Moin Moin!

Bin neu hier im Forum und hab mich angemeldet, weil ich ein größeres Problem habe und die Hilfe von Experten benötige.
Seit kurzem plagt mich ein Virus, der unter anderem für die Weiterleitung auf die Betrügerseite
"qfind" Schuld ist. Zu dem bremst er merklich das System aus und verursacht gerne auch mal ganze Systemabstürze.
Da ich eigentlich wenig Lust habe mein Windows deswegen platt zu machen, hoffe ich, dass ihr mir helfen könnt.

PS:Wenn ich etwas vergessen haben sollte oder ihr noch irgendwelche Information benötigt,
werde ich diese so schnell wie möglich nachliefern.

Mfg

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Scan.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2013 01
Ran by xXBaseXx (administrator) on 17-06-2013 22:15:24
Running from C:\Users\xXBaseXx\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(EnTech Taiwan) C:\Program Files (x86)\softOSD\softOSD.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(EnTech Taiwan) C:\Windows\SysWOW64\softLCP.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE [x]
HKLM\...\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [7477016 2013-04-25] (Logitech Inc.)
MountPoints2: {9488151c-1e2d-11df-8422-002421eecdd5} - F:\autorun.exe
MountPoints2: {ba2b95b6-f317-11df-83a7-a2ffbd12294c} - H:\setup.exe
MountPoints2: {fffd9228-f59d-11de-9ed3-806e6f6e6963} - D:\setup.exe
HKLM-x32\...\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry [x]
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642656 2013-02-26] (Advanced Micro Devices, Inc.)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\..\Interfaces\{61AE6971-47C3-47E4-8E0C-28539E7B6CF9}: [NameServer]8.26.56.26,156.154.70.22
Tcpip\..\Interfaces\{69B94DD0-3985-434A-8453-0D943E2FAA64}: [NameServer]62.109.123.196 213.191.74.18
Tcpip\..\Interfaces\{8BED4635-8D6C-46D0-AB8E-BD1538073031}: [NameServer]8.26.56.26,156.154.70.22

FireFox:
========
FF ProfilePath: C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 5555
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar - C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\Sonar\npesnsonar.dll (ESN AB)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.3 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch - C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\npesnlaunch.dll (ESN AB)
FF Plugin-x32: @esn/esnlaunch,version=1.104.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.96.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.4.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.4.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox - C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame - C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Extension: Battlefield Play4Free - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\battlefieldplay4free@ea.com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\ich@maltegoetz.de
FF Extension: HNG downloader/starter (live) - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\npretoxlive@live.heroesandgenerals.com
FF Extension: No Name - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\Strata40@SpewBoy.au
FF Extension: WOT - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: client - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\client@anonymox.net.xpi
FF Extension: jid1-qQSMEVsYTOjgYA - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi
FF Extension: No Name - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S4 dell_power_nap_service; C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe [11776 2011-02-28] ()
S4 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4303928 2011-04-24] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-01] ()
R2 softOSD; C:\Program Files (x86)\softOSD\softOSD.exe [291384 2010-12-18] (EnTech Taiwan)
S4 VhdAttach; C:\Program Files\Josip Medved\VHD Attach\VhdAttachService.exe [263808 2012-06-10] (Josip Medved)
S4 WireHelpSvc; C:\Program Files\Common Files\WireHelpSvc.exe [168864 2012-01-24] ()
S4 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-02-15] ()
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)
R2 ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [147472 2012-01-24] (<Turtle Entertainment>)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66800 2013-01-17] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-02-15] ()
S3 MSI_MSIBIOS_010507; C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [33592 2010-05-10] (Your Corporation)
S3 MSI_MSIBIOS_010507; C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [33592 2010-05-10] (Your Corporation)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [79488 2004-05-13] (Protection Technology)
S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology)
S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
R1 PStrip64; C:\Windows\System32\drivers\pstrip64.sys [13008 2006-09-30] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2009-12-31] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2009-12-31] ()
S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [108072 2007-06-25] (MCCI Corporation)
R1 se64a; C:\Windows\System32\Drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
R1 se64a; C:\Windows\SysWow64\Drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
R0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [75384 2009-02-03] (Protection Technology (StarForce))
S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
R0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [77952 2009-02-03] (Protection Technology (StarForce))
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-02-12] (Anchorfree Inc.)
S3 ALSysIO; \??\C:\Users\xXBaseXx\AppData\Local\Temp\ALSysIO64.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 dump_wmimmc; \??\C:\Users\xXBaseXx\Desktop\NewEliteSRO\GameGuard\dump_wmimmc.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [x]
S0 prohlp02; System32\drivers\prohlp02.sys [x]
S0 prosync1; System32\drivers\prosync1.sys [x]
S0 sfhlp01; System32\drivers\sfhlp01.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
U3 kwdyakow; \??\C:\Users\xXBaseXx\AppData\Local\Temp\kwdyakow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-17 22:15 - 2013-06-17 22:15 - 00000000 ____D C:\FRST
2013-06-17 22:14 - 2013-06-17 22:14 - 01926844 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST64.exe
2013-06-17 22:13 - 2013-06-17 22:14 - 01365333 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST.exe
2013-06-17 21:56 - 2013-06-17 21:56 - 00057854 ____A C:\Users\xXBaseXx\Desktop\Logs.rar
2013-06-17 21:44 - 2013-06-17 21:44 - 00338900 ____A C:\Users\xXBaseXx\Desktop\Gmer_logs.log
2013-06-17 17:59 - 2013-06-17 17:59 - 00249176 ____A C:\Users\xXBaseXx\Desktop\Extras.Txt
2013-06-17 17:58 - 2013-06-17 17:58 - 00101500 ____A C:\Users\xXBaseXx\Desktop\OTL.Txt
2013-06-17 17:45 - 2013-06-17 17:45 - 00000478 ____A C:\Users\xXBaseXx\Desktop\defogger_disable.log
2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____D C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)
2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____A C:\Users\xXBaseXx\defogger_reenable
2013-06-17 17:44 - 2013-06-17 17:44 - 00377856 ____A C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe
2013-06-17 17:43 - 2013-06-17 17:43 - 00602112 ____A (OldTimer Tools) C:\Users\xXBaseXx\Desktop\OTL.exe
2013-06-17 17:41 - 2013-06-17 17:41 - 00050477 ____A C:\Users\xXBaseXx\Desktop\Defogger.exe
2013-06-17 17:39 - 2013-06-17 17:40 - 00007308 ____A C:\Users\xXBaseXx\Desktop\Trojaner board (1).txt
2013-06-16 03:00 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-16 03:00 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-16 03:00 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-16 03:00 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-16 03:00 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-16 03:00 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-16 03:00 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-16 03:00 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-13 02:59 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-13 02:59 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-13 02:59 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-13 02:59 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-13 02:59 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-13 02:59 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-13 02:59 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-13 02:59 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-13 02:59 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-13 02:59 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-13 02:59 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-13 02:59 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-13 02:59 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-13 00:44 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-13 00:44 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-13 00:44 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-13 00:44 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-13 00:44 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-13 00:44 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-13 00:44 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-13 00:44 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-13 00:44 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-13 00:44 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-13 00:44 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-13 00:44 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-13 00:44 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-13 00:44 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-13 00:44 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-13 00:44 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-13 00:44 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-13 00:43 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-13 00:43 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-05 20:58 - 2013-06-17 17:02 - 00000000 ___RD C:\Users\xXBaseXx\Dropbox
