Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: "Ads not by this site virus" und anderer Virus - Fragen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 10.04.2013, 12:19   #1
aharonov
/// TB-Ausbilder
 
"Ads not by this site virus" und anderer Virus - Fragen - Standard

"Ads not by this site virus" und anderer Virus - Fragen



Wie gesagt, ohne irgendwelche Logs zu sehen, kann ich nur spekulieren.

Was du beschrieben hast, tönt relativ harmlos, aber ich hab ja keine Ahnung, was du sonst noch alles drauf gehabt hast oder immer noch hast (und selbst nicht bemerkst)..
__________________
cheers,
Leo

Alt 10.04.2013, 12:43   #2
Barney'
 
"Ads not by this site virus" und anderer Virus - Fragen - Standard

"Ads not by this site virus" und anderer Virus - Fragen



Zitat:
Zitat von aharonov Beitrag anzeigen
Wie gesagt, ohne irgendwelche Logs zu sehen, kann ich nur spekulieren.

Was du beschrieben hast, tönt relativ harmlos, aber ich hab ja keine Ahnung, was du sonst noch alles drauf gehabt hast oder immer noch hast (und selbst nicht bemerkst)..
1. Log:
Zitat:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:42 on 10/04/2013 (Maik)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 10.04.2013 13:44:19 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Maik\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
15,97 Gb Total Physical Memory | 13,08 Gb Available Physical Memory | 81,90% Memory free
31,94 Gb Paging File | 27,87 Gb Available in Paging File | 87,25% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 12,46 Gb Free Space | 22,34% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 901,30 Gb Free Space | 96,76% Space Free | Partition Type: NTFS
 
Computer Name: MAIK-PC | User Name: Maik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.04.10 13:44:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Maik\Downloads\OTL.exe
PRC - [2013.04.06 15:03:36 | 012,736,664 | ---- | M] (Activision Publishing Inc.) -- D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
PRC - [2013.04.06 13:38:43 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2013.04.06 13:37:23 | 000,565,472 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
PRC - [2013.04.06 13:37:09 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2013.04.06 13:37:07 | 000,345,312 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2013.03.29 21:53:56 | 001,631,144 | ---- | M] (Valve Corporation) -- D:\Steam\Steam.exe
PRC - [2013.03.29 21:53:56 | 000,543,656 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2013.02.27 17:15:08 | 009,403,880 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
PRC - [2012.02.23 23:33:32 | 000,071,464 | ---- | M] (Valve Corporation) -- D:\Steam\GameOverlayUI.exe
PRC - [2011.11.10 18:01:00 | 000,506,384 | ---- | M] () -- C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
PRC - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.04.10 13:14:44 | 000,155,232 | -H-- | M] () -- C:\Users\Maik\AppData\Local\Temp\~5FFB.tmp
MOD - [2013.03.29 21:53:56 | 001,114,024 | ---- | M] () -- D:\Steam\bin\chromehtml.dll
MOD - [2013.03.27 02:16:40 | 020,341,672 | ---- | M] () -- D:\Steam\bin\libcef.dll
MOD - [2013.03.26 00:23:34 | 000,651,776 | ---- | M] () -- D:\Steam\SDL2.dll
MOD - [2013.03.22 00:50:33 | 000,390,096 | ---- | M] () -- C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
MOD - [2013.03.22 00:50:32 | 012,662,224 | ---- | M] () -- C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll
MOD - [2013.03.22 00:50:31 | 004,050,896 | ---- | M] () -- C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\pdf.dll
MOD - [2013.03.22 00:49:41 | 000,598,480 | ---- | M] () -- C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\libglesv2.dll
MOD - [2013.03.22 00:49:40 | 000,124,368 | ---- | M] () -- C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\libegl.dll
MOD - [2013.03.22 00:49:38 | 001,606,096 | ---- | M] () -- C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\ffmpegsumo.dll
MOD - [2013.02.27 17:15:08 | 000,236,008 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
MOD - [2013.02.27 17:15:08 | 000,230,376 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
MOD - [2013.02.27 17:15:02 | 000,431,080 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
MOD - [2013.02.27 17:15:02 | 000,159,208 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
MOD - [2012.12.11 19:51:10 | 001,100,800 | ---- | M] () -- D:\Steam\bin\avcodec-53.dll
MOD - [2012.12.11 19:51:10 | 000,192,000 | ---- | M] () -- D:\Steam\bin\avformat-53.dll
MOD - [2012.12.11 19:51:10 | 000,124,416 | ---- | M] () -- D:\Steam\bin\avutil-51.dll
MOD - [2011.11.10 18:01:00 | 000,506,384 | ---- | M] () -- C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2012.02.15 05:13:00 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013.04.07 00:02:39 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.06 13:38:43 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013.04.06 13:37:23 | 000,565,472 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2013.04.06 13:37:09 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2013.03.29 21:53:56 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010.05.20 15:26:28 | 000,199,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - File not found [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys -- (AODDriver4.01)
DRV:64bit: - [2013.04.06 13:39:15 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2013.04.06 13:39:15 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2013.04.06 13:39:15 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.15 05:48:32 | 010,856,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.02.15 04:13:12 | 000,327,680 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011.12.05 21:47:30 | 000,095,248 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2011.06.10 08:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.04.15 08:37:50 | 000,079,488 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2011.04.15 08:37:50 | 000,040,064 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.04 16:00:14 | 000,390,632 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmtxhci.sys -- (asmtxhci)
DRV:64bit: - [2011.03.04 16:00:14 | 000,126,952 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmthub3.sys -- (asmthub3)
DRV:64bit: - [2010.11.28 22:50:38 | 000,044,672 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.09.30 21:00:06 | 000,180,736 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.09.30 21:00:06 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2010.05.20 15:26:28 | 000,036,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo)
DRV:64bit: - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.11.24 03:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009.11.24 03:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{C7A75626-9C28-4364-A30F-2A9C7EF1F08B}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=4beda98e-fce2-4d8d-8051-ffa82de59360&apn_sauid=638F91F8-2016-4DAC-AF84-2A5C1FF729F2
IE - HKCU\..\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC8}: "URL" = hxxp://search.icq.com/search/results.php?q=%s&ch_id=hm&search_mode=web
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Maik\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Maik\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
 
