C:\Users\PotatoHead_Desktop\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk 2011-12-28 20:11 - 2011-12-28 20:11 - 0000000 ____D C:\Users\All Users\ESET 2011-12-28 20:11 - 2011-12-28 20:11 - 0000000 ____D C:\ProgramData\ESET 2011-12-27 20:37 - 2012-01-10 21:01 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\skyrim 2011-12-22 15:47 - 2011-12-22 15:47 - 0000000 ____D C:\Users\All Users\ATI 2011-12-22 15:47 - 2011-12-22 15:47 - 0000000 ____D C:\ProgramData\ATI 2011-12-22 15:47 - 2011-12-22 15:47 - 0000000 ____D C:\Program Files (x86)\AMD APP 2011-12-22 15:36 - 2011-12-22 15:36 - 114931120 ____A (Advanced Micro Devices, Inc.) C:\Users\PotatoHead_Desktop\Downloads\11-12_vista64_win7_64_dd_ccc_ocl.exe 2011-12-22 15:36 - 2011-12-22 15:36 - 0511024 ____A (AMD Inc.) C:\Users\PotatoHead_Desktop\Downloads\amd_catalyst_11.12_cap1.exe ============ 3 Months Modified Files and Folders ============= 2012-01-18 23:35 - 2012-01-18 23:35 - 0000000 ____D C:\FRST 2012-01-18 23:30 - 2010-03-06 19:10 - 3220574208 __ASH C:\hiberfil.sys 2012-01-18 23:30 - 2009-07-14 06:08 - 0000006 ___AH C:\Windows\Tasks\SA.DAT 2012-01-18 23:30 - 2009-07-14 05:51 - 0043632 ____A C:\Windows\setupact.log 2012-01-18 23:02 - 2010-03-07 02:35 - 0061616 ____A C:\Windows\System32\BMXStateBkp-{00000005-00000000-00000002-00001102-00000005-00211102}.rfx 2012-01-18 23:02 - 2010-03-07 02:35 - 0061616 ____A C:\Windows\System32\BMXState-{00000005-00000000-00000002-00001102-00000005-00211102}.rfx 2012-01-18 23:02 - 2010-03-07 02:35 - 0000788 ____A C:\Windows\System32\DVCState-{00000005-00000000-00000002-00001102-00000005-00211102}.rfx 2012-01-18 23:02 - 2010-03-06 19:13 - 1443849 ____A C:\Windows\WindowsUpdate.log 2012-01-18 22:59 - 2009-07-14 18:58 - 0653928 ____A C:\Windows\System32\perfh007.dat 2012-01-18 22:59 - 2009-07-14 18:58 - 0129800 ____A C:\Windows\System32\perfc007.dat 2012-01-18 22:59 - 2009-07-14 06:13 - 1498506 ____A C:\Windows\System32\PerfStringBackup.INI 2012-01-18 22:41 - 2011-10-29 13:36 - 0001172 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1815020974-3984948832-1307443358-1001UA.job 2012-01-18 19:39 - 2012-01-18 19:39 - 0334421 ____A C:\Users\PotatoHead_Desktop\Downloads\FSS.com 2012-01-18 19:14 - 2009-07-14 05:45 - 0013440 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2012-01-18 19:14 - 2009-07-14 05:45 - 0013440 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2012-01-18 19:05 - 2012-01-18 19:05 - 0000414 ____A C:\Users\PotatoHead_Desktop\Desktop\___exehelperlog.txt 2012-01-18 19:02 - 2012-01-18 19:02 - 0000414 ____A C:\Users\PotatoHead_Desktop\Desktop\exehelperlog.txt 2012-01-18 19:01 - 2012-01-18 19:01 - 0294400 ____A C:\Users\PotatoHead_Desktop\Desktop\exeHelper.com 2012-01-18 18:59 - 2011-05-03 17:46 - 1536584 ____A C:\Windows\ntbtlog.txt 2012-01-17 23:19 - 2012-01-17 23:19 - 0082502 ____A C:\Users\PotatoHead_Desktop\Desktop\geräte_manager_ausgeblendete_geräte.JPG 2012-01-17 22:51 - 2012-01-17 21:12 - 0022218 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix_17_1.txt 2012-01-17 22:47 - 2012-01-17 22:47 - 0000000 ___SD C:\ComboFix 2012-01-17 22:47 - 2012-01-14 17:04 - 0000000 ____D C:\Qoobox 2012-01-17 22:44 - 2012-01-17 22:44 - 0000000 __SHD C:\$RECYCLE.BIN 2012-01-17 22:43 - 2010-04-09 16:56 - 0000027 ____A C:\Windows\System32\Drivers\etc\hosts 2012-01-17 22:43 - 2009-07-14 03:34 - 0000215 ____A C:\Windows\system.ini 2012-01-17 22:42 - 2010-03-07 02:35 - 0043238 ____A C:\Windows\PFRO.log 2012-01-17 22:32 - 2012-01-14 17:02 - 4386439 ____R (Swearware) C:\Users\PotatoHead_Desktop\Downloads\ComboFix.exe 2012-01-17 21:51 - 2012-01-17 21:51 - 0079623 ____A C:\Users\PotatoHead_Desktop\Downloads\Junction.zip 2012-01-17 21:03 - 2012-01-17 21:03 - 0021565 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix.txt 2012-01-16 20:00 - 2012-01-16 20:00 - 0085448 ____A C:\Users\PotatoHead_Desktop\Desktop\TDSSKiller.2.7.2.0_16.01.2012_19.59.48_log.txt 2012-01-16 20:00 - 2012-01-16 19:59 - 0085530 ____A C:\TDSSKiller.2.7.2.0_16.01.2012_19.59.48_log.txt 2012-01-16 19:59 - 2012-01-16 19:59 - 1974064 ____A (Kaspersky Lab ZAO) C:\Users\PotatoHead_Desktop\Downloads\tdsskiller.exe 2012-01-16 19:58 - 2012-01-16 19:58 - 0002091 ____A C:\Users\PotatoHead_Desktop\Desktop\aswMBR.txt 2012-01-16 19:58 - 2012-01-16 19:58 - 0000512 ____A C:\Users\PotatoHead_Desktop\Desktop\MBR.dat 2012-01-16 19:43 - 2012-01-16 19:43 - 4713472 ____A (AVAST Software) C:\Users\PotatoHead_Desktop\Downloads\aswMBR.exe 2012-01-16 19:43 - 2012-01-16 19:43 - 0004671 ____A C:\Users\PotatoHead_Desktop\Desktop\Attach.txt 2012-01-16 19:41 - 2012-01-16 19:37 - 0018671 ____A C:\Users\PotatoHead_Desktop\Desktop\DDS.txt 2012-01-16 19:36 - 2012-01-16 19:36 - 0607260 ____R (Swearware) C:\Users\PotatoHead_Desktop\Downloads\dds.com 2012-01-15 20:18 - 2009-07-14 04:20 - 0000000 ____D C:\Windows\System32\config\TxR 2012-01-14 22:21 - 2010-03-07 16:14 - 0000000 ____D C:\Program Files (x86)\Steam 2012-01-14 19:04 - 2012-01-14 19:04 - 0050477 ____A C:\Users\PotatoHead_Desktop\Downloads\Defogger.exe 2012-01-14 18:33 - 2012-01-14 18:33 - 0000000 ____D