2013-06-05 20:58 - 2013-06-05 20:59 - 10561781 ____A C:\Users\xXBaseXx\Downloads\Dropbox.zip
2013-06-05 20:54 - 2013-06-17 17:02 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Dropbox
2013-06-05 20:53 - 2013-06-05 20:54 - 32966136 ____A (Dropbox, Inc.) C:\Users\xXBaseXx\Downloads\Dropbox 2.0.26.exe
2013-05-28 19:32 - 2013-05-28 19:32 - 00000000 ____D C:\Users\xXBaseXx\Documents\CPY_SAVES
2013-05-28 19:28 - 2013-05-16 21:24 - 00000000 ____D C:\Users\xXBaseXx\Downloads\Metro.Last.Light.Update.1.0.0.2.READNFO-CPY
2013-05-28 19:08 - 2013-05-28 19:28 - 33779945 ____A C:\Users\xXBaseXx\Downloads\Metro.Last.Light.Update.1.0.0.2.READNFO-CPY.rar
2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\Documents\LOLReplay
2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Logitech
2013-05-27 06:59 - 2013-05-27 07:06 - 22990573 ____A C:\Users\xXBaseXx\Downloads\MSIAfterburnerSetup231.zip
2013-05-25 13:40 - 2013-05-26 18:22 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\FileZilla
2013-05-25 13:40 - 2013-05-25 13:40 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-05-25 13:39 - 2013-05-25 13:40 - 04811793 ____A (FileZilla Project) C:\Users\xXBaseXx\Downloads\FileZilla_3.7.0.1_win32-setup.exe
2013-05-25 12:17 - 2013-02-15 22:44 - 08043008 ____A (Dxtory Software) C:\Windows\System32\DxtoryCodec.dll
2013-05-24 20:16 - 2013-05-24 20:16 - 04135551 ____A (Dxtory Software                                             ) C:\Users\xXBaseXx\Downloads\DxtorySetup2.0.122.exe
2013-05-22 21:08 - 2013-05-22 21:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-22 00:19 - 2013-05-22 00:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-05-21 20:18 - 2013-05-21 20:20 - 88790396 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part06.rar.part
2013-05-21 20:12 - 2013-05-21 20:20 - 98400354 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part05.rar.part
2013-05-21 20:11 - 2013-05-21 20:18 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part04.rar
2013-05-21 20:04 - 2013-05-21 20:11 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part03.rar
2013-05-21 20:01 - 2013-05-21 20:12 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part02.rar
2013-05-21 19:55 - 2013-05-21 20:04 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part01.rar
2013-05-21 19:51 - 2013-05-21 20:20 - 483533716 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part27.rar.part
2013-05-21 19:50 - 2013-05-21 20:20 - 516733060 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part26.rar.part
2013-05-21 19:47 - 2013-05-28 19:03 - 422225372 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part25.rar.part
2013-05-21 19:21 - 2013-05-21 19:21 - 00000000 ____D C:\ProgramData\Steam
2013-05-21 18:47 - 2013-05-21 19:21 - 00000000 ____D C:\Program Files (x86)\Resident Evil 6
2013-05-21 18:19 - 2013-05-21 20:01 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part24.rar
2013-05-21 18:13 - 2013-05-21 19:51 - 524288002 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part23.rar
2013-05-21 18:11 - 2013-05-21 19:54 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part22.rar
2013-05-21 18:08 - 2013-05-21 19:50 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part21.rar
2013-05-21 18:07 - 2013-05-21 19:47 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part20.rar
2013-05-21 17:37 - 2013-05-21 18:19 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part19.rar
2013-05-21 17:30 - 2013-05-21 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part18.rar
2013-05-21 17:29 - 2013-05-21 18:11 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part17.rar
2013-05-21 17:27 - 2013-05-21 18:08 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part16.rar
2013-05-21 17:26 - 2013-05-21 18:07 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part15.rar
2013-05-21 16:53 - 2013-05-21 17:36 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part14.rar
2013-05-21 16:51 - 2013-05-21 17:29 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part13.rar
2013-05-21 16:47 - 2013-05-21 17:26 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part12.rar
2013-05-21 16:44 - 2013-05-21 17:29 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part11.rar
2013-05-21 16:43 - 2013-05-21 17:27 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part10.rar
2013-05-21 16:09 - 2013-05-21 16:47 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part09.rar
2013-05-21 16:07 - 2013-05-21 16:50 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part08.rar
2013-05-21 16:06 - 2013-05-21 16:53 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part07.rar
2013-05-21 16:03 - 2013-05-21 16:43 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part06.rar
2013-05-21 14:41 - 2013-05-21 14:56 - 374113450 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part31.rar
2013-05-21 14:26 - 2013-05-21 14:54 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part30.rar
2013-05-21 14:13 - 2013-05-21 14:49 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part29.rar
2013-05-21 14:07 - 2013-05-21 14:52 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part28.rar
2013-05-21 14:05 - 2013-05-21 14:45 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part27.rar
2013-05-21 13:59 - 2013-05-21 14:41 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part26.rar
2013-05-21 13:39 - 2013-05-21 14:25 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part25.rar
2013-05-21 13:29 - 2013-05-21 14:05 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part24.rar
2013-05-21 13:25 - 2013-05-21 14:07 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part23.rar
2013-05-21 13:19 - 2013-05-21 14:13 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part22.rar
2013-05-21 13:16 - 2013-05-21 13:59 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part21.rar
2013-05-21 04:31 - 2013-05-21 13:39 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part20.rar
2013-05-21 04:23 - 2013-05-21 13:28 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part19.rar
2013-05-21 04:13 - 2013-05-21 13:19 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part18.rar
2013-05-21 04:10 - 2013-05-21 13:25 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part17.rar
2013-05-21 04:06 - 2013-05-21 13:16 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part16.rar
2013-05-21 03:43 - 2013-05-21 04:30 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part15.rar
2013-05-21 03:36 - 2013-05-21 04:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part14.rar
2013-05-21 03:32 - 2013-05-21 04:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part13.rar
2013-05-21 03:27 - 2013-05-21 04:10 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part12.rar
2013-05-21 03:23 - 2013-05-21 04:06 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part11.rar
2013-05-21 02:52 - 2013-05-21 03:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part10.rar
2013-05-21 02:51 - 2013-05-21 03:32 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part09.rar
2013-05-21 02:46 - 2013-05-21 03:27 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part08.rar
2013-05-21 02:45 - 2013-05-21 03:36 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part07.rar
2013-05-21 02:43 - 2013-05-21 03:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part06.rar
2013-05-21 02:02 - 2013-05-21 02:52 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part05.rar
2013-05-21 02:02 - 2013-05-21 02:02 - 03385180 ____A C:\Users\xXBaseXx\Downloads\metlas5gilcron13rld.rar
2013-05-21 01:32 - 2013-05-28 19:37 - 00000000 ____D C:\Program Files (x86)\Metro Last Light
2013-05-20 22:12 - 2013-05-21 16:09 - 477226214 ____A C:\Users\xXBaseXx\Downloads\resevi6upd51377tirld.rar
2013-05-20 22:12 - 2013-05-21 02:50 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part01.rar
2013-05-20 22:12 - 2013-05-21 02:46 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part02.rar
2013-05-20 22:12 - 2013-05-21 02:45 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part03.rar
2013-05-20 22:12 - 2013-05-21 02:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part04.rar
2013-05-19 13:35 - 2013-05-19 13:35 - 03820336 ____A C:\Users\xXBaseXx\Downloads\battlelog-web-plugins_2.1.3_109.exe
2013-05-18 15:01 - 2013-05-18 15:02 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2013-05-18 15:01 - 2013-05-18 15:01 - 00018960 ____A (Logitech, Inc.) C:\Windows\System32\Drivers\LNonPnP.sys
2013-05-18 15:01 - 2013-05-18 15:01 - 00000388 ____A C:\Windows\LkmdfCoInst.log
2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logitech
2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logishrd
2013-05-18 14:59 - 2013-05-18 15:00 - 52882496 ____A (Logitech Inc.) C:\Users\xXBaseXx\Downloads\lgs846_x64.exe