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Maik\AppData\Local\Google\Chrome\Application\26.0.1410.43\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Maik\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - Extension: Google Docs = C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Mail = C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Programme\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\StartSuperCharger.exe (MSI)
O4 - HKCU..\Run: [icq] C:\Users\Maik\AppData\Roaming\ICQM\icq.exe (ICQ)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5A87AF5-D3D6-4BA0-9212-FF9512008A17}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Programme\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18:64bit: - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Programme\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0b3d147b-9eac-11e2-b96c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{0b3d147b-9eac-11e2-b96c-806e6f6e6963}\Shell\AutoRun\command - "" = E:\DVDSetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.04.08 13:27:13 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013.04.07 13:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2013.04.07 00:02:51 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Macromedia
[2013.04.07 00:02:50 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Adobe
[2013.04.07 00:02:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2013.04.06 23:27:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.04.06 23:20:23 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2013.04.06 23:19:56 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\OEM
[2013.04.06 23:19:56 | 000,000,000 | ---D | C] -- C:\Hotfix
[2013.04.06 23:19:56 | 000,000,000 | ---D | C] -- C:\Drivers
[2013.04.06 23:18:46 | 000,000,000 | ---D | C] -- C:\Windows\de-DE
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407
[2013.04.06 23:18:45 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407
[2013.04.06 23:16:52 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui
[2013.04.06 23:16:42 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui
[2013.04.06 23:16:41 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui
[2013.04.06 23:16:41 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui
[2013.04.06 21:01:23 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2013.04.06 21:01:22 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\Logitech
[2013.04.06 21:01:22 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Leadertech
[2013.04.06 21:01:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2013.04.06 21:01:08 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech Gaming Software
[2013.04.06 21:00:47 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Logitech
[2013.04.06 21:00:47 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Logishrd
[2013.04.06 17:48:55 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\OpenOffice.org
[2013.04.06 17:27:12 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2013.04.06 17:27:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3
[2013.04.06 15:00:59 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2013.04.06 14:32:51 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\TS3Client
[2013.04.06 14:32:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2013.04.06 14:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamSpeak 3 Client
[2013.04.06 14:28:13 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
[2013.04.06 14:28:06 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\ICQM
[2013.04.06 14:27:57 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\ICQ-Profile
[2013.04.06 14:24:42 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Skype
[2013.04.06 14:24:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.04.06 14:24:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013.04.06 14:24:37 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013.04.06 14:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013.04.06 14:19:05 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2013.04.06 14:18:55 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2013.04.06 14:18:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013.04.06 14:18:21 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013.04.06 14:14:09 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
[2013.04.06 14:14:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSI Afterburner
[2013.04.06 14:12:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2013.04.06 14:12:14 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
[2013.04.06 14:12:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2013.04.06 14:12:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2013.04.06 14:12:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2013.04.06 14:12:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2013.04.06 14:12:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2013.04.06 14:10:37 | 000,058,880 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll
[2013.04.06 14:07:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013.04.06 14:07:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2013.04.06 13:59:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2013.04.06 13:59:32 | 002,604,376 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2013.04.06 13:59:32 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2013.04.06 13:59:32 | 000,221,024 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
[2013.04.06 13:59:32 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2013.04.06 13:59:32 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2013.04.06 13:59:32 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2013.04.06 13:59:32 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
[2013.04.06 13:59:32 | 000,078,688 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
[2013.04.06 13:59:32 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2013.04.06 13:59:30 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2013.04.06 13:59:30 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2013.04.06 13:59:30 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2013.04.06 13:59:30 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2013.04.06 13:59:30 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2013.04.06 13:59:30 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2013.04.06 13:59:29 | 003,768,152 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2013.04.06 13:59:29 | 003,308,376 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
[2013.04.06 13:59:29 | 002,132,824 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2013.04.06 13:59:29 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
[2013.04.06 13:59:29 | 000,426,328 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
[2013.04.06 13:59:29 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2013.04.06 13:59:29 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2013.04.06 13:59:29 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2013.04.06 13:59:29 | 000,136,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
[2013.04.06 13:59:29 | 000,118,104 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