C:\Users\Test_User\AppData\Roaming\Mozilla 2012-01-14 18:33 - 2012-01-14 18:33 - 0000000 ____D C:\Users\Test_User\AppData\Local\Mozilla 2012-01-14 18:28 - 2012-01-14 18:28 - 0057952 ____A C:\Users\Test_User\AppData\Local\GDIPFONTCACHEV1.DAT 2012-01-14 18:28 - 2012-01-14 18:28 - 0000000 ____D C:\Users\Test_User\AppData\Roaming\ATI 2012-01-14 18:28 - 2012-01-14 18:28 - 0000000 ____D C:\Users\Test_User\AppData\Local\ATI 2012-01-14 18:27 - 2012-01-14 18:26 - 0000174 ___SH C:\Users\Test_User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 2012-01-14 18:26 - 2012-01-14 18:26 - 0000020 __ASH C:\Users\Test_User\ntuser.ini 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Vorlagen 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Startmenü 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Netzwerkumgebung 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Lokale Einstellungen 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Eigene Dateien 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Druckumgebung 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Documents\Eigene Videos 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Documents\Eigene Musik 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Documents\Eigene Bilder 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\AppData\Local\Verlauf 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\AppData\Local\Temporary Internet Files 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\AppData\Local\Anwendungsdaten 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 __SHD C:\Users\Test_User\Anwendungsdaten 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 ____D C:\Users\Test_User\AppData\LocalLow 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 ____D C:\Users\Test_User\AppData\Local\VirtualStore 2012-01-14 18:26 - 2012-01-14 18:26 - 0000000 ____D C:\users\Test_User 2012-01-14 17:49 - 2012-01-14 17:49 - 17268512 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jre-6u30-windows-x64 (1).exe 2012-01-14 17:48 - 2012-01-14 17:48 - 0910112 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jxpiinstall.exe 2012-01-14 17:47 - 2012-01-14 17:47 - 17159968 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jre-6u30-windows-i586-s.exe 2012-01-14 17:41 - 2012-01-14 17:41 - 17268512 ____A (Sun Microsystems, Inc.) C:\Users\PotatoHead_Desktop\Downloads\jre-6u30-windows-x64.exe 2012-01-14 17:35 - 2012-01-14 17:35 - 0879683 ____A C:\Users\PotatoHead_Desktop\Downloads\SecurityCheck (1).exe 2012-01-14 17:27 - 2012-01-14 17:27 - 0302592 ____A C:\Users\PotatoHead_Desktop\Downloads\0rc8znot.exe 2012-01-14 17:19 - 2012-01-17 20:59 - 0021730 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix2.txt 2012-01-14 17:19 - 2012-01-17 20:59 - 0003031 ____A C:\Users\PotatoHead_Desktop\Desktop\Add-Remove Programs.txt 2012-01-14 17:19 - 2012-01-17 20:59 - 0000654 ____A C:\Users\PotatoHead_Desktop\Desktop\ComboFix-quarantined-files.txt 2012-01-14 17:19 - 2012-01-14 17:09 - 0000000 ____D C:\Windows\ERDNT 2012-01-14 17:19 - 2009-07-14 04:20 - 0000000 __RHD C:\users\Default 2012-01-14 17:19 - 2009-07-14 04:20 - 0000000 ___RD C:\users\Public 2012-01-14 15:56 - 2012-01-14 15:56 - 0000000 ____D C:\Program Files (x86)\ESET 2012-01-14 15:56 - 2009-07-14 06:32 - 0000000 ____D C:\Windows\Downloaded Program Files 2012-01-14 02:03 - 2012-01-14 02:03 - 0000284 ____A C:\repair.bat 2012-01-14 01:48 - 2012-01-14 01:48 - 10847608 ____A (Malwarebytes Corporation ) C:\Users\PotatoHead_Desktop\Downloads\mbam-setup-1.60.0.1800.exe 2012-01-14 01:48 - 2012-01-14 01:48 - 0001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Malwarebytes 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\Users\All Users\Malwarebytes 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\ProgramData\Malwarebytes 2012-01-14 01:48 - 2012-01-14 01:48 - 0000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2012-01-14 01:43 - 2012-01-14 01:43 - 0150612 ____A C:\Users\PotatoHead_Desktop\Downloads\OTL.Txt 2012-01-14 01:43 - 2012-01-14 01:43 - 0041168 ____A C:\Users\PotatoHead_Desktop\Downloads\Extras.Txt 2012-01-14 01:28 - 2012-01-14 01:28 - 0584192 ____A (OldTimer Tools) C:\Users\PotatoHead_Desktop\Downloads\OTL.exe 2012-01-14 01:27 - 2010-03-07 12:20 - 0000000 ____D C:\Program Files (x86)\MSI Afterburner 2012-01-14 01:24 - 2012-01-14 01:24 - 0001066 ____A C:\Users\PotatoHead_Desktop\Desktop\MSI Kombustor.lnk 2012-01-14 01:24 - 2012-01-14 01:24 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\MSIAfterburnerSetup210 2012-01-14 01:24 - 2012-01-14 01:24 - 0000000 ____D C:\Program Files (x86)\MSI Kombustor 2012-01-14 01:24 - 2012-01-14 01:23 - 25854771 ____A C:\Users\PotatoHead_Desktop\Downloads\MSIAfterburnerSetup210.zip 2012-01-14 01:15 - 2012-01-14 01:15 - 0513160 ____A (AMD Inc.) C:\Users\PotatoHead_Desktop\Downloads\amd_catalyst_11.12_cap2.exe 2012-01-13 20:29 - 2012-01-13 20:29 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\ESET 2012-01-13 18:26 - 2010-03-07 18:37 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\vlc 2012-01-10 21:01 - 2011-12-27 20:37 