==================== One Month Modified Files and Folders =======

2013-06-17 22:15 - 2013-06-17 22:15 - 00000000 ____D C:\FRST
2013-06-17 22:14 - 2013-06-17 22:14 - 01926844 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST64.exe
2013-06-17 22:14 - 2013-06-17 22:13 - 01365333 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST.exe
2013-06-17 22:02 - 2010-01-04 20:46 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\TS3Client
2013-06-17 21:56 - 2013-06-17 21:56 - 00057854 ____A C:\Users\xXBaseXx\Desktop\Logs.rar
2013-06-17 21:55 - 2012-05-23 14:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-17 21:44 - 2013-06-17 21:44 - 00338900 ____A C:\Users\xXBaseXx\Desktop\Gmer_logs.log
2013-06-17 21:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-06-17 17:59 - 2013-06-17 17:59 - 00249176 ____A C:\Users\xXBaseXx\Desktop\Extras.Txt
2013-06-17 17:58 - 2013-06-17 17:58 - 00101500 ____A C:\Users\xXBaseXx\Desktop\OTL.Txt
2013-06-17 17:46 - 2010-01-30 22:06 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-06-17 17:45 - 2013-06-17 17:45 - 00000478 ____A C:\Users\xXBaseXx\Desktop\defogger_disable.log
2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____D C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)
2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____A C:\Users\xXBaseXx\defogger_reenable
2013-06-17 17:45 - 2009-12-31 01:57 - 00000000 ____D C:\users\xXBaseXx
2013-06-17 17:44 - 2013-06-17 17:44 - 00377856 ____A C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe
2013-06-17 17:43 - 2013-06-17 17:43 - 00602112 ____A (OldTimer Tools) C:\Users\xXBaseXx\Desktop\OTL.exe
2013-06-17 17:41 - 2013-06-17 17:41 - 00050477 ____A C:\Users\xXBaseXx\Desktop\Defogger.exe
2013-06-17 17:40 - 2013-06-17 17:39 - 00007308 ____A C:\Users\xXBaseXx\Desktop\Trojaner board (1).txt
2013-06-17 17:14 - 2010-04-12 16:04 - 00000000 ____D C:\Windows\pss
2013-06-17 17:05 - 2009-07-14 06:45 - 00017168 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-17 17:05 - 2009-07-14 06:45 - 00017168 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-17 17:04 - 2009-12-31 01:56 - 01160578 ____A C:\Windows\WindowsUpdate.log
2013-06-17 17:02 - 2013-06-05 20:58 - 00000000 ___RD C:\Users\xXBaseXx\Dropbox
2013-06-17 17:02 - 2013-06-05 20:54 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Dropbox
2013-06-17 17:01 - 2011-12-30 04:51 - 00000507 ____A C:\Windows\System32\Drivers\etc\hosts.ics
2013-06-17 17:00 - 2012-07-09 13:34 - 00044576 ____A C:\Windows\setupact.log
2013-06-17 17:00 - 2010-09-05 20:27 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-17 17:00 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-16 20:24 - 2009-12-31 02:17 - 00000000 ____D C:\Program Files (x86)\Steam
2013-06-16 12:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-15 13:27 - 2010-12-28 23:14 - 00000000 ____D C:\WESTWOOD
2013-06-14 13:12 - 2012-05-23 14:26 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-14 13:12 - 2011-07-06 12:17 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-14 03:04 - 2010-02-20 17:07 - 01622922 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-14 03:04 - 2009-07-14 19:58 - 00709210 ____A C:\Windows\System32\perfh007.dat
2013-06-14 03:04 - 2009-07-14 19:58 - 00153562 ____A C:\Windows\System32\perfc007.dat
2013-06-14 03:04 - 2009-07-14 07:13 - 01622922 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-14 00:24 - 2011-07-22 19:49 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-13 21:23 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-13 02:59 - 2009-12-31 12:37 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-08 16:08 - 2013-06-16 03:00 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-16 03:00 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-16 03:00 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-16 03:00 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-16 03:00 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-16 03:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-16 03:00 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-16 03:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-05 20:59 - 2013-06-05 20:58 - 10561781 ____A C:\Users\xXBaseXx\Downloads\Dropbox.zip
2013-06-05 20:54 - 2013-06-05 20:53 - 32966136 ____A (Dropbox, Inc.) C:\Users\xXBaseXx\Downloads\Dropbox 2.0.26.exe
2013-06-04 17:12 - 2012-07-27 17:44 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Skype
2013-05-28 19:37 - 2013-05-21 01:32 - 00000000 ____D C:\Program Files (x86)\Metro Last Light
2013-05-28 19:32 - 2013-05-28 19:32 - 00000000 ____D C:\Users\xXBaseXx\Documents\CPY_SAVES
2013-05-28 19:28 - 2013-05-28 19:08 - 33779945 ____A C:\Users\xXBaseXx\Downloads\Metro.Last.Light.Update.1.0.0.2.READNFO-CPY.rar
2013-05-28 19:15 - 2011-11-26 21:27 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-05-28 19:03 - 2013-05-21 19:47 - 422225372 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part25.rar.part
2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\Documents\LOLReplay
2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Logitech
2013-05-28 16:02 - 2012-09-02 21:14 - 00000000 ___RD C:\Users\Administrator\Virtual Machines
2013-05-27 17:52 - 2010-08-03 12:35 - 00000000 ____D C:\Users\xXBaseXx\Documents\StarCraft II
2013-05-27 16:45 - 2010-08-03 12:35 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-05-27 07:06 - 2013-05-27 06:59 - 22990573 ____A C:\Users\xXBaseXx\Downloads\MSIAfterburnerSetup231.zip
2013-05-26 18:22 - 2013-05-25 13:40 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\FileZilla
2013-05-25 13:40 - 2013-05-25 13:40 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-05-25 13:40 - 2013-05-25 13:39 - 04811793 ____A (FileZilla Project) C:\Users\xXBaseXx\Downloads\FileZilla_3.7.0.1_win32-setup.exe
2013-05-24 20:16 - 2013-05-24 20:16 - 04135551 ____A (Dxtory Software                                             ) C:\Users\xXBaseXx\Downloads\DxtorySetup2.0.122.exe
2013-05-23 18:31 - 2012-05-03 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-22 21:11 - 2013-05-22 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-22 00:19 - 2013-05-22 00:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-05-22 00:12 - 2012-07-13 13:10 - 00440844 ____A C:\Windows\DirectX.log
2013-05-21 20:20 - 2013-05-21 20:18 - 88790396 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part06.rar.part
2013-05-21 20:20 - 2013-05-21 20:12 - 98400354 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part05.rar.part
2013-05-21 20:20 - 2013-05-21 19:51 - 483533716 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part27.rar.part
2013-05-21 20:20 - 2013-05-21 19:50 - 516733060 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part26.rar.part
2013-05-21 20:18 - 2013-05-21 20:11 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part04.rar
2013-05-21 20:12 - 2013-05-21 20:01 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part02.rar
2013-05-21 20:11 - 2013-05-21 20:04 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part03.rar
2013-05-21 20:04 - 2013-05-21 19:55 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part01.rar
2013-05-21 20:01 - 2013-05-21 18:19 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part24.rar
2013-05-21 19:54 - 2013-05-21 18:11 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part22.rar
2013-05-21 19:51 - 2013-05-21 18:13 - 524288002 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part23.rar
2013-05-21 19:50 - 2013-05-21 18:08 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part21.rar
2013-05-21 19:47 - 2013-05-21 18:07 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part20.rar
2013-05-21 19:21 - 2013-05-21 19:21 - 00000000 ____D C:\ProgramData\Steam
2013-05-21 19:21 - 2013-05-21 18:47 - 00000000 ____D C:\Program Files (x86)\Resident Evil 6
2013-05-21 19:21 - 2010-02-20 21:46 - 00000000 ____D C:\Users\xXBaseXx\Documents\CAPCOM
2013-05-21 18:19 - 2013-05-21 17:37 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part19.rar
2013-05-21 18:13 - 2013-05-21 17:30 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part18.rar
2013-05-21 18:11 - 2013-05-21 17:29 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part17.rar
2013-05-21 18:08 - 2013-05-21 17:27 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part16.rar
2013-05-21 18:07 - 2013-05-21 17:26 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part15.rar
2013-05-21 17:36 - 2013-05-21 16:53 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part14.rar
2013-05-21 17:29 - 2013-05-21 16:51 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part13.rar
2013-05-21 17:29 - 2013-05-21 16:44 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part11.rar
2013-05-21 17:27 - 2013-05-21 16:43 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part10.rar
2013-05-21 17:26 - 2013-05-21 16:47 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part12.rar
2013-05-21 16:53 - 2013-05-21 16:06 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part07.rar
2013-05-21 16:50 - 2013-05-21 16:07 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part08.rar
2013-05-21 16:47 - 2013-05-21 16:09 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part09.rar
2013-05-21 16:44 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part05.rar
2013-05-21 16:43 - 2013-05-21 16:03 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part06.rar
2013-05-21 16:09 - 2013-05-20 22:12 - 477226214 ____A C:\Users\xXBaseXx\Downloads\resevi6upd51377tirld.rar
2013-05-21 16:07 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part03.rar
2013-05-21 16:06 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part01.rar
2013-05-21 16:03 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part04.rar
2013-05-21 16:02 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part02.rar
2013-05-21 14:56 - 2013-05-21 14:41 - 374113450 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part31.rar
2013-05-21 14:54 - 2013-05-21 14:26 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part30.rar
2013-05-21 14:52 - 2013-05-21 14:07 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part28.rar
2013-05-21 14:49 - 2013-05-21 14:13 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part29.rar
2013-05-21 14:45 - 2013-05-21 14:05 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part27.rar
2013-05-21 14:41 - 2013-05-21 13:59 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part26.rar
2013-05-21 14:25 - 2013-05-21 13:39 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part25.rar
2013-05-21 14:13 - 2013-05-21 13:19 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part22.rar
2013-05-21 14:07 - 2013-05-21 13:25 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part23.rar
2013-05-21 14:05 - 2013-05-21 13:29 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part24.rar
2013-05-21 13:59 - 2013-05-21 13:16 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part21.rar
2013-05-21 13:39 - 2013-05-21 04:31 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part20.rar
2013-05-21 13:28 - 2013-05-21 04:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part19.rar
2013-05-21 13:25 - 2013-05-21 04:10 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part17.rar
2013-05-21 13:19 - 2013-05-21 04:13 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part18.rar
2013-05-21 13:16 - 2013-05-21 04:06 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part16.rar
2013-05-21 04:30 - 2013-05-21 03:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part15.rar
2013-05-21 04:23 - 2013-05-21 03:32 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part13.rar
2013-05-21 04:12 - 2013-05-21 03:36 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part14.rar
2013-05-21 04:10 - 2013-05-21 03:27 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part12.rar
2013-05-21 04:06 - 2013-05-21 03:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part11.rar
2013-05-21 03:43 - 2013-05-21 02:52 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part10.rar
2013-05-21 03:36 - 2013-05-21 02:45 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part07.rar
2013-05-21 03:32 - 2013-05-21 02:51 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part09.rar
2013-05-21 03:27 - 2013-05-21 02:46 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part08.rar
2013-05-21 03:23 - 2013-05-21 02:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part06.rar
2013-05-21 02:52 - 2013-05-21 02:02 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part05.rar
2013-05-21 02:50 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part01.rar
2013-05-21 02:46 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part02.rar
2013-05-21 02:45 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part03.rar
2013-05-21 02:43 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part04.rar
2013-05-21 02:08 - 2010-08-25 20:50 - 00000000 ____D C:\Users\xXBaseXx\Documents\4A Games
2013-05-21 02:02 - 2013-05-21 02:02 - 03385180 ____A C:\Users\xXBaseXx\Downloads\metlas5gilcron13rld.rar
2013-05-21 02:01 - 2010-08-25 20:48 - 00000000 ____D C:\Users\xXBaseXx\AppData\Local\4A Games
2013-05-19 13:38 - 2013-04-01 01:45 - 00291088 ____A C:\Windows\SysWOW64\PnkBstrB.exe
2013-05-19 13:38 - 2013-04-01 01:45 - 00281520 ____A C:\Windows\SysWOW64\PnkBstrB.ex0
2013-05-19 13:38 - 2010-01-02 19:24 - 00291088 ____A C:\Windows\SysWOW64\PnkBstrB.xtr
2013-05-19 13:35 - 2013-05-19 13:35 - 03820336 ____A C:\Users\xXBaseXx\Downloads\battlelog-web-plugins_2.1.3_109.exe
2013-05-19 13:35 - 2011-09-30 08:26 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-05-18 15:02 - 2013-05-18 15:01 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2013-05-18 15:02 - 2010-01-02 17:25 - 00000000 ____D C:\Users\xXBaseXx\AppData\Local\Logitech
2013-05-18 15:01 - 2013-05-18 15:01 - 00018960 ____A (Logitech, Inc.) C:\Windows\System32\Drivers\LNonPnP.sys
2013-05-18 15:01 - 2013-05-18 15:01 - 00000388 ____A C:\Windows\LkmdfCoInst.log
2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logitech
2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logishrd
2013-05-18 15:00 - 2013-05-18 14:59 - 52882496 ____A (Logitech Inc.) C:\Users\xXBaseXx\Downloads\lgs846_x64.exe
2013-05-18 13:49 - 2010-09-09 17:22 - 00000000 ____D C:\Users\xXBaseXx\AppData\Local\PMB Files
2013-05-18 13:49 - 2010-09-09 17:22 - 00000000 ____D C:\ProgramData\PMB Files

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-16 12:49

==================== End Of Log ============================
         

--- --- ---




FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-06-2013 01
Ran by xXBaseXx at 2013-06-17 22:18:45 Run:
Running from C:\Users\xXBaseXx\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