[2013.04.06 13:59:29 | 000,074,072 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
[2013.04.06 13:59:28 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2013.04.06 13:59:28 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2013.04.06 13:59:28 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2013.04.06 13:59:28 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2013.04.06 13:59:28 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2013.04.06 13:59:28 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2013.04.06 13:59:28 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2013.04.06 13:59:28 | 000,527,872 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
[2013.04.06 13:59:28 | 000,515,584 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
[2013.04.06 13:59:28 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2013.04.06 13:59:28 | 000,439,808 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
[2013.04.06 13:59:28 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2013.04.06 13:59:28 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2013.04.06 13:59:28 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2013.04.06 13:59:28 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2013.04.06 13:59:28 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2013.04.06 13:51:55 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Avira
[2013.04.06 13:50:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft LifeCam
[2013.04.06 13:50:27 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft LifeCam
[2013.04.06 13:50:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft LifeCam
[2013.04.06 13:46:50 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\AMD
[2013.04.06 13:46:48 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\ATI
[2013.04.06 13:46:48 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\ATI
[2013.04.06 13:45:20 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.04.06 13:43:49 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\Google
[2013.04.06 13:43:02 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\DoNotTrackPlus
[2013.04.06 13:40:49 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\AskToolbar
[2013.04.06 13:40:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com
[2013.04.06 13:40:31 | 000,130,016 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2013.04.06 13:40:31 | 000,100,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2013.04.06 13:40:31 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2013.04.06 13:40:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2013.04.06 13:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2013.04.06 13:34:16 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2013.04.06 13:31:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
[2013.04.06 13:31:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSI
[2013.04.06 13:31:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asmedia Technology
[2013.04.06 13:31:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASM104xUSB3
[2013.04.06 13:31:03 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2013.04.06 13:30:43 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2013.04.06 13:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2013.04.06 13:29:40 | 000,539,240 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2013.04.06 13:29:36 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2013.04.06 13:29:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2013.04.06 13:28:32 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2013.04.06 13:28:13 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2013.04.06 13:28:12 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013.04.06 13:28:06 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2013.04.06 13:28:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2013.04.06 13:28:03 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2013.04.06 13:25:45 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\Diagnostics
[2013.04.06 13:24:45 | 000,000,000 | R--D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.04.06 13:24:45 | 000,000,000 | R--D | C] -- C:\Users\Maik\Searches
[2013.04.06 13:24:45 | 000,000,000 | R--D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.04.06 13:24:39 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Identities
[2013.04.06 13:24:38 | 000,000,000 | R--D | C] -- C:\Users\Maik\Contacts
[2013.04.06 13:24:37 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\VirtualStore
[2013.04.06 13:24:34 | 000,000,000 | --SD | C] -- C:\Users\Maik\AppData\Roaming\Microsoft
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Videos
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Saved Games
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Pictures
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Music
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Links
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Favorites
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Downloads
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Documents
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\Desktop
[2013.04.06 13:24:34 | 000,000,000 | R--D | C] -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Vorlagen
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\AppData\Local\Verlauf
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\AppData\Local\Temporary Internet Files
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Startmenü
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\SendTo
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Recent
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Netzwerkumgebung
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Lokale Einstellungen
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Documents\Eigene Videos
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Documents\Eigene Musik
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Eigene Dateien
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Documents\Eigene Bilder
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Druckumgebung
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Cookies
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\AppData\Local\Anwendungsdaten
[2013.04.06 13:24:34 | 000,000,000 | -HSD | C] -- C:\Users\Maik\Anwendungsdaten
[2013.04.06 13:24:34 | 000,000,000 | -H-D | C] -- C:\Users\Maik\AppData
[2013.04.06 13:24:34 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\Temp
[2013.04.06 13:24:34 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Local\Microsoft
[2013.04.06 13:24:34 | 000,000,000 | ---D | C] -- C:\Users\Maik\AppData\Roaming\Media Center Programs
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Recovery
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Programme
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2013.04.06 13:24:33 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2013.04.06 13:24:30 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013.04.06 13:21:06 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013.04.06 13:20:56 | 000,000,000 | -HSD | C] -- C:\System Volume Information
 