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\skyrim 2012-01-10 19:46 - 2010-03-07 03:14 - 54008112 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2012-01-08 14:41 - 2011-10-29 13:36 - 0001120 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1815020974-3984948832-1307443358-1001Core.job 2012-01-06 21:06 - 2012-01-06 21:06 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\skse_1_04_02 2012-01-06 20:53 - 2011-10-28 16:58 - 0043626 ____A C:\shared.log 2012-01-06 20:51 - 2011-10-07 11:31 - 0000000 ____D C:\Program Files (x86)\Origin 2012-01-06 20:44 - 2011-10-07 11:31 - 0002680 ____A C:\Windows\KB893803v2.log 2011-12-29 14:22 - 2010-03-07 03:00 - 0000000 ____D C:\Program Files (x86)\Mozilla Firefox 2011-12-28 21:46 - 2011-12-28 21:31 - 0000401 ____A C:\Users\PotatoHead_Desktop\d3d_antilag.log 2011-12-28 21:31 - 2010-03-06 19:52 - 0000000 ____D C:\users\PotatoHead_Desktop 2011-12-28 21:13 - 2011-12-28 21:13 - 0001541 ____A C:\Users\PotatoHead_Desktop\Desktop\skyrim - Verknüpfung.lnk 2011-12-28 20:24 - 2011-12-28 20:24 - 0001907 ____A C:\Users\PotatoHead_Desktop\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk 2011-12-28 20:11 - 2011-12-28 20:11 - 0000000 ____D C:\Users\All Users\ESET 2011-12-28 20:11 - 2011-12-28 20:11 - 0000000 ____D C:\ProgramData\ESET 2011-12-28 20:00 - 2010-03-07 12:59 - 0642841 ____A C:\Windows\DirectX.log 2011-12-27 23:11 - 2010-05-17 20:43 - 0000000 ____D C:\Users\PotatoHead_Desktop\Desktop\Games 2011-12-22 15:49 - 2010-12-26 18:08 - 0000000 ____D C:\AMD 2011-12-22 15:47 - 2011-12-22 15:47 - 0000000 ____D C:\Users\All Users\ATI 2011-12-22 15:47 - 2011-12-22 15:47 - 0000000 ____D C:\ProgramData\ATI 2011-12-22 15:47 - 2011-12-22 15:47 - 0000000 ____D C:\Program Files (x86)\AMD APP 2011-12-22 15:46 - 2010-08-30 15:14 - 0000000 ____D C:\Program Files\ATI Technologies 2011-12-22 15:36 - 2011-12-22 15:36 - 114931120 ____A (Advanced Micro Devices, Inc.) C:\Users\PotatoHead_Desktop\Downloads\11-12_vista64_win7_64_dd_ccc_ocl.exe 2011-12-22 15:36 - 2011-12-22 15:36 - 0511024 ____A (AMD Inc.) C:\Users\PotatoHead_Desktop\Downloads\amd_catalyst_11.12_cap1.exe 2011-12-19 22:47 - 2010-03-09 13:38 - 0280904 ____A C:\Windows\SysWOW64\PnkBstrB.xtr 2011-12-19 22:47 - 2010-03-09 13:28 - 0280904 ____A C:\Windows\SysWOW64\PnkBstrB.exe 2011-12-19 21:42 - 2010-03-09 13:28 - 0280904 ____A C:\Windows\SysWOW64\PnkBstrB.ex0 2011-12-19 19:32 - 2010-04-03 17:04 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Mumble 2011-12-17 17:24 - 2011-12-17 17:24 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\Post_Process_Injector_2_0_Manual-131 2011-12-17 17:13 - 2009-07-14 04:20 - 0000000 ____D C:\Windows\rescache 2011-12-17 16:45 - 2010-03-07 18:44 - 0000000 ____D C:\Windows\SysWOW64\directx 2011-12-15 23:43 - 2011-12-15 23:43 - 0000000 ____D C:\Windows\System32\appmgmt 2011-12-15 23:40 - 2011-09-29 12:54 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\FIFA 12 2011-12-15 20:14 - 2010-03-09 13:28 - 0075136 ____A C:\Windows\SysWOW64\PnkBstrA.exe 2011-12-15 19:35 - 2009-07-14 05:45 - 0276360 ____A C:\Windows\System32\FNTCACHE.DAT 2011-12-15 19:34 - 2011-10-07 11:52 - 0000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2011-12-15 00:21 - 2010-11-01 23:54 - 0000000 ____D C:\Program Files (x86)\EA Games 2011-12-15 00:19 - 2010-03-07 02:09 - 0000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2011-12-15 00:15 - 2011-12-14 23:55 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\Battlefield Play4Free 2011-12-14 23:58 - 2010-03-09 13:38 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\PunkBuster 2011-12-14 18:21 - 2009-07-14 04:20 - 0000000 ____D C:\Windows\SysWOW64\de-DE 2011-12-14 18:21 - 2009-07-14 04:20 - 0000000 ____D C:\Windows\System32\de-DE 2011-12-10 15:24 - 2012-01-14 01:48 - 0023152 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys 2011-12-01 19:03 - 2011-12-01 19:02 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\Ubisoft Game Launcher 2011-12-01 19:02 - 2011-12-01 19:02 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\Assassin's Creed Revelations 2011-12-01 19:02 - 2010-04-09 16:55 - 0000000 ____D C:\Users\All Users\Ubisoft 2011-12-01 19:02 - 2010-04-09 16:55 - 0000000 ____D C:\ProgramData\Ubisoft 2011-12-01 18:35 - 2010-04-09 16:44 - 0000000 ____D C:\Program Files (x86)\Ubisoft 2011-11-28 23:48 - 2011-11-28 23:48 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\ANNO 2070 2011-11-28 23:14 - 2010-04-09 16:55 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Ubisoft 2011-11-28 19:47 - 2011-11-28 19:47 - 0000000 ____D C:\Windows\System32\Macromed 2011-11-28 19:47 - 2011-07-07 19:57 - 0414368 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2011-11-28 19:09 - 2011-11-28 19:09 - 0570046 ____A C:\Users\PotatoHead_Desktop\Downloads\DFCRC13.zip 2011-11-28 19:04 - 2011-11-28 19:04 - 0000000 ____D C:\Users\PotatoHead_Desktop\Downloads\cpu-z-159 2011-11-24 19:39 - 2010-03-07 16:39 - 0000000 ___RD C:\Games 2011-11-24 05:52 - 2011-12-14 18:21 - 3145216 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2011-11-23 22:45 - 2010-04-03 17:15 