3DMark06 (Version: 1.2.0)
7-Zip 4.65
Adobe Flash Player 11 ActiveX (Version: 11.4.402.287)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Age of Empires II: HD Edition
AMD Accelerated Video Transcoding (Version: 12.10.100.30226)
AMD APP SDK Runtime (Version: 10.0.1124.2)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.80226.1352)
Amnesia - The Dark Descent  (Version: 1.2)
ANNO 1404 - Königsedition (Version: 3.10.0000)
applicationupdater
avast! Free Antivirus (Version: 8.0.1489.0)
Battlefield 3™ (Version: 1.0.0.0)
Battlelog Web Plugins (Version: 2.1.3)
Call of Duty(R) - World at War(TM) 1.1 Patch
Call of Duty(R) - World at War(TM) 1.2 Patch
Call of Duty(R) - World at War(TM) 1.4 Patch
Call of Duty(R) - World at War(TM) 1.5 Patch
Call of Duty(R) - World at War(TM) 1.6 Patch
Call of Duty(R) - World at War(TM) 1.7 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center (Version: 2013.0226.1356.24951)
Catalyst Control Center Graphics Previews Common (Version: 2013.0226.1356.24951)
Catalyst Control Center InstallProxy (Version: 2013.0226.1356.24951)
Catalyst Control Center Localization All (Version: 2013.0226.1356.24951)
CCC Help Chinese Standard (Version: 2013.0226.1355.24951)
CCC Help Chinese Traditional (Version: 2013.0226.1355.24951)
CCC Help Czech (Version: 2013.0226.1355.24951)
CCC Help Danish (Version: 2013.0226.1355.24951)
CCC Help Dutch (Version: 2013.0226.1355.24951)
CCC Help English (Version: 2013.0226.1355.24951)
CCC Help Finnish (Version: 2013.0226.1355.24951)
CCC Help French (Version: 2013.0226.1355.24951)
CCC Help German (Version: 2013.0226.1355.24951)
CCC Help Greek (Version: 2013.0226.1355.24951)
CCC Help Hungarian (Version: 2013.0226.1355.24951)
CCC Help Italian (Version: 2013.0226.1355.24951)
CCC Help Japanese (Version: 2013.0226.1355.24951)
CCC Help Korean (Version: 2013.0226.1355.24951)
CCC Help Norwegian (Version: 2013.0226.1355.24951)
CCC Help Polish (Version: 2013.0226.1355.24951)
CCC Help Portuguese (Version: 2013.0226.1355.24951)
CCC Help Russian (Version: 2013.0226.1355.24951)
CCC Help Spanish (Version: 2013.0226.1355.24951)
CCC Help Swedish (Version: 2013.0226.1355.24951)
CCC Help Thai (Version: 2013.0226.1355.24951)
CCC Help Turkish (Version: 2013.0226.1355.24951)
ccc-utility64 (Version: 2013.0226.1356.24951)
CCleaner (Version: 2.28)
Command & Conquer 3 (Version: 1.00.0000)
Command & Conquer Alarmstufe Rot 2
Command & Conquer Gold Edition Stand Alone v1.06c revision 2
Command & Conquer™ Alarmstufe Rot 3 (Version: 1.0.1.0)
Command & Conquer™ Alarmstufe Rot 3 Der Aufstand (Version: 1.0.1.0)
Commandos 2: Men of Courage
Company of Heroes (Version: 1.0.0.99)
Company of Heroes 2 - Beta Stress Test
Company of Heroes: Tales of Valor
ContentMod2.2
Core Temp 1.0 RC2 (Version: 1.0)
Counter-Strike: Source
CPUID CPU-Z 1.58
Creation Kit
Creative ALchemy (Version: 1.41)
Creative Audio-Systemsteuerung (Version: 3.00)
Creative Konsole Starter
Creative Media Toolbox 6 (Shared Components) (Version: 2.80.12)
Creative Media Toolbox 6 (Version: 6.02)
Creative MediaSource 5 (Version: 5.26)
Creative Software AutoUpdate (Version: 1.40)
Creative Sound Blaster Properties x64 Edition
Creative WaveStudio 7 (Version: 7.14)
Creative-Diagnose (Version: 5.11)
Crysis WARHEAD(R)
Crysis WARHEAD(R) (Version: 1.0)
Dark Souls Prepare to Die Edition (Version: 1.0.0000.130)
DH Driver Cleaner Professional Edition (Version: Version 1.5)
Diablo
Diablo II
Diablo III (Version: 1.0.6.13644)
DivX-Setup (Version: 2.6.1.8)
Dokan Library 0.6.0
Dota 2
Dropbox (Version: 2.0.26)
Dxtory version 2.0.122 (Version: 2.0.122)
Eastern Front (Version: 1.7.1.0)
erLT (Version: 1.20.0137)
ESL Wire 1.11.1
ESN Sonar (Version: 0.41.0)
ESN Sonar (Version: 0.70.4)
Explorer Suite III
Fallout 3 - Unofficial Fallout 3 Patch (Version: v1.2.0)
Fallout 3 (Version: 1.00.0000)
Fallout Mod Manager 0.13.21
Fallout New Vegas Ultimate Edition
FileZilla Client 3.7.0.1 (Version: 3.7.0.1)
Filzip 3.06 (Version: 3.0.6)
FLV Player 2.0 (build 25) (Version: 2.0 (build 25))
FOOK2 (Version: v1.0)
Foxit Reader 5.1 (Version: 5.1.4.104)
Free Video Converter V 2.9 (Version: 2.9.0.0)
Free YouTube Download 3 version 3.0.7.718
Free YouTube Download version 3.1.22.319 (Version: 3.1.22.319)
Free YouTube to MP3 Converter version 3.12.2.430 (Version: 3.12.2.430)
Futuremark SystemInfo (Version: 4.11.0)
gamelauncher-ps2-live
Geeks3D.com FurMark 1.10.2
Gemeinsam genutzte Internet-Komponenten von Westwood
Gothic_Patch
Grand Theft Auto IV (Version: 1.0.0011.131)
Grand Theft Auto IV (Version: 1.0.0013.131)
Grand Theft Auto IV (Version: 1.00.0000)
Half-Life
HD Tune 2.55
Heroes & Generals (Version: 1.0.4.4)
HijackThis 2.0.2 (Version: 2.0.2)
Hitman Absolution
Host OpenAL (Version: 1.00)
Java Auto Updater (Version: 2.1.6.0)
Java(TM) 6 Update 22 (Version: 6.0.220)
Java(TM) 6 Update 26 (64-bit) (Version: 6.0.260)
Java(TM) 6 Update 29 (Version: 6.0.290)
Java(TM) 7 Update 4 (Version: 7.0.40)
Java(TM) SE Development Kit 6 Update 26 (64-bit) (Version: 1.6.0.260)
Java(TM) SE Development Kit 6 Update 26 (Version: 1.6.0.260)
JavaFX 2.1.0 (Version: 2.1.0)
JDownloader 0.9 (Version: 0.9)
Kane's Revenge (Version: Demo Version 1.5Alpha)
League of Legends (Version: 1.3)
Live Update 5 (Version: 5.0.084)
Logitech Gaming Software (Version: 8.45.88)
Logitech Gaming Software 8.46 (Version: 8.46.27)
Logitech SetPoint 5.20 (Version: 5.20)
LOLReplay (Version: 0.8.1.4)
Men of War - Assault Squad (Version: 1.96.6)
Metro 2033
Metro Last Light Update 1.0.0.2
Metro: Last Light (c) Deep Silver version 1 (Version: 1)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8107.0)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Games for Windows - LIVE Redistributable (Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (Version: 3.5.50.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (Version: 11.0.51106.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Might & Magic Heroes VI (Version: 1.4)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSI Afterburner 2.2.3 (Version: 2.2.3)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Natural Selection 2
Nexus Mod Manager (Version: 0.44.11)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA PhysX (Version: 9.10.0222)
Open PLS in Windows Media Player 2.3.0 (Version: 2.3)
OpenOffice.org 3.3 (Version: 3.3.9567)
Origin (Version: 9.1.3.2637)
Pando Media Booster (Version: 2.6.0.8)
Parche Europe At War v6.1.7 Hotfix (Version: 6.1.5)
Path of Exile (Version: 0.9.13.22054)
PCSX2 - Playstation 2 Emulator
PE Builder 3.1.10a
PlanetSide 2 (Version: 1.0.3.181)
PowerNap (Version: 1.3.1)
PowerStrip 3 (remove only)
Questpaket 4 Update 1 Deinstallation (Version: 4.1.0.0)
Rainmeter (Version: 2.3.3 r1522)
Realtek High Definition Audio Driver (Version: 6.0.1.6000)
RESIDENT EVIL 5 (Version: 1.0.0.129)
Resident Evil 6 version 1 (Version: 1)
Risen (Version: 1.00.0000)
RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (Version: v2.24 MSI Master Overclocking Arena 2009 edition)
Secunia PSI
Skype™ 5.10 (Version: 5.10.116)
Sleeping Dogs™
softOSD Client (Build 1445)
Source SDK Base 2006
SpellForce 2 - Shadow Wars (Version: 1.00.0000)
SpellForce 2 Update v1.02
StarCraft II (Version: 2.0.8.25604)
StarCraft II Beta (Version: 2.0.3.24764)
Steam (Version: 1.0.0.0)
TeamSpeak 3 Client (Version: 3.0.10.1)
The Elder Scrolls V: Skyrim
The Red Alert (Version: 1.1.0.0)
The Walking Dead (c) 3 version 1 (Version: 1)
The Walking Dead Episode 2 - Starved for Help
The Walking Dead Episode 3 (c) TellTale Games version 1 (Version: 1)
The Walking Dead Episode 4 (c) Telltale Games version 1 (Version: 1)
The Walking Dead Episode 5 (c) Telltales version 1 (Version: 1)
Ubisoft Game Launcher (Version: 1.0.0.0)
UltraISO Premium V9.5
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Uplay (Version: 2.0)
User's Guides (Version: 1.20.0000)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VHD Attach 3.40 (Version: 3.40)
VirtualCloneDrive
VLC media player 2.0.2 (Version: 2.0.2)
Warcraft III
Warframe (Version: 1.0.0)
Warhammer® 40,000™: Dawn of War® II – Retribution™
Warhammer® 40,000®: Dawn of War® II – Retribution™ Beta
Windows Live Call (Version: 14.0.8117.0416)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Messenger (Version: 14.0.8117.0416)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows XP Mode (Version: 1.3.7600.16422)
WinRAR
WORLD IN CONFLICT: SOVIET ASSAULT (Version: 1.0.1.0)
World of Tanks - Common Test
World of Tanks v.0.7.3
Wrye Bash (Version: 0.2.9.9)
Xiph.Org Open Codecs 0.85.17777 (Version: 0.85.17777)