========== Files - Modified Within 30 Days ==========
 
[2013.04.10 13:42:22 | 000,000,000 | ---- | M] () -- C:\Users\Maik\defogger_reenable
[2013.04.10 13:25:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.10 13:11:27 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.04.10 13:11:27 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.04.10 13:11:27 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.04.10 13:11:27 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.04.10 13:11:27 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.04.10 13:06:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.04.10 13:06:45 | 4271,484,926 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.09 21:39:19 | 000,020,656 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.09 21:39:19 | 000,020,656 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.09 20:54:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1514262915-3440531814-3870741222-1000UA.job
[2013.04.08 13:54:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1514262915-3440531814-3870741222-1000Core.job
[2013.04.07 12:58:34 | 000,294,184 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.04.07 12:18:16 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.04.07 12:18:15 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013.04.06 23:27:05 | 000,002,070 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.04.06 23:18:36 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat
[2013.04.06 23:18:36 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat
[2013.04.06 17:27:12 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013.04.06 15:25:45 | 000,000,201 | ---- | M] () -- C:\Users\Maik\Desktop\Call of Duty Modern Warfare 3.url
[2013.04.06 15:24:43 | 000,000,201 | ---- | M] () -- C:\Users\Maik\Desktop\Call of Duty Modern Warfare 3 - Multiplayer.url
[2013.04.06 15:00:59 | 000,000,202 | ---- | M] () -- C:\Users\Maik\Desktop\Call of Duty Black Ops II.url
[2013.04.06 15:00:59 | 000,000,202 | ---- | M] () -- C:\Users\Maik\Desktop\Call of Duty Black Ops II - Zombies.url
[2013.04.06 15:00:59 | 000,000,202 | ---- | M] () -- C:\Users\Maik\Desktop\Call of Duty Black Ops II - Multiplayer.url
[2013.04.06 14:32:33 | 000,001,166 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2013.04.06 14:28:13 | 000,001,761 | ---- | M] () -- C:\Users\Maik\Desktop\ICQ.lnk
[2013.04.06 14:24:38 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013.04.06 14:18:22 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.04.06 14:14:09 | 000,001,090 | ---- | M] () -- C:\Users\Maik\Desktop\MSI Afterburner.lnk
[2013.04.06 14:13:10 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2013.04.06 14:12:16 | 000,002,047 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk
[2013.04.06 14:07:14 | 000,000,538 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2013.04.06 13:50:42 | 000,002,041 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft LifeCam.lnk
[2013.04.06 13:45:28 | 000,002,317 | ---- | M] () -- C:\Users\Maik\Desktop\Google Chrome.lnk
[2013.04.06 13:39:15 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2013.04.06 13:39:15 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2013.04.06 13:39:15 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2013.04.06 13:31:57 | 000,002,087 | ---- | M] () -- C:\Users\Public\Desktop\Super-Charger.lnk
[2013.04.06 13:22:38 | 000,055,513 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2013.04.06 13:22:38 | 000,055,513 | ---- | M] () -- C:\Windows\SysNative\license.rtf
 