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Skype 2011-11-19 23:31 - 2009-07-14 06:08 - 0032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2011-11-19 23:09 - 2010-03-07 02:47 - 0000000 ____D C:\Program Files (x86)\ATI Technologies 2011-11-19 22:44 - 2011-11-19 22:44 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\Rockstar Games 2011-11-19 22:44 - 2011-11-11 02:03 - 0000000 ____D C:\LANoire 2011-11-19 15:58 - 2012-01-14 19:11 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll 2011-11-19 15:01 - 2012-01-14 19:11 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2011-11-17 19:02 - 2010-05-17 20:44 - 0000000 ____D C:\Users\PotatoHead_Desktop\Desktop\Programme 2011-11-17 07:49 - 2012-01-15 18:35 - 0152432 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2011-11-17 07:49 - 2012-01-15 18:35 - 0095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys 2011-11-17 07:44 - 2012-01-15 18:35 - 0459232 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2011-11-17 07:41 - 2012-01-10 19:45 - 1731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2011-11-17 07:35 - 2012-01-15 18:35 - 1447936 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll 2011-11-17 07:35 - 2012-01-15 18:35 - 0395776 ____A (Microsoft Corporation) C:\Windows\System32\webio.dll 2011-11-17 07:35 - 2012-01-15 18:35 - 0340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll 2011-11-17 07:35 - 2012-01-15 18:35 - 0136192 ____A (Microsoft Corporation) C:\Windows\System32\sspicli.dll 2011-11-17 07:35 - 2012-01-15 18:35 - 0029184 ____A (Microsoft Corporation) C:\Windows\System32\sspisrv.dll 2011-11-17 07:35 - 2012-01-15 18:35 - 0028160 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll 2011-11-17 07:33 - 2012-01-15 18:35 - 0031232 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe 2011-11-17 06:38 - 2012-01-10 19:45 - 1292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2011-11-17 06:35 - 2012-01-15 18:35 - 0314880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2011-11-17 06:34 - 2012-01-15 18:35 - 0224768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2011-11-17 06:34 - 2012-01-15 18:35 - 0022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2011-11-17 06:28 - 2012-01-15 18:35 - 0096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2011-11-15 19:32 - 2011-11-15 19:32 - 0000000 ____D C:\Program Files\ESET 2011-11-15 19:24 - 2010-04-03 17:14 - 0000000 ___RD C:\Program Files (x86)\Skype 2011-11-15 14:29 - 2010-03-06 19:34 - 0270720 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe 2011-11-12 17:16 - 2011-11-12 17:01 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\Skyrim 2011-11-12 17:01 - 2010-03-08 15:06 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\My Games 2011-11-12 01:40 - 2011-11-12 01:40 - 0001080 ____A C:\Windows\System32\settingsbkup.sfm 2011-11-12 01:40 - 2011-11-12 01:40 - 0001080 ____A C:\Windows\System32\settings.sfm 2011-11-11 19:51 - 2011-10-21 21:30 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Bioshock 2011-11-11 17:11 - 2011-03-30 19:11 - 0000000 ____D C:\Program Files (x86)\EASEUS 2011-11-11 17:05 - 2010-03-07 12:25 - 0000000 ____D C:\Program Files (x86)\TrueCrypt 2011-11-11 17:03 - 2011-11-11 17:03 - 0000032 ____A C:\Windows\SysWOW64\EUOD.DAT 2011-11-11 03:20 - 2011-11-07 20:24 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\ANNO 2070 Demo 2011-11-11 02:19 - 2011-11-11 02:19 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\Chromium 2011-11-11 02:03 - 2011-11-11 02:03 - 0000000 ____D C:\Users\All Users\Rockstar Games 2011-11-11 02:03 - 2011-11-11 02:03 - 0000000 ____D C:\ProgramData\Rockstar Games 2011-11-10 17:57 - 2011-11-10 17:57 - 0000000 ____D C:\Program Files (x86)\Smart Projects 2011-11-10 04:45 - 2011-11-10 04:45 - 10567680 ____A (Advanced Micro Devices, Inc.) C:\Windows\System32\Drivers\atikmdag.sys 2011-11-10 04:20 - 2011-11-10 04:20 - 25218048 ____A (Advanced Micro Devices, Inc.) C:\Windows\System32\atio6axx.dll 2011-11-10 04:17 - 2011-11-10 04:17 - 0208016 ____A C:\Windows\SysWOW64\atiapfxx.blb 2011-11-10 04:17 - 2011-11-10 04:17 - 0208016 ____A C:\Windows\System32\atiapfxx.blb 2011-11-10 04:17 - 2011-11-10 04:17 - 0159744 ____A (Advanced Micro Devices, Inc.) C:\Windows\System32\atiapfxx.exe 2011-11-10 04:16 - 2011-10-26 03:05 - 0774656 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll 2011-11-10 04:15 - 2010-08-04 02:54 - 0927232 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\aticfx64.dll 2011-11-10 04:12 - 2011-11-10 04:12 - 0516608 ____A (AMD) C:\Windows\System32\atieclxx.exe 2011-11-10 04:12 - 2011-11-10 04:12 - 0466944 ____A (Advanced Micro Devices, Inc.) C:\Windows\System32\ATIDEMGX.dll 2011-11-10 04:11 - 2011-11-10 04:11 - 0204288 ____A (AMD) C:\Windows\System32\atiesrxx.exe 2011-11-10 04:10 - 2011-11-10 04:10 - 0120320 ____A (AMD) C:\Windows\System32\atitmm64.dll 2011-11-10 04:09 - 2011-11-10 04:09 - 0423424 ____A (ATI Technologies, Inc.) C:\Windows\System32\atipdl64.dll 2011-11-10 04:09 - 2011-11-10 04:09 - 0360448 ____A (ATI Technologies, Inc.) C:\Windows\SysWOW64\atipdlxx.dll 2011-11-10 04:09 - 2011-11-10 