==================== Restore Points  =========================

01-06-2013 18:42:42 Geplanter Prüfpunkt
03-06-2013 15:39:18 DirectX wurde installiert
10-06-2013 19:18:43 Geplanter Prüfpunkt
13-06-2013 00:57:58 Windows Update
14-06-2013 01:00:18 Windows Update
16-06-2013 01:00:18 Windows Update

==================== Scheduled Tasks (whitelisted) =============

Task: {153F2FF5-772B-4581-998F-F444E560A041} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {1DABA4F8-8D6A-4045-A583-31D9334B388D} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-10] (Microsoft Corporation)
Task: {1E9B3054-7FFC-4E2A-A647-52015249170A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {647E6E8A-B6A2-4EC6-B720-E5A50D2DB2CC} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline => C:\Windows\system32\schtasks.exe [2010-11-20] (Microsoft Corporation)
Task: {7ABD849C-2E78-4DFE-874F-730A6741CBAD} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2012-07-24] ()
Task: {81540B9F-B5BF-47EB-9C95-BE195BF2C664} - System32\Tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo => C:\Windows\system32\gatherNetworkInfo.vbs [2009-06-10] ()
Task: {ACE9C954-A86D-4CA3-806B-2767334C061F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-14] (Adobe Systems Incorporated)
Task: {ACF55478-64F0-4DAA-82BD-22E87EFE00EA} - System32\Tasks\{85EE5424-B56D-4DF3-A72D-0D33A5D34137} => C:\program files (x86)\mozilla firefox\firefox.exe [2013-05-22] (Mozilla Corporation)
Task: {B72340D3-EE38-4C1E-A90C-889F472F3833} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {C78E010B-8EF4-4558-B46B-F3F1BB4B5AE8} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2428822915-2084229183-1607689295-1000 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)

==================== Faulty Device Manager Devices =============

Name: Realtek High Definition Audio
Description: Realtek High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: IntcAzAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/17/2013 06:19:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0
Name des fehlerhaften Moduls: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000218a
ID des fehlerhaften Prozesses: 0xff4
Startzeit der fehlerhaften Anwendung: 0xgmer_2.1.19163.exe0
Pfad der fehlerhaften Anwendung: gmer_2.1.19163.exe1
Pfad des fehlerhaften Moduls: gmer_2.1.19163.exe2
Berichtskennung: gmer_2.1.19163.exe3

Error: (06/16/2013 01:07:40 PM) (Source: RasClient) (User: )
Description: CoID={F4C1F27F-9ED6-404C-97DE-000E4CAFEE6F}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "Breitbandverbindung 3" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 691.

Error: (06/15/2013 02:38:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a
Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0000f66b
ID des fehlerhaften Prozesses: 0x1608
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (06/15/2013 00:35:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a
Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0000f66b
ID des fehlerhaften Prozesses: 0xc20
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (06/15/2013 03:09:11 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a
Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002e72
ID des fehlerhaften Prozesses: 0x2324
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (06/14/2013 05:15:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a
Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002e72
ID des fehlerhaften Prozesses: 0x13b4
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (06/14/2013 02:06:27 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a
Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0000f66b
ID des fehlerhaften Prozesses: 0xe2c
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (06/13/2013 09:25:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0x80000003
Fehleroffset: 0x0005801d
ID des fehlerhaften Prozesses: 0x1410
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3

Error: (06/13/2013 09:23:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: ipnathlp.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdf5d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000023e6a
ID des fehlerhaften Prozesses: 0x2f8
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (06/13/2013 05:21:33 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x1aa0
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3


System errors:
=============
Error: (06/17/2013 09:45:43 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (06/17/2013 09:42:06 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (06/17/2013 09:39:54 PM) (Source: ipnathlp) (User: )
Description: 

Error: (06/17/2013 06:22:54 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (06/17/2013 06:19:54 PM) (Source: ipnathlp) (User: )
Description: 

Error: (06/17/2013 06:14:54 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (06/17/2013 05:50:46 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/17/2013 05:50:42 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/17/2013 05:50:39 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/17/2013 05:48:58 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


Microsoft Office Sessions:
=========================
Error: (06/17/2013 06:19:28 PM) (Source: Application Error)(User: )
Description: gmer_2.1.19163.exe2.1.19163.0515d31f0gmer_2.1.19163.exe2.1.19163.0515d31f0c00000050000218aff401ce6b75e1115dd1C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exeC:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exeaecc65c2-d769-11e2-a947-00ff01000001

Error: (06/16/2013 01:07:40 PM) (Source: RasClient)(User: )
Description: {F4C1F27F-9ED6-404C-97DE-000E4CAFEE6F}SYSTEMBreitbandverbindung 3691

Error: (06/15/2013 02:38:47 PM) (Source: Application Error)(User: )
Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c00004170000f66b160801ce69be44bef5d7C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll8539a94b-d5b8-11e2-99d4-00ff01000001

Error: (06/15/2013 00:35:55 PM) (Source: Application Error)(User: )
Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c00004170000f66bc2001ce69a9afed1b90C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll5b3edbe4-d5a7-11e2-99d4-00ff01000001

Error: (06/15/2013 03:09:11 AM) (Source: Application Error)(User: )
Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c000000500002e72232401ce693c834f8420C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll2f38cbe4-d558-11e2-ae35-00ff01000001

Error: (06/14/2013 05:15:05 PM) (Source: Application Error)(User: )
Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c000000500002e7213b401ce690d671086d6C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll308983ee-d505-11e2-ae35-00ff01000001

Error: (06/14/2013 02:06:27 PM) (Source: Application Error)(User: )
Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c00004170000f66be2c01ce68f021008767C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dlld6929ade-d4ea-11e2-ae35-00ff01000001

Error: (06/13/2013 09:25:12 PM) (Source: Application Error)(User: )
Description: LolClient.exe2.0.2.126104c00573antdll.dll6.1.7601.177254ec49b8f800000030005801d141001ce6867c3b72481C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.28\deploy\LolClient.exeC:\Windows\SysWOW64\ntdll.dllf7000a30-d45e-11e2-9891-00ff01000001

Error: (06/13/2013 09:23:01 PM) (Source: Application Error)(User: )
Description: svchost.exe6.1.7600.163854a5bc3c1ipnathlp.dll6.1.7600.163854a5bdf5dc00000050000000000023e6a2f801ce681eccc78c49C:\Windows\system32\svchost.exec:\windows\system32\ipnathlp.dlla8ef3940-d45e-11e2-9891-00ff01000001

Error: (06/13/2013 05:21:33 PM) (Source: Application Error)(User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b85541aa001ce6849a7e4aea8C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeed655659-d43c-11e2-9891-00ff01000001


==================== Memory info =========================== 

Percentage of memory in use: 36%
Total physical RAM: 8183.12 MB
Available physical RAM: 5215.12 MB
Total Pagefile: 16364.42 MB
Available Pagefile: 13084.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:230.72 GB) NTFS (Disk=0 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 792134FC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Hier sind die geforderten logs
und schon mal danke für die Antwort.

Soll ich die anderen Logs auch noch einfügen?

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches OTL log bitte.

Hier das Adwcleaner log:

# AdwCleaner v2.303 - Datei am 18/06/2013 um 08:18:25 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzer : xXBaseXx - XXBASEXX-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\foxydeal.sqlite
Ordner Gelöscht : C:\Users\xXBaseXx\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\jetpack
Ordner Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\OpenCandy

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\Freeze.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\prefs.js

Gelöscht : user_pref("extensions.foxlingo.addit.defaultAddons", "{ \"software\": {\"13\": {\"id\": \"13\",\"tit[...]