========== Files Created - No Company Name ==========
 
[2013.04.10 13:42:22 | 000,000,000 | ---- | C] () -- C:\Users\Maik\defogger_reenable
[2013.04.07 12:29:59 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013.04.07 12:18:16 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.04.07 12:18:15 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013.04.07 12:03:36 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013.04.07 00:02:39 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.06 23:19:57 | 000,000,029 | RH-- | C] () -- C:\Windows\version
[2013.04.06 23:18:56 | 000,653,928 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat
[2013.04.06 23:18:56 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat
[2013.04.06 23:18:56 | 000,129,800 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat
[2013.04.06 23:18:56 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat
[2013.04.06 17:27:12 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013.04.06 15:25:45 | 000,000,201 | ---- | C] () -- C:\Users\Maik\Desktop\Call of Duty Modern Warfare 3.url
[2013.04.06 15:24:43 | 000,000,201 | ---- | C] () -- C:\Users\Maik\Desktop\Call of Duty Modern Warfare 3 - Multiplayer.url
[2013.04.06 15:00:59 | 000,000,202 | ---- | C] () -- C:\Users\Maik\Desktop\Call of Duty Black Ops II.url
[2013.04.06 15:00:59 | 000,000,202 | ---- | C] () -- C:\Users\Maik\Desktop\Call of Duty Black Ops II - Zombies.url
[2013.04.06 15:00:59 | 000,000,202 | ---- | C] () -- C:\Users\Maik\Desktop\Call of Duty Black Ops II - Multiplayer.url
[2013.04.06 14:32:33 | 000,001,166 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2013.04.06 14:28:13 | 000,001,761 | ---- | C] () -- C:\Users\Maik\Desktop\ICQ.lnk
[2013.04.06 14:24:38 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013.04.06 14:18:22 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.04.06 14:14:09 | 000,110,592 | ---- | C] () -- C:\Windows\SysNative\rtvcvfw32.dll
[2013.04.06 14:14:09 | 000,001,090 | ---- | C] () -- C:\Users\Maik\Desktop\MSI Afterburner.lnk
[2013.04.06 14:13:10 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013.04.06 14:12:16 | 000,002,047 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk
[2013.04.06 14:10:37 | 000,235,072 | ---- | C] () -- C:\Windows\SysWow64\atiapfxx.blb
[2013.04.06 14:10:37 | 000,235,072 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb
[2013.04.06 14:10:37 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2013.04.06 14:10:37 | 000,204,952 | ---- | C] () -- C:\Windows\SysNative\ativvsvl.dat
[2013.04.06 14:10:37 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2013.04.06 14:10:37 | 000,157,144 | ---- | C] () -- C:\Windows\SysNative\ativvsva.dat
[2013.04.06 14:10:37 | 000,037,305 | ---- | C] () -- C:\Windows\atiogl.xml
[2013.04.06 14:10:37 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2013.04.06 14:10:37 | 000,003,917 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat
[2013.04.06 14:07:14 | 000,000,538 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2013.04.06 13:59:30 | 000,177,052 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2013.04.06 13:50:42 | 000,002,041 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft LifeCam.lnk
[2013.04.06 13:45:20 | 000,002,317 | ---- | C] () -- C:\Users\Maik\Desktop\Google Chrome.lnk
[2013.04.06 13:43:50 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1514262915-3440531814-3870741222-1000UA.job
[2013.04.06 13:43:50 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1514262915-3440531814-3870741222-1000Core.job
[2013.04.06 13:41:08 | 000,002,070 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.04.06 13:31:57 | 000,002,087 | ---- | C] () -- C:\Users\Public\Desktop\Super-Charger.lnk
[2013.04.06 13:29:40 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2013.04.06 13:24:50 | 000,001,409 | ---- | C] () -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2013.04.06 13:24:46 | 000,001,443 | ---- | C] () -- C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.04.06 13:22:35 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2013.04.06 13:22:34 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2013.04.06 13:20:56 | 4271,484,926 | -HS- | C] () -- C:\hiberfil.sys
[2012.02.14 22:05:16 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2012.01.31 06:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2013.04.06 14:31:15 | 000,000,000 | ---D | M] -- C:\Users\Maik\AppData\Roaming\ICQ-Profile
[2013.04.06 14:28:12 | 000,000,000 | ---D | M] -- C:\Users\Maik\AppData\Roaming\ICQM
[2013.04.06 21:01:22 | 000,000,000 | ---D | M] -- C:\Users\Maik\AppData\Roaming\Leadertech
[2013.04.06 17:48:55 | 000,000,000 | ---D | M] -- C:\Users\Maik\AppData\Roaming\OpenOffice.org
[2013.04.10 13:13:46 | 000,000,000 | ---D | M] -- C:\Users\Maik\AppData\Roaming\TS3Client
 
========== Purity Check ==========
 
 

< End of report >
         
--- --- ---


OTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 10.04.2013 13:44:19 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Maik\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
15,97 Gb Total Physical Memory | 13,08 Gb Available Physical Memory | 81,90% Memory free
31,94 Gb Paging File | 27,87 Gb Available in Paging File | 87,25% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 12,46 Gb Free Space | 22,34% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 901,30 Gb Free Space | 96,76% Space Free | Partition Type: NTFS
 