04:09 - 0278528 ____A (ATI Technologies, Inc.) C:\Windows\SysWOW64\Oemdspif.dll 2011-11-10 04:09 - 2011-11-10 04:09 - 0059392 ____A (ATI Technologies, Inc.) C:\Windows\System32\atiedu64.dll 2011-11-10 04:09 - 2011-11-10 04:09 - 0043520 ____A (ATI Technologies, Inc.) C:\Windows\SysWOW64\ati2edxx.dll 2011-11-10 04:09 - 2011-11-10 04:09 - 0021504 ____A (AMD) C:\Windows\System32\atimuixx.dll 2011-11-10 04:06 - 2011-11-10 04:06 - 6077952 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll 2011-11-10 03:58 - 2011-11-10 03:58 - 18996224 ____A (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll 2011-11-10 03:51 - 2010-08-04 02:37 - 7405056 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atidxx64.dll 2011-11-10 03:40 - 2011-11-10 03:40 - 4061696 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atiumd6a.dll 2011-11-10 03:40 - 2011-11-10 03:40 - 1828864 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdmv.dll 2011-11-10 03:40 - 2011-11-10 03:40 - 1113088 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atiumd6v.dll 2011-11-10 03:36 - 2011-11-10 03:36 - 2043200 ____A C:\Windows\System32\atiumd6a.cap 2011-11-10 03:36 - 2011-11-10 03:36 - 0204960 ____A C:\Windows\SysWOW64\ativvsvl.dat 2011-11-10 03:36 - 2011-11-10 03:36 - 0204960 ____A C:\Windows\System32\ativvsvl.dat 2011-11-10 03:36 - 2011-11-10 03:36 - 0157152 ____A C:\Windows\SysWOW64\ativvsva.dat 2011-11-10 03:36 - 2011-11-10 03:36 - 0157152 ____A C:\Windows\System32\ativvsva.dat 2011-11-10 03:34 - 2011-11-10 03:34 - 13552640 ____A (Advanced Micro Devices Inc.) C:\Windows\System32\aticaldd64.dll 2011-11-10 03:34 - 2011-11-10 03:34 - 0051200 ____A (Advanced Micro Devices Inc.) C:\Windows\System32\aticalrt64.dll 2011-11-10 03:34 - 2011-11-10 03:34 - 0046080 ____A (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll 2011-11-10 03:34 - 2011-11-10 03:34 - 0044544 ____A (Advanced Micro Devices Inc.) C:\Windows\System32\aticalcl64.dll 2011-11-10 03:34 - 2011-11-10 03:34 - 0044032 ____A (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll 2011-11-10 03:33 - 2011-10-26 02:35 - 5852672 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll 2011-11-10 03:29 - 2011-11-10 03:29 - 11300864 ____A (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll 2011-11-10 03:29 - 2011-10-26 02:32 - 4200960 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll 2011-11-10 03:28 - 2011-11-10 03:28 - 2044928 ____A C:\Windows\SysWOW64\atiumdva.cap 2011-11-10 03:24 - 2011-11-10 03:24 - 7439360 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atiumd64.dll 2011-11-10 03:18 - 2010-02-03 04:23 - 0058880 ____A (AMD) C:\Windows\System32\coinst.dll 2011-11-10 03:13 - 2011-11-10 03:13 - 0494592 ____A (Advanced Micro Devices, Inc.) C:\Windows\System32\atiadlxx.dll 2011-11-10 03:13 - 2011-11-10 03:13 - 0039936 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atig6txx.dll 2011-11-10 03:13 - 2011-11-10 03:13 - 0017408 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atig6pxx.dll 2011-11-10 03:13 - 2011-11-10 03:13 - 0014336 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll 2011-11-10 03:13 - 2011-11-10 03:13 - 0014336 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atiglpxx.dll 2011-11-10 03:13 - 2010-02-03 04:24 - 0348160 ____A (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll 2011-11-10 03:12 - 2011-11-10 03:12 - 0325632 ____A (Advanced Micro Devices, Inc.) C:\Windows\System32\Drivers\atikmpag.sys 2011-11-10 03:12 - 2011-11-10 03:12 - 0032768 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll 2011-11-10 03:11 - 2011-11-10 03:11 - 0054784 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atimpc64.dll 2011-11-10 03:11 - 2011-11-10 03:11 - 0054784 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\amdpcom64.dll 2011-11-10 03:11 - 2011-11-10 03:11 - 0053760 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll 2011-11-10 03:11 - 2011-11-10 03:11 - 0053760 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll 2011-11-10 03:11 - 2011-11-10 03:11 - 0039424 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atiu9p64.dll 2011-11-10 03:11 - 2011-11-10 03:11 - 0032256 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll 2011-11-10 03:11 - 2011-10-12 20:29 - 0029184 ____A (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll 2011-11-10 03:11 - 2010-08-04 02:15 - 0041984 ____A (Advanced Micro Devices, Inc. ) C:\Windows\System32\atiuxp64.dll 2011-11-10 03:10 - 2011-11-10 03:10 - 0053248 ____A (ATI Technologies Inc.) C:\Windows\System32\Drivers\ati2erec.dll 2011-11-09 22:39 - 2011-11-09 22:39 - 17442304 ____A (Advanced Micro Devices Inc.) C:\Windows\System32\amdocl64.dll 2011-11-09 22:39 - 2011-11-09 22:39 - 0069632 ____A C:\Windows\System32\OpenVideo64.dll 2011-11-09 22:39 - 2011-11-09 22:39 - 0061952 ____A C:\Windows\System32\OVDecode64.dll 2011-11-09 22:39 - 2011-11-09 22:39 - 0059904 ____A C:\Windows\SysWOW64\OpenVideo.dll 2011-11-09 22:39 - 2011-11-09 22:39 - 0054784 ____A C:\Windows\SysWOW64\OVDecode.dll 2011-11-09 22:38 - 2011-11-09 22:38 - 14375936 ____A (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2011-11-09 