-\\ Opera v [Version kann nicht ermittelt werden]

Datei : C:\Users\xXBaseXx\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [2185 octets] - [18/06/2013 08:18:25]

########## EOF - C:\AdwCleaner[S1].txt - [2245 octets] ##########
         

und das frische OTL log:

OTL logfile created on: 18.06.2013 08:55:32 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\xXBaseXx\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,99 Gb Total Physical Memory | 6,47 Gb Available Physical Memory | 80,98% Memory free
15,98 Gb Paging File | 14,28 Gb Available in Paging File | 89,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,41 Gb Total Space | 230,75 Gb Free Space | 24,77% Space Free | Partition Type: NTFS
 
Computer Name: XXBASEXX-PC | User Name: xXBaseXx | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe
PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010.12.18 18:56:48 | 000,095,272 | ---- | M] (EnTech Taiwan) -- C:\Windows\SysWOW64\softLCP.exe
PRC - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) -- C:\Program Files (x86)\softOSD\softOSD.exe
PRC - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2009.08.26 06:29:28 | 000,150,016 | ---- | M] () -- C:\Windows\SysWOW64\OemSpiE.dll
MOD - [2009.03.26 15:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL
MOD - [2009.02.06 19:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.02.26 20:24:44 | 000,240,640 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013.06.14 13:12:34 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.06.07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.05.22 21:11:31 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.08.10 12:42:54 | 000,150,464 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.10 02:14:06 | 000,263,808 | ---- | M] (Josip Medved) [Disabled | Stopped] -- C:\Programme\Josip Medved\VHD Attach\VhdAttachService.exe -- (VhdAttach)
SRV - [2012.01.24 13:50:46 | 000,168,864 | ---- | M] () [Disabled | Stopped] -- C:\Programme\Common Files\WireHelpSvc.exe -- (WireHelpSvc)
SRV - [2011.12.08 18:21:47 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service)
SRV - [2011.12.08 18:17:48 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2011.09.07 16:29:20 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2011.04.24 23:08:00 | 004,303,928 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2011.02.28 10:16:38 | 000,011,776 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe -- (dell_power_nap_service)
SRV - [2011.01.10 14:49:20 | 000,014,848 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)
SRV - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) [Auto | Running] -- C:\Program Files (x86)\softOSD\softOSD.exe -- (softOSD)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013.05.09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013.05.09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013.02.26 21:17:50 | 011,613,184 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013.02.26 19:58:04 | 000,576,000 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013.02.12 23:01:36 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:64bit: - [2013.01.17 21:15:12 | 000,066,800 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
DRV:64bit: - [2013.01.15 12:11:26 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.01.24 14:50:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1)
DRV:64bit: - [2012.01.24 13:50:38 | 000,147,472 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)
DRV:64bit: - [2011.07.26 19:49:12 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2011.01.10 14:51:40 | 000,120,408 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)
DRV:64bit: - [2010.12.17 00:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2010.11.20 15:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:64bit: - [2010.11.20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:64bit: - [2010.11.20 13:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:64bit: - [2010.05.28 13:04:52 | 000,017,456 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:64bit: - [2010.03.04 13:43:00 | 000,346,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.02.15 23:21:32 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2010.02.15 23:21:31 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009.11.24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.11.18 08:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.17 09:54:46 | 000,040,976 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV:64bit: - [2009.06.17 09:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2009.06.17 09:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.06 03:34:52 | 000,639,512 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t3.sys -- (t3)
DRV:64bit: - [2009.02.03 17:46:14 | 000,077,952 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfsync04.sys -- (sfsync04)
DRV:64bit: - [2009.02.03 17:37:50 | 000,075,384 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)
DRV:64bit: - [2007.06.25 10:42:22 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s117bus.sys -- (s117bus)
DRV:64bit: - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\se64a.sys -- (se64a)
DRV:64bit: - [2006.09.30 11:36:14 | 000,013,008 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pstrip64.sys -- (PStrip64)
DRV:64bit: - [2006.06.14 16:58:10 | 000,014,192 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2010.10.22 10:37:36 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys -- (NTIOLib_1_0_4)
DRV - [2010.05.10 10:44:40 | 000,033,592 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys -- (MSI_MSIBIOS_010507)
DRV - [2010.01.29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
DRV - [2009.12.31 14:00:46 | 000,019,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys -- (RivaTuner64)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\se64a.sys -- (se64a)
DRV - [2004.12.30 23:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
DRV - [2004.05.13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.05.13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prosync1.sys -- (prosync1)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9C C2 45 B4 AA D0 CC 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: npretoxlive%40live.heroesandgenerals.com:1.0.3.5
FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:1.0.2
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130515
FF - prefs.js..extensions.enabledAddons: %7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.6.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: Strata40@SpewBoy.au:0.6.2
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 5555
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.type: 4
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\Sonar\npesnsonar.dll (ESN AB)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.3: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\npesnlaunch.dll (ESN AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.138.0: C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.96.0: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@live.heroesandgenerals.com/npretox: C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.30 06:25:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.06.14 00:24:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]
 
[2009.12.31 02:00:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Extensions
[2013.05.31 20:11:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions
[2013.05.17 07:42:10 | 000,000,000 | ---D | M] (WOT) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.03.15 14:19:35 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\battlefieldplay4free@ea.com
[2013.04.06 14:11:20 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\ich@maltegoetz.de
[2012.07.27 22:38:34 | 000,000,000 | ---D | M] (HNG downloader/starter (live)) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\npretoxlive@live.heroesandgenerals.com
[2010.04.21 20:38:39 | 000,000,000 | ---D | M] ("Strata40") -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au
[2010.04.21 20:38:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\extensions
[2013.05.07 20:07:51 | 000,363,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\client@anonymox.net.xpi
[2013.05.31 20:11:34 | 000,699,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi
[2013.05.26 11:32:06 | 000,534,261 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2013.05.08 20:07:53 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2010.01.08 15:22:24 | 000,001,580 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallConfirm.css
[2010.01.09 03:58:54 | 000,001,423 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallItemGeneric.png
[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011.11.06 13:40:16 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE File not found
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry File not found
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61AE6971-47C3-47E4-8E0C-28539E7B6CF9}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BED4635-8D6C-46D0-AB8E-BD1538073031}: NameServer = 8.26.56.26,156.154.70.22
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20 - HKLM Winlogon: UserInit - (userinit.exe) -  File not found
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found
O29 - HKLM SecurityProviders - (credssp.dll) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell - "" = AutoRun
O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\setup\command - "" = F:\setup.exe
O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell - "" = AutoRun
O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell\AutoRun\command - "" = H:\setup.exe
O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.18 08:53:18 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\JRT
[2013.06.18 08:52:09 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe
[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\temp
[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\erunt
[2013.06.18 08:23:01 | 000,000,000 | ---D | C] -- C:\JRT
[2013.06.17 22:15:11 | 000,000,000 | ---D | C] -- C:\FRST
[2013.06.17 22:14:48 | 001,926,844 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe
[2013.06.17 22:13:57 | 001,365,333 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe
[2013.06.17 17:45:28 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)
[2013.06.17 17:43:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe
[2013.06.05 20:58:28 | 000,000,000 | R--D | C] -- C:\Users\xXBaseXx\Dropbox
[2013.06.05 20:57:22 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2013.06.05 20:54:56 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox
[2013.05.28 19:32:33 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Documents\CPY_SAVES
[2013.05.27 16:23:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2013.05.25 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla
[2013.05.25 13:40:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2013.05.25 13:40:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
[2013.05.25 12:17:39 | 008,043,008 | ---- | C] (Dxtory Software) -- C:\Windows\SysNative\DxtoryCodec.dll
[2013.05.22 21:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.05.22 00:19:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2013.05.21 19:21:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
[2013.05.21 18:47:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Resident Evil 6
[2013.05.21 01:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Metro Last Light
[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.18 08:55:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.06.18 08:52:10 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe
[2013.06.18 08:40:24 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.06.18 08:40:24 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.06.18 08:35:02 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2013.06.18 08:34:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.06.18 08:34:50 | 2140,495,871 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.18 08:17:37 | 000,648,201 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe
[2013.06.17 22:14:59 | 001,926,844 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe
[2013.06.17 22:14:04 | 001,365,333 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe
[2013.06.17 21:56:22 | 000,057,854 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Logs.rar
[2013.06.17 17:45:17 | 000,000,000 | ---- | M] () -- C:\Users\xXBaseXx\defogger_reenable
[2013.06.17 17:44:34 | 000,377,856 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe
[2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe
[2013.06.17 17:41:22 | 000,050,477 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe
[2013.06.14 03:04:41 | 001,622,922 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.06.14 03:04:41 | 000,709,210 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.06.14 03:04:41 | 000,661,492 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.06.14 03:04:41 | 000,153,562 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.06.14 03:04:41 | 000,125,682 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.06.14 03:04:33 | 001,622,922 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.06.14 00:24:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2013.05.19 13:38:58 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2013.05.19 13:38:58 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013.05.19 13:38:30 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.06.18 08:17:37 | 000,648,201 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe
[2013.06.17 21:56:22 | 000,057,854 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Logs.rar
[2013.06.17 17:45:17 | 000,000,000 | ---- | C] () -- C:\Users\xXBaseXx\defogger_reenable
[2013.06.17 17:44:34 | 000,377,856 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe
[2013.06.17 17:41:22 | 000,050,477 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe
[2013.05.21 19:17:24 | 000,000,828 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resident Evil 6.lnk
[2013.05.21 01:48:26 | 000,000,856 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro Last Light.lnk
[2013.04.01 01:45:13 | 000,291,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013.04.01 01:44:47 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013.03.27 21:11:29 | 000,015,522 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bk!
[2013.03.27 21:11:19 | 000,001,886 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bko
[2013.03.11 18:40:25 | 000,015,739 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bak
[2013.03.11 18:33:36 | 000,015,741 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.ini
[2013.02.26 20:25:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2013.02.26 20:25:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2013.01.18 21:43:53 | 000,037,999 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.11.19 22:00:00 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012.10.07 00:18:46 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2012.10.06 16:02:55 | 000,877,747 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\Tempmusic.ogg
[2012.09.15 11:31:48 | 000,000,061 | ---- | C] () -- C:\Windows\sbwin.ini
[2012.09.14 21:57:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.04.23 17:06:34 | 000,006,817 | ---- | C] () -- C:\Windows\DiabUnin.dat
[2012.01.27 16:11:03 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011.12.21 17:54:55 | 000,000,620 | ---- | C] () -- C:\Windows\eReg.dat
[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.09.19 15:03:40 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.07.19 23:52:56 | 000,005,002 | ---- | C] () -- C:\ProgramData\kaevcwgh.slj
[2011.07.19 23:40:37 | 000,005,117 | ---- | C] () -- C:\ProgramData\hvcatrnw.tht
[2011.01.25 16:45:47 | 000,001,852 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\ImperatorProfile0.dat
[2010.04.12 21:20:19 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini
[2010.02.20 22:12:15 | 000,000,096 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\fusioncache.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2011.06.29 19:38:06 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\.minecraft
[2012.05.06 20:46:49 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Alarmstufe Rot 3 Der Aufstand
[2010.03.28 14:13:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Bioshock2
[2010.08.12 21:47:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Blender Foundation
[2010.08.12 21:49:41 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\CB Model Pro
[2010.12.29 00:52:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Kanes Rache
[2010.12.24 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2010.02.03 20:22:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command and Conquer 4 Beta
[2013.06.17 17:02:44 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox
[2013.05.12 15:10:30 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoft
[2013.05.26 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla
[2011.10.30 13:56:34 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Firefly Studios
[2011.11.29 12:21:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\fltk.org
[2012.03.12 09:30:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Foxit Software
[2010.12.25 22:30:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FreeVideoConverter
[2011.02.04 23:28:15 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\GetRightToGo
[2010.08.13 19:26:40 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Leadertech
[2010.09.09 22:36:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient
[2012.05.24 11:16:58 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient2
[2011.11.22 21:40:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MAXON
[2013.03.05 23:50:00 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Might & Magic Heroes VI
[2011.07.19 23:41:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MOVAVI
[2010.01.11 21:13:01 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Mumble
[2012.01.15 20:54:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\NationRed
[2013.03.02 13:09:24 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Natural Selection 2
[2010.09.09 11:58:26 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Need for Speed World
[2011.03.11 16:57:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\nHancer
[2010.11.01 07:52:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\OpenOffice.org
[2012.01.22 19:21:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Opera
[2012.12.29 17:07:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Origin
[2013.03.08 08:58:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Rainmeter
[2010.05.03 21:32:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Red Alert 3
[2012.04.13 07:58:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\RotMG.Production
[2010.05.21 23:48:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Sports Interactive
[2012.12.04 19:36:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TeamViewer
[2012.07.25 23:36:55 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Teeworlds
[2012.11.24 20:21:25 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Theta
[2013.06.17 23:09:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TS3Client
[2012.11.06 00:50:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Ubisoft
[2012.09.30 12:52:39 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\wargaming.net
 
========== Purity Check ==========
 
 

< End of report >
         

Mit einem Junk Removal Tool log kann ich dir leider nicht dienen, da sich das Programm bei mir weigert zu starten.
Es blinkt für den Bruchteil einer Sekunde das cmd-Fenster auf und schließt sich dann sofort wieder.
Antivirenprog. war geschlossen und JRT wurde als Administrator gestartet

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches OTL log. Noch Probleme?

Hier ist das ESET log:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c59d34d9170f4b449a0ee9140efcc4ed
# engine=14101
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-18 06:36:27
# local_time=2013-06-18 08:36:27 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 372426 148290459 0 0
# compatibility_mode=5893 16776574 100 94 20395097 123210437 0 0
# scanned=523562
# found=0
# cleaned=0
# scan_time=18647
         

OTL logfile created on: 18.06.2013 23:06:28 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\xXBaseXx\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,99 Gb Total Physical Memory | 4,37 Gb Available Physical Memory | 54,72% Memory free
15,98 Gb Paging File | 12,17 Gb Available in Paging File | 76,15% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,41 Gb Total Space | 323,25 Gb Free Space | 34,71% Space Free | Partition Type: NTFS
 kl
Computer Name: XXBASEXX-PC | User Name: xXBaseXx | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe
PRC - [2013.06.14 13:12:34 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
PRC - [2013.05.30 18:58:58 | 000,144,384 | ---- | M] (Adobe Systems Inc.) -- C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.30\deploy\LolClient.exe
PRC - [2013.05.22 21:11:31 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.04.25 00:10:06 | 000,659,224 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech Gaming Software\Applets\LCDMedia.exe
PRC - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013.03.01 15:15:46 | 002,693,448 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.164\deploy\LoLLauncher.exe
PRC - [2013.03.01 15:13:08 | 001,300,816 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
PRC - [2012.07.24 05:46:36 | 000,164,168 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe
PRC - [2012.07.24 05:46:34 | 000,405,832 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
PRC - [2010.12.18 18:56:48 | 000,095,272 | ---- | M] (EnTech Taiwan) -- C:\Windows\SysWOW64\softLCP.exe
PRC - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) -- C:\Program Files (x86)\softOSD\softOSD.exe
PRC - [2010.11.20 14:17:56 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
PRC - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.06.14 13:12:34 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll
MOD - [2013.05.22 21:11:30 | 003,128,728 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2013.03.01 15:15:46 | 002,693,448 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.164\deploy\LoLLauncher.exe
MOD - [2013.03.01 15:13:08 | 001,300,816 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
MOD - [2012.07.24 05:46:36 | 000,164,168 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe
MOD - [2012.07.24 05:46:34 | 000,405,832 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
MOD - [2012.07.21 08:44:58 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
MOD - [2012.07.21 08:44:54 | 000,335,872 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
MOD - [2012.07.21 08:44:38 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTCore.dll
MOD - [2012.07.21 08:44:30 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTUI.dll
MOD - [2012.07.21 08:44:22 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTFC.dll
MOD - [2012.06.04 18:23:18 | 000,122,880 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSSHooks.dll
MOD - [2012.06.04 17:03:40 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTMUI.dll
MOD - [2012.06.04 17:02:42 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTUI.dll
MOD - [2012.06.04 17:02:34 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTFC.dll
MOD - [2011.04.30 17:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTTSH.dll
MOD - [2011.04.30 17:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTTSH.dll
MOD - [2009.08.26 06:29:28 | 000,150,016 | ---- | M] () -- C:\Windows\SysWOW64\OemSpiE.dll
MOD - [2009.03.26 15:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL
MOD - [2009.02.06 19:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.02.26 20:24:44 | 000,240,640 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013.06.14 13:12:34 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.06.07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.05.22 21:11:31 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.08.10 12:42:54 | 000,150,464 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.10 02:14:06 | 000,263,808 | ---- | M] (Josip Medved) [Disabled | Stopped] -- C:\Programme\Josip Medved\VHD Attach\VhdAttachService.exe -- (VhdAttach)
SRV - [2012.01.24 13:50:46 | 000,168,864 | ---- | M] () [Disabled | Stopped] -- C:\Programme\Common Files\WireHelpSvc.exe -- (WireHelpSvc)
SRV - [2011.12.08 18:21:47 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service)
SRV - [2011.12.08 18:17:48 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2011.09.07 16:29:20 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2011.04.24 23:08:00 | 004,303,928 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2011.02.28 10:16:38 | 000,011,776 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe -- (dell_power_nap_service)
SRV - [2011.01.10 14:49:20 | 000,014,848 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)
SRV - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) [Auto | Running] -- C:\Program Files (x86)\softOSD\softOSD.exe -- (softOSD)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013.05.09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013.05.09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013.02.26 21:17:50 | 011,613,184 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013.02.26 19:58:04 | 000,576,000 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013.02.12 23:01:36 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:64bit: - [2013.01.17 21:15:12 | 000,066,800 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
DRV:64bit: - [2013.01.15 12:11:26 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.01.24 14:50:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1)
DRV:64bit: - [2012.01.24 13:50:38 | 000,147,472 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)
DRV:64bit: - [2011.07.26 19:49:12 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2011.01.10 14:51:40 | 000,120,408 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)
DRV:64bit: - [2010.12.17 00:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2010.11.20 15:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:64bit: - [2010.11.20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:64bit: - [2010.11.20 13:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:64bit: - [2010.05.28 13:04:52 | 000,017,456 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:64bit: - [2010.03.04 13:43:00 | 000,346,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.02.15 23:21:32 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2010.02.15 23:21:31 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009.11.24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.11.18 08:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.17 09:54:46 | 000,040,976 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV:64bit: - [2009.06.17 09:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2009.06.17 09:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.06 03:34:52 | 000,639,512 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t3.sys -- (t3)
DRV:64bit: - [2009.02.03 17:46:14 | 000,077,952 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfsync04.sys -- (sfsync04)
DRV:64bit: - [2009.02.03 17:37:50 | 000,075,384 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)
DRV:64bit: - [2007.06.25 10:42:22 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s117bus.sys -- (s117bus)
DRV:64bit: - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\se64a.sys -- (se64a)
DRV:64bit: - [2006.09.30 11:36:14 | 000,013,008 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pstrip64.sys -- (PStrip64)
DRV:64bit: - [2006.06.14 16:58:10 | 000,014,192 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2012.07.24 05:46:34 | 000,010,568 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\MSI Afterburner\RTCore64.sys -- (RTCore64)
DRV - [2010.10.22 10:37:36 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys -- (NTIOLib_1_0_4)
DRV - [2010.05.10 10:44:40 | 000,033,592 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys -- (MSI_MSIBIOS_010507)
DRV - [2010.01.29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
DRV - [2009.12.31 14:00:46 | 000,019,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys -- (RivaTuner64)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\se64a.sys -- (se64a)
DRV - [2004.12.30 23:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
DRV - [2004.05.13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.05.13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prosync1.sys -- (prosync1)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9C C2 45 B4 AA D0 CC 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: npretoxlive%40live.heroesandgenerals.com:1.0.3.5
FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:1.0.2
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130515
FF - prefs.js..extensions.enabledAddons: %7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.6.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: Strata40@SpewBoy.au:0.6.2
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 5555
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.type: 4
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\Sonar\npesnsonar.dll (ESN AB)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.3: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\npesnlaunch.dll (ESN AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.138.0: C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.96.0: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@live.heroesandgenerals.com/npretox: C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.30 06:25:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.06.14 00:24:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]
 
[2009.12.31 02:00:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Extensions
[2013.05.31 20:11:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions
[2013.05.17 07:42:10 | 000,000,000 | ---D | M] (WOT) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.03.15 14:19:35 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\battlefieldplay4free@ea.com
[2013.04.06 14:11:20 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\ich@maltegoetz.de
[2012.07.27 22:38:34 | 000,000,000 | ---D | M] (HNG downloader/starter (live)) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\npretoxlive@live.heroesandgenerals.com
[2010.04.21 20:38:39 | 000,000,000 | ---D | M] ("Strata40") -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au
[2010.04.21 20:38:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\extensions
[2013.05.07 20:07:51 | 000,363,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\client@anonymox.net.xpi
[2013.05.31 20:11:34 | 000,699,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi
[2013.05.26 11:32:06 | 000,534,261 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2013.05.08 20:07:53 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2010.01.08 15:22:24 | 000,001,580 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallConfirm.css
[2010.01.09 03:58:54 | 000,001,423 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallItemGeneric.png
[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011.11.06 13:40:16 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE File not found
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry File not found
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61AE6971-47C3-47E4-8E0C-28539E7B6CF9}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{69B94DD0-3985-434A-8453-0D943E2FAA64}: NameServer = 62.109.123.196 213.191.74.18
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BED4635-8D6C-46D0-AB8E-BD1538073031}: NameServer = 8.26.56.26,156.154.70.22
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20 - HKLM Winlogon: UserInit - (userinit.exe) -  File not found
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found
O29 - HKLM SecurityProviders - (credssp.dll) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell - "" = AutoRun
O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\setup\command - "" = F:\setup.exe
O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell - "" = AutoRun
O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell\AutoRun\command - "" = H:\setup.exe
O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.18 15:23:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2013.06.18 15:20:42 | 002,347,384 | ---- | C] (ESET) -- C:\Users\xXBaseXx\Desktop\esetsmartinstaller_enu.exe
[2013.06.18 12:26:02 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Documents\RIFT
[2013.06.18 12:16:29 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\RIFT
[2013.06.18 12:16:29 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RIFT
[2013.06.18 12:16:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RIFT
[2013.06.18 08:53:18 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\JRT
[2013.06.18 08:52:09 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe
[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\temp
[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\erunt
[2013.06.18 08:23:01 | 000,000,000 | ---D | C] -- C:\JRT
[2013.06.17 22:15:11 | 000,000,000 | ---D | C] -- C:\FRST
[2013.06.17 22:14:48 | 001,926,844 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe
[2013.06.17 22:13:57 | 001,365,333 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe
[2013.06.17 17:45:28 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)
[2013.06.17 17:43:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe
[2013.06.05 20:58:28 | 000,000,000 | R--D | C] -- C:\Users\xXBaseXx\Dropbox
[2013.06.05 20:57:22 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2013.06.05 20:54:56 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox
[2013.05.28 19:32:33 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Documents\CPY_SAVES
[2013.05.27 16:23:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2013.05.25 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla
[2013.05.25 13:40:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2013.05.25 13:40:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
[2013.05.25 12:17:39 | 008,043,008 | ---- | C] (Dxtory Software) -- C:\Windows\SysNative\DxtoryCodec.dll
[2013.05.22 21:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.05.22 00:19:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2013.05.21 19:21:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
[2013.05.21 18:47:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Resident Evil 6
[2013.05.21 01:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Metro Last Light
[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.18 22:55:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.06.18 16:11:27 | 001,447,763 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\1371563650252.gif
[2013.06.18 15:58:57 | 000,765,413 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\1371561552323.gif
[2013.06.18 15:21:27 | 000,890,839 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\SecurityCheck.exe
[2013.06.18 15:20:44 | 002,347,384 | ---- | M] (ESET) -- C:\Users\xXBaseXx\Desktop\esetsmartinstaller_enu.exe
[2013.06.18 12:16:30 | 000,000,908 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\RIFT.lnk
[2013.06.18 10:51:05 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.06.18 10:51:05 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.06.18 10:45:58 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2013.06.18 10:45:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.06.18 10:45:45 | 2140,495,871 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.18 08:52:10 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe
[2013.06.18 08:17:37 | 000,648,201 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe
[2013.06.17 22:14:59 | 001,926,844 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe
[2013.06.17 22:14:04 | 001,365,333 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe
[2013.06.17 21:56:22 | 000,057,854 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Logs.rar
[2013.06.17 17:45:17 | 000,000,000 | ---- | M] () -- C:\Users\xXBaseXx\defogger_reenable
[2013.06.17 17:44:34 | 000,377,856 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe
[2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe
[2013.06.17 17:41:22 | 000,050,477 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe
[2013.06.14 03:04:41 | 001,622,922 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.06.14 03:04:41 | 000,709,210 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.06.14 03:04:41 | 000,661,492 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.06.14 03:04:41 | 000,153,562 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.06.14 03:04:41 | 000,125,682 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.06.14 03:04:33 | 001,622,922 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.06.14 00:24:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.06.18 16:11:27 | 001,447,763 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\1371563650252.gif
[2013.06.18 15:58:57 | 000,765,413 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\1371561552323.gif
[2013.06.18 15:21:21 | 000,890,839 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\SecurityCheck.exe
[2013.06.18 12:16:30 | 000,000,908 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\RIFT.lnk
[2013.06.18 08:17:37 | 000,648,201 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe
[2013.06.17 21:56:22 | 000,057,854 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Logs.rar
[2013.06.17 17:45:17 | 000,000,000 | ---- | C] () -- C:\Users\xXBaseXx\defogger_reenable
[2013.06.17 17:44:34 | 000,377,856 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe
[2013.06.17 17:41:22 | 000,050,477 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe
[2013.05.21 01:48:26 | 000,000,856 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro Last Light.lnk
[2013.04.01 01:45:13 | 000,291,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013.04.01 01:44:47 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013.03.27 21:11:29 | 000,015,522 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bk!
[2013.03.27 21:11:19 | 000,001,886 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bko
[2013.03.11 18:40:25 | 000,015,739 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bak
[2013.03.11 18:33:36 | 000,015,741 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.ini
[2013.02.26 20:25:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2013.02.26 20:25:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2013.01.18 21:43:53 | 000,037,999 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.11.19 22:00:00 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012.10.07 00:18:46 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2012.10.06 16:02:55 | 000,877,747 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\Tempmusic.ogg
[2012.09.15 11:31:48 | 000,000,061 | ---- | C] () -- C:\Windows\sbwin.ini
[2012.09.14 21:57:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.04.23 17:06:34 | 000,006,817 | ---- | C] () -- C:\Windows\DiabUnin.dat
[2012.01.27 16:11:03 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011.12.21 17:54:55 | 000,000,620 | ---- | C] () -- C:\Windows\eReg.dat
[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.09.19 15:03:40 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.07.19 23:52:56 | 000,005,002 | ---- | C] () -- C:\ProgramData\kaevcwgh.slj
[2011.07.19 23:40:37 | 000,005,117 | ---- | C] () -- C:\ProgramData\hvcatrnw.tht
[2011.01.25 16:45:47 | 000,001,852 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\ImperatorProfile0.dat
[2010.04.12 21:20:19 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini
[2010.02.20 22:12:15 | 000,000,096 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\fusioncache.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2011.06.29 19:38:06 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\.minecraft
[2012.05.06 20:46:49 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Alarmstufe Rot 3 Der Aufstand
[2010.03.28 14:13:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Bioshock2
[2010.08.12 21:47:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Blender Foundation
[2010.08.12 21:49:41 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\CB Model Pro
[2010.12.29 00:52:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Kanes Rache
[2010.12.24 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2010.02.03 20:22:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command and Conquer 4 Beta
[2013.06.17 17:02:44 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox
[2013.05.12 15:10:30 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoft
[2013.05.26 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla
[2011.10.30 13:56:34 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Firefly Studios
[2011.11.29 12:21:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\fltk.org
[2012.03.12 09:30:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Foxit Software
[2010.12.25 22:30:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FreeVideoConverter
[2011.02.04 23:28:15 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\GetRightToGo
[2010.08.13 19:26:40 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Leadertech
[2010.09.09 22:36:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient
[2012.05.24 11:16:58 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient2
[2011.11.22 21:40:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MAXON
[2013.03.05 23:50:00 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Might & Magic Heroes VI
[2011.07.19 23:41:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MOVAVI
[2010.01.11 21:13:01 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Mumble
[2012.01.15 20:54:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\NationRed
[2013.03.02 13:09:24 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Natural Selection 2
[2010.09.09 11:58:26 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Need for Speed World
[2011.03.11 16:57:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\nHancer
[2010.11.01 07:52:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\OpenOffice.org
[2012.01.22 19:21:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Opera
[2012.12.29 17:07:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Origin
[2013.03.08 08:58:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Rainmeter
[2010.05.03 21:32:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Red Alert 3
[2013.06.18 12:34:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\RIFT
[2012.04.13 07:58:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\RotMG.Production
[2010.05.21 23:48:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Sports Interactive
[2012.12.04 19:36:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TeamViewer
[2012.07.25 23:36:55 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Teeworlds
[2012.11.24 20:21:25 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Theta
[2013.06.18 23:19:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TS3Client
[2012.11.06 00:50:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Ubisoft
[2012.09.30 12:52:39 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\wargaming.net
 
========== Purity Check ==========
 
 

< End of report >
         

Mit einem Security Check log kann ich dir erneut nicht dienen.
Irgendwie scheint der Rechner Programme nicht zu mögen, die mit dem DOS-Fenster arbeiten. Er kennt angeblich die ganzen Befehle nicht, die das Prog. in die DOS-Box eingibt...
Wie dem auch sei, die Umleitung auf die Scam page findet nicht mehr statt und der PC stürzt auch nicht mehr ab. Sieht soweit gut aus.
Bis zu diesem Punkt muss ich dir schon mal vielmals danken. Ohne dich hätte ich das System
wohl doch platt gemacht.

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Alles erledigt, alles super!
Ich habe im Feedbackbereich des Forums Kritik zu dir abgegeben.
Bin mehr als Zufrieden!

Danke nochmal,

MfG

BaseLee

Gern Geschehen