Computer Name: MAIK-PC | User Name: Maik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{135B03A2-B3A2-409E-9996-67A6BA53CB6E}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty black ops ii\t6zm.exe | 
"{1C3876DC-3ADD-4FDB-8AE3-D10911A9588C}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty black ops ii\t6mp.exe | 
"{1C44AF10-A0AD-4257-B121-C31FDA6F4C6E}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe | 
"{2BB7CE70-26AA-470F-BBFE-74C0FFAE271D}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty black ops ii\t6zm.exe | 
"{3468BF3E-CB59-49DA-9ED9-90230DAABA5C}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe | 
"{36C3AA16-1D9A-4053-8A68-FFA6113CC075}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe | 
"{3D8403ED-5E1F-469C-B9F1-1E26BFFDA099}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 
"{4A838DD9-6691-4B07-A9E5-F868596F9D95}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe | 
"{5422B6FA-9850-49C8-84F1-A3684B4FDEFF}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty black ops ii\t6sp.exe | 
"{570E1FC1-22F9-41B4-99FA-116CCD6A570D}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe | 
"{5C059551-A4B3-429F-84E5-3D9451A38EBE}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 
"{5EA36F51-D969-4E44-9275-2B88025F1F2F}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe | 
"{897DE4F4-A732-4432-98C2-B07CFC2B34D0}" = protocol=6 | dir=in | app=c:\users\maik\appdata\roaming\icqm\icq.exe | 
"{8A94AFD7-334A-4966-ADC1-684C4C161F73}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\call of duty black ops ii\t6sp.exe | 
"{8FAAB96B-9920-4ECD-8E95-B4118808A98C}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 
"{B8BBC9D2-3634-470D-BBCA-E3B94CA9D9D1}" = protocol=6 | dir=in | app=d:\steam\steam.exe | 
"{BF0234D5-47EC-4885-B818-93C5C0DA9364}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe | 
"{C41204AC-C256-4361-8DD0-A2D087B0947B}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty black ops ii\t6mp.exe | 
"{D80D0D86-EF54-457D-898D-55D7A7795DBD}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe | 
"{E7B69C39-327A-4B04-B1F7-968E331C9E33}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{EA1D21DC-A5E2-4592-A6CE-3603299120FD}" = protocol=17 | dir=in | app=c:\users\maik\appdata\roaming\icqm\icq.exe | 
"{F10DB4DA-42EC-411E-8BC8-556846EC9913}" = protocol=17 | dir=in | app=d:\steam\steam.exe | 
"{FED1A226-38C6-4F3D-8593-48844B0C3318}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1AFC919D-751B-A5D7-B17D-7C0067A65D2E}" = AMD Drag and Drop Transcoding
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software
"{6965A8D2-465D-4F98-9FAA-0E9E2348F329}" = Microsoft LifeCam
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{A810DDAA-774D-8EE3-94E9-A4DD2DE008A0}" = ccc-utility64
"{DA2737A4-B639-96F4-1CC2-30D2919EE1FB}" = AMD Steady Video Plug-In 
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{E6E3BFF1-C1CE-8560-2563-5538F43AA0A3}" = AMD Media Foundation Decoders
"{EEF3FF3A-ED17-260C-E6C8-5089D43BD3CE}" = AMD Catalyst Install Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FE0E0750-F77B-C8E3-3734-E71CC0CF0DA3}" = AMD Accelerated Video Transcoding
"CCleaner" = CCleaner
"Logitech Gaming Software" = Logitech Gaming Software 8.45
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{12EC39F2-AD04-F6AF-418F-FA75C60AF3B7}" = Catalyst Control Center Graphics Previews Common
"{12F3F8B2-2DF5-BFF7-F636-CC24AC864339}" = CCC Help Finnish
"{17A9B4DC-73C9-8BD4-0B1E-3878F869E0D2}" = CCC Help English
"{19F89153-1BF6-0962-264A-E254FFF2210C}" = CCC Help Swedish
"{1A8BCAD3-6F77-7333-62F1-0B31183D57A4}" = CCC Help Japanese
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{2AD567C9-7B27-9D9E-D7CD-24F0C3A92868}" = CCC Help Italian
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{3734E29B-B370-1A68-D3F0-98AECB1D05CD}" = CCC Help Turkish
"{3AECBB89-C281-CD75-12C5-25EDD00B2213}" = CCC Help Greek
"{3B410D6A-2EA5-4C58-350E-069702C2997C}" = CCC Help Spanish
"{3B848D8C-8153-A2CA-4A75-327C9A0A6E2C}" = CCC Help Dutch
"{44D4BDB1-4108-13BD-3A7C-4915F6116601}" = Catalyst Control Center Localization All
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{59557396-8012-0BA2-CD9B-F043D188B6C9}" = CCC Help Portuguese
"{6C6E3C68-682E-9998-51C1-0BDE801E22E6}" = CCC Help French
"{6C79E543-0989-FFAA-0C31-6518107D1596}" = CCC Help Norwegian
"{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1" = Super-Charger
"{81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1" = Winki
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{87F7BAD4-4ED2-1412-CD54-696D6EADD889}" = CCC Help Czech
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8EE1E061-9FB4-F6DE-5BC0-0F7C5BE1E63A}" = Catalyst Control Center InstallProxy
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E95E74A-970D-163A-51CC-6FA941B2DD45}" = CCC Help German
"{A4B3E67A-8CED-E584-7C23-0F63BFC8DAB4}" = CCC Help Thai
"{AA9DF51B-5528-7554-E8F6-450407B20244}" = CCC Help Chinese Standard
"{ABBFF208-7D49-FBA1-5388-83FD2B059DA1}" = CCC Help Polish
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B812A0C9-44F2-E6B0-88F1-9FA6142857D9}" = CCC Help Danish
"{C90C86D7-957C-F094-4843-D387FDB320B0}" = AMD VISION Engine Control Center
"{DC18093A-53D6-5601-15F3-28831A5CBC99}" = CCC Help Korean
"{E351EA86-8E19-2B52-22F0-3A1DF4093D0C}" = CCC Help Hungarian
"{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}" = Asmedia ASM104x USB 3.0 Host Controller Driver
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F76CA8E9-0673-62CE-D37A-6EA2CF7D7159}" = CCC Help Russian
"{F8303282-5E82-9492-E08B-8B8C0FDC3B14}" = CCC Help Chinese Traditional
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Afterburner" = MSI Afterburner 2.1.0
"Avira AntiVir Desktop" = Avira Free Antivirus
"Steam App 202970" = Call of Duty: Black Ops II
"Steam App 202990" = Call of Duty: Black Ops II - Multiplayer
"Steam App 212910" = Call of Duty: Black Ops II - Zombies
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Avira SearchFree Toolbar plus Web Protection Updater
"Google Chrome" = Google Chrome
"ICQ" = ICQ 8.0 (build 6008, für aktuellen Benutzer)
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 07.04.2013 07:14:28 | Computer Name = Maik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iw5mp.exe, Version: 0.0.0.0, Zeitstempel:
 0x50b9061a  Name des fehlerhaften Moduls: iw5mp.exe, Version: 0.0.0.0, Zeitstempel:
 0x50b9061a  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0037fcaa  ID des fehlerhaften Prozesses:
 0x11b8  Startzeit der fehlerhaften Anwendung: 0x01ce33810e37e740  Pfad der fehlerhaften
 Anwendung: D:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe  Pfad
 des fehlerhaften Moduls: D:\Steam\steamapps\common\Call of Duty Modern Warfare 
3\iw5mp.exe  Berichtskennung: 4fe335a3-9f74-11e2-81cc-8c89a59cda0e
 
Error - 07.04.2013 07:14:41 | Computer Name = Maik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iw5mp.exe, Version: 0.0.0.0, Zeitstempel:
 0x50b9061a  Name des fehlerhaften Moduls: iw5mp.exe, Version: 0.0.0.0, Zeitstempel:
 0x50b9061a  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0037fcaa  ID des fehlerhaften Prozesses:
 0x97c  Startzeit der fehlerhaften Anwendung: 0x01ce3381156e0468  Pfad der fehlerhaften
 Anwendung: D:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe  Pfad
 des fehlerhaften Moduls: D:\Steam\steamapps\common\Call of Duty Modern Warfare 
3\iw5mp.exe  Berichtskennung: 579d78da-9f74-11e2-81cc-8c89a59cda0e
 
Error - 07.04.2013 14:08:22 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 08.04.2013 07:13:23 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 08.04.2013 12:01:32 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 08.04.2013 15:14:46 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 09.04.2013 09:52:29 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 09.04.2013 14:55:30 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 09.04.2013 15:38:54 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 10.04.2013 07:08:40 | Computer Name = Maik-PC | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 07.04.2013 07:01:54 | Computer Name = Maik-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80242016 fehlgeschlagen: Update für die Kompatibilitätsansichtsliste für
 Internet Explorer*8 für Windows 7 für x64-basierte Systeme (KB2598845)
 
Error - 07.04.2013 14:06:37 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 08.04.2013 07:11:37 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 08.04.2013 11:59:49 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 08.04.2013 15:13:00 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 09.04.2013 09:50:44 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 09.04.2013 14:53:45 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 09.04.2013 15:37:09 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 10.04.2013 00:34:15 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
Error - 10.04.2013 07:06:55 | Computer Name = Maik-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%3
 
 
< End of report >
         
--- --- ---
__________________


Geändert von Barney' (10.04.2013 um 12:56 Uhr)

Antwort

Themen zu "Ads not by this site virus" und anderer Virus - Fragen
ads, ads not by this site, andere, anderer, anmerkung, formatierte, frage, fragen, googel, herunterladen, netzwerk, not, plötzlich, programm, seite, seiten, spiel, this, viel werbung, virenfrei, virus, wegbekomme, werbung




Ähnliche Themen: "Ads not by this site virus" und anderer Virus - Fragen


  1. "Suspicious.Cloud.9" (Trojaner) und "SAPE.DnwldSponsor.2" (Virus?, vielleicht False Positive)
    Plagegeister aller Art und deren Bekämpfung - 22.08.2015 (23)
  2. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  3. Windows 8: "Snapdo" und "Ads not by this site" Probleme
    Log-Analyse und Auswertung - 29.09.2013 (3)
  4. Sicherheitscenter deaktiviert und Virus "ADWARE/InstallCo.HA" "ADWARE/bProtect.D" "TR/Mevade.A.95" gefunden
    Log-Analyse und Auswertung - 10.09.2013 (10)
  5. Diverse "Buren" "Lamar" sowie ein Exploit Virus entdeckt
    Plagegeister aller Art und deren Bekämpfung - 04.09.2013 (13)
  6. 100 Euro "Bundespolizei" Virus (Zugriff ohne Bildschirmübernahme durch Virus möglich)
    Plagegeister aller Art und deren Bekämpfung - 04.06.2013 (34)
  7. "Redirect-Virus" unter Windows 8 / "document has moved redirecting..."
    Plagegeister aller Art und deren Bekämpfung - 23.01.2013 (11)
  8. Diverse Fehlermeldungen bei Start des Systems nach "Entfernen" des "Polizei-Virus"
    Log-Analyse und Auswertung - 27.10.2012 (10)
  9. "Falsche" E-Mail von Freund mit Link ins Netz -> Virus oder nur "Werbung"?
    Log-Analyse und Auswertung - 30.07.2012 (1)
  10. Vermehrtes Virenvrkommen nach "50€-Virus" unteranderem "TR/injetor569344.5"
    Plagegeister aller Art und deren Bekämpfung - 04.02.2012 (1)
  11. "a5uyh54usr5u" verursacht "beinahe" Whitescreen? Virus?
    Plagegeister aller Art und deren Bekämpfung - 10.01.2012 (6)
  12. Verspätetes "Xmas-geschenk": 50€-Virus mit Text "System wird aus sicherheitsgründen blockiert"
    Log-Analyse und Auswertung - 02.01.2012 (5)
  13. Microsoft Recovery Virus - Virus entfernt, aber Daten bleiben "unsichtbar"
    Log-Analyse und Auswertung - 28.04.2011 (5)
  14. Virus "Suela-1042" in "Pagefile.sys" der Win XP-Partition
    Alles rund um Mac OSX & Linux - 02.12.2010 (2)
  15. Virus oder Wurm " Perflib_Perfdata_1cc " & " Perflib_Perfdata_228 "
    Log-Analyse und Auswertung - 23.08.2010 (23)
  16. Trojaner/Virus lähmt das Internet "extrem". "TR/Cospet.EO.1" !
    Plagegeister aller Art und deren Bekämpfung - 10.06.2010 (11)
  17. Bekomme "http://default.home/" und "ACCESS BLOCKED - VIRUS WARNING" nicht mehr los
    Log-Analyse und Auswertung - 16.01.2005 (5)

Zum Thema "Ads not by this site virus" und anderer Virus - Fragen - Wie gesagt, ohne irgendwelche Logs zu sehen, kann ich nur spekulieren. Was du beschrieben hast, tönt relativ harmlos, aber ich hab ja keine Ahnung, was du sonst noch alles drauf - "Ads not by this site virus" und anderer Virus - Fragen...
Archiv
Du betrachtest: "Ads not by this site virus" und anderer Virus - Fragen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.