22:37 - 2011-11-09 22:37 - 0044032 ____A (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2011-11-09 20:11 - 2009-07-14 04:20 - 0000000 ____D C:\Program Files\Common Files\System 2011-11-09 19:50 - 2011-11-09 19:50 - 0000000 ____D C:\Program Files (x86)\Rockstar Games 2011-11-09 15:57 - 2011-08-29 15:15 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\dxhr 2011-11-09 15:52 - 2010-03-23 00:22 - 0000000 ____D C:\Program Files (x86)\Ray Adams 2011-11-08 23:33 - 2011-11-08 23:33 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\201280 2011-11-08 23:29 - 2011-08-27 20:15 - 0000000 ____D C:\Program Files (x86)\Square Enix 2011-11-08 20:27 - 2010-03-07 13:48 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\TrueCrypt 2011-11-07 21:49 - 2010-11-02 00:44 - 0230864 ____A (TrueCrypt Foundation) C:\Windows\System32\Drivers\truecrypt.sys 2011-11-05 06:32 - 2011-12-14 18:21 - 0002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll 2011-11-05 05:26 - 2011-12-14 18:21 - 0002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2011-11-04 03:38 - 2011-12-14 18:21 - 17786368 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2011-11-04 02:59 - 2011-12-14 18:21 - 10886656 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2011-11-04 02:53 - 2011-12-14 18:22 - 2309120 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2011-11-04 02:46 - 2011-12-14 18:22 - 1345536 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2011-11-04 02:44 - 2011-12-14 18:22 - 1493504 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2011-11-04 02:44 - 2011-12-14 18:22 - 1390080 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2011-11-04 02:43 - 2011-12-14 18:22 - 0237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2011-11-04 02:41 - 2011-12-14 18:22 - 0085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2011-11-04 02:39 - 2011-12-14 18:22 - 0818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2011-11-04 02:36 - 2011-12-14 18:22 - 2144256 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2011-11-04 02:35 - 2011-12-14 18:22 - 0096256 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2011-11-04 02:34 - 2011-12-14 18:22 - 2382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2011-11-04 02:30 - 2011-12-14 18:22 - 0248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2011-11-04 00:02 - 2011-12-14 18:21 - 12279808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2011-11-03 23:47 - 2011-12-14 18:22 - 1798144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2011-11-03 23:46 - 2011-12-14 18:21 - 9705472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2011-11-03 23:40 - 2011-12-14 18:22 - 1427456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2011-11-03 23:40 - 2011-12-14 18:22 - 1103360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2011-11-03 23:39 - 2011-12-14 18:22 - 1127424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2011-11-03 23:38 - 2011-12-14 18:22 - 0231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2011-11-03 23:37 - 2011-12-14 18:22 - 0065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2011-11-03 23:34 - 2011-12-14 18:22 - 0716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2011-11-03 23:32 - 2011-12-14 18:22 - 1792000 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2011-11-03 23:32 - 2011-12-14 18:22 - 0072704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2011-11-03 23:31 - 2011-12-14 18:22 - 2382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2011-11-03 23:28 - 2011-12-14 18:22 - 0176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2011-11-03 18:51 - 2010-04-03 17:04 - 0000000 ____D C:\Program Files (x86)\Mumble 2011-11-01 11:47 - 2011-11-01 11:47 - 0275984 ____A C:\Windows\Minidump\110111-29374-01.dmp 2011-11-01 11:47 - 2011-05-03 17:46 - 461238864 ____A C:\Windows\MEMORY.DMP 2011-11-01 11:47 - 2011-05-03 17:46 - 0000000 ____D C:\Windows\Minidump 2011-10-31 18:36 - 2010-03-07 02:46 - 0000000 ____D C:\ATI 2011-10-30 14:49 - 2011-10-30 14:37 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\Battlefield Heroes 2011-10-30 14:10 - 2011-10-30 14:10 - 0275984 ____A C:\Windows\Minidump\103011-32245-01.dmp 2011-10-30 00:55 - 2011-10-30 00:55 - 0275984 ____A C:\Windows\Minidump\103011-33446-01.dmp 2011-10-29 18:41 - 2011-10-29 16:35 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\ESN Sonar 2011-10-29 14:20 - 2010-03-07 02:34 - 0000000 ____D C:\Users\All Users\Creative 2011-10-29 14:20 - 2010-03-07 02:34 - 0000000 ____D C:\ProgramData\Creative 2011-10-29 14:10 - 2010-03-07 02:34 - 0000000 ____D C:\Program Files\Creative 2011-10-29 14:10 - 2010-03-07 02:34 - 0000000 ____D C:\Program Files (x86)\Creative 2011-10-29 14:03 - 2010-03-07 02:34 - 0000000 ___HD C:\Program Files (x86)\Creative Installation Information 2011-10-29 14:02 - 2010-03-07 02:34 - 0466520 ____A (Creative Labs) C:\Windows\System32\wrap_oal.dll 2011-10-29 14:02 - 2010-03-07 02:34 - 0445016 ____A (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2011-10-29 14:02 - 2010-03-07 02:34 - 0123480 ____A (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll 2011-10-29 14:02 - 2010-03-07 02:34 - 0109144 ____A (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2011-10-29 14:02 - 2010-03-07 02:34 - 0000159 __RAH C:\Windows\ctfile.rfc 2011-10-29 14:02 - 2010-03-07 02:33 - 0000000 ____D C:\Windows\System32\Data 2011-10-29 13:59 - 2011-10-29 13:57 - 40184120 ____A (Creative Technology Ltd) C:\Users\PotatoHead_Desktop\Downloads\SBXF_PCDRVBETA_US_2_18_0015A.exe 2011-10-29 13:59 - 2011-10-29 13:55 - 64536808 ____A (Creative Technology Ltd) C:\Users\PotatoHead_Desktop\Downloads\CSL_PCAPPBETA_LB_2_61_49.exe 2011-10-29 13:57 - 2011-10-29 13:56 - 10199136 ____A (Creative Technology Ltd) C:\Users\PotatoHead_Desktop\Downloads\ALMY_PCAPP_BETA_LB_1_43_06.exe 2011-10-29 13:46 - 2011-10-29 13:46 - 0275984 ____A C:\Windows\Minidump\102911-30529-01.dmp 2011-10-29 13:37 - 2011-10-29 13:36 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\Google 2011-10-29 13:16 - 2011-10-29 13:16 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\Battlefield 3 2011-10-29 12:34 - 2011-10-29 12:33 - 0000000 ____D C:\PB 2011-10-29 11:52 - 2011-10-07 11:31 - 0000000 ____D C:\Program Files (x86)\Origin Games 2011-10-29 11:23 - 2010-03-06 19:52 - 0000174 __ASH C:\Users\PotatoHead_Desktop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 2011-10-28 18:30 - 2010-11-28 17:37 - 0000000 ___HD C:\Windows\msdownld.tmp 2011-10-28 16:57 - 2011-10-07 11:31 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Roaming\Origin 2011-10-28 16:57 - 2011-10-07 11:31 - 0000000 ____D C:\Users\PotatoHead_Desktop\AppData\Local\Origin 2011-10-28 16:55 - 2011-02-02 21:40 - 0157472 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe 2011-10-28 16:55 - 2011-02-02 21:40 - 0145184 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe 2011-10-28 16:55 - 2011-02-02 21:40 - 0145184 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe 2011-10-28 16:55 - 2010-08-12 21:43 - 0472808 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll 2011-10-26 06:25 - 2012-01-14 19:11 - 1572864 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll 2011-10-26 06:25 - 2012-01-14 19:11 - 0366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll 2011-10-26 06:21 - 2011-12-14 18:21 - 0043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll 2011-10-26 05:32 - 2012-01-14 19:11 - 1328128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2011-10-26 05:32 - 2012-01-14 19:11 - 0514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2011-10-25 21:21 - 2011-10-25 21:21 - 0066560 ____A C:\Windows\System32\OVDecoder64.dll 2011-10-25 21:21 - 2011-10-25 21:21 - 0056832 ____A C:\Windows\SysWOW64\OVDecoder.dll 2011-10-21 22:47 - 2011-11-11 17:11 - 0025224 ____A (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\System32\fbnative.exe 2011-10-21 22:46 - 2011-11-11 17:12 - 0189576 ____A (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\System32\Drivers\EuFdDisk.sys 2011-10-21 22:46 - 2011-11-11 17:12 - 0050312 ____A C:\Windows\System32\Drivers\EUBKMON.sys 2011-10-21 22:46 - 2011-03-30 19:12 - 0044680 ____A (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\System32\Drivers\eubakup.sys 2011-10-21 22:46 - 2011-03-30 19:12 - 0019592 ____A (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\System32\Drivers\eudskacs.sys 2011-10-21 22:00 - 2011-10-21 21:30 - 0000000 ____D C:\Users\PotatoHead_Desktop\Documents\Bioshock 2011-10-21 21:14 - 2011-10-21 21:14 - 0000000 ____D C:\Program Files (x86)\2K Games 2011-10-21 20:30 - 2011-10-21 20:30 - 0243168 ____A C:\Windows\System32\atiicdxx.dat 2011-10-21 20:16 - 2011-10-21 20:16 - 1843200 ____A (Multicore Ware) C:\Windows\SysWOW64\SlotMaximizerBe.dll 2011-10-21 20:15 - 2011-10-21 20:15 - 0104448 ____A (Multicore Ware) C:\Windows\SysWOW64\SlotMaximizerAg.dll 2011-10-21 20:12 - 2011-10-21 20:12 - 2763264 ____A (Multicore Ware) C:\Windows\System32\SlotMaximizerBe.dll 2011-10-21 20:07 - 2011-10-21 20:07 - 0125440 ____A (Multicore Ware) C:\Windows\System32\SlotMaximizerAg.dll ========================= Known DLLs (Whitelisted) ============ ========================= Bamital & volsnap Check ============ C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ========================= Memory info ====================== Percentage of memory in use: 14% Total physical RAM: 4095.18 MB Available physical RAM: 3502.15 MB Total Pagefile: 4093.32 MB Available Pagefile: 3494.05 MB Total Virtual: 8192 MB Available Virtual: 8191.9 MB ======================= Partitions ========================= 2 Drive c: () (Fixed) (Total:465.66 GB) (Free:206.13 GB) NTFS 3 Drive e: (GRMCPRXFRER_DE_DVD) (CDROM) (Total:2.97 GB) (Free:0 GB) UDF 5 Drive g: () (Removable) (Total:1.86 GB) (Free:1.86 GB) FAT32 6 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS 7 Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] Datentr„ger ### Status Gr”áe Frei Dyn GPT --------------- ------------- ------- ------- --- --- Datentr„ger 0 Online 465 GB 0 B Datentr„ger 1 Online 1906 MB 0 B Datentr„gerpartitionierung wird beendet... ========================================================== Last Boot: 2012-01-14 20:34 ======================= End Of Log ========================== |
|
19.01.2012, 16:38
| #20 |
| /// Selecta Jahrusso | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Öffne die Internetoptionen über Start – Systemsteuerung – Netzwerk und Internet – Internetoptionen Wählen Sie hier Sicherheit und klicke auf Standardstufe. Downloade dir Farbar's Service Scanner neu und versuche diese zu starten.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
19.01.2012, 18:37
| #21 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Hilft nicht. Zwar war die Sicherheitsstufe auf Benutzerdefiniert eingestellt,aber die Standardstufe bringt keine Besserung. Zudem ist der geschützte Modus unter Sicherheit deaktiviert... |
|
19.01.2012, 22:18
| #22 |
| /// Selecta Jahrusso | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Sonst irgendwelche anderen Probleme ? Wie Google Suchumleitungen und dergleichen. Die Logs scheinen vorerst mal OK
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
19.01.2012, 22:37
| #23 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Nein. Mir ist bis auf bisher aufgezähltes nichts weiter aufgefallen. Browser gehen soweit ohne Probleme, egal ob IE,FF oder Chrome... Also ich vermute, dass es evtl. am letzten Windows Update lag/liegt. Danach war der Rechner ein paar Tage aus und danach kamen diese Probleme... Hatte etwa noch eine Woche vorher 2 fremde Sticks dran (zum Bilder hin und her kopieren), aber ESET hat dabei nichts gefunden... Autoplay war wohl an... Geändert von PotatoHead (19.01.2012 um 22:46 Uhr) |
|
20.01.2012, 07:58
| #24 |
| /// Selecta Jahrusso | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Eventuell schon beantwortet, aber ich muss nochmal sicher stellen. Du kannst alle Dateien im abgesicherten Modus ausführen, nur im Normalmodus gehen nur keine .exe Dateien oder andere auch nicht ? Lass mal FSS.com im Abgesicherten Modus laufen.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
20.01.2012, 11:06
| #25 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Puuuh, bin mir jetzt nicht ganz sicher, was du mit anderen Dateien außer .exe meinst?! Also die FSS.com ging ja auch nicht. Ob sich nun alle Treiber laden und auch .dll Dateien auslesen lassen weiss ich nicht. Wie könnte ich das testen? FSS.com im abgesicherten Modus kommt dann wieder heute abend... Mfg... |
|
20.01.2012, 18:47
| #26 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen FSS.txt Farbar Service Scanner Version: 18-01-2012 01 Ran by PotatoHead_Desktop (administrator) on 20-01-2012 at 18:46:28 Microsoft Windows 7 Professional Service Pack 1 (X64) Boot Mode: Nerwork **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Yahoo IP is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ SDRSVC Service is not running. Checking service configuration: The start type of SDRSVC service is OK. The ImagePath of SDRSVC service is OK. The ServiceDll of SDRSVC service is OK. VSS Service is not running. Checking service configuration: The start type of VSS service is OK. The ImagePath of VSS service is OK. System Restore Disabled Policy: ======================== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log **** |
|
21.01.2012, 04:24
| #27 |
| /// Selecta Jahrusso | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Also im abgesicherten Modus geht alles ? Deinstalliere bitte einmal ESET und berichte wie es mit .exe Dateien im Normalmodus aussieht.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
21.01.2012, 13:28
| #28 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Unglaublicherweise funktioniert nun wieder alles. Firewall ist an, Update konnte ich gerade ausführen, Origin Update funktioniert, ein Grafikkarten Update ging auch. Oh man, was mach ich jetzt? ESET ist eigentlich ein gutes Programm; habs mir letztes Jahr extra gekauft! |
|
21.01.2012, 14:12
| #29 |
| /// Selecta Jahrusso | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen Ich mag ESET auch bzw wird deren Suite sehr hoch angesehen bei uns in der Szene ( jeder hat aber auch seine eigene Meinung ) Ich würde jetzt erstmal versuchen, ESET wieder zu installieren. Wenn dann das Problem erneut auftaucht, wende dich an deren Support. Dieser steht dir nämlich zu und können sicher schneller das Problem lösen als ich ( Stichwort Update ).
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
21.01.2012, 23:27
| #30 |
| | Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen OK, seit der Neuinstallation funktioniert wieder alles einwandfrei. Wusste doch gleich dass es kein Schädling sein kann  Auf jedenfall Vielen Dank für die schnelle und ausführliche Unterstützung! Wieder ein paar Tools mehr kennengelernt. Mfg... |
|
| Themen zu Windows Firewall & Update geht nicht;Heruntergeladene Daten lassen sich nicht ausführen |
| 0x8007042c, befall, cpu, dateien, fehlercode 5, fehlermeldung, firewall, folge, forum, nicht mehr, nicht sicher, origin, plagegeister, problem, ram, rechner, rootkits, speicher, starten, trojaner, update, updates, viren, virus, windows, windows firewall, windows update, zugriff, zugriff verweigert |
Linear-Darstellung
