"Die Webseite ist nicht verfügbar" (Chrome Fehler 102) - alle Browser

maedron · 08.07.2013, 20:56

Hallo zusammen!

Seit einigen Tagen lassen sich diverse Seiten nicht mehr öffnen, wie z.B. mit Google verbundene Websites. D.h. dass ich mich nicht mehr einloggen kann, genauso reagiert Twitter nicht mehr. Auf den ersten Blick scheinen es https-Seiten zu sein, die ihren Geist aufgegeben haben.
Das Problem tritt mit meinen Browsern Chrome, als auch mit Firefox auf.

Vor ein paar Wochen wurde eine Website zu einem Game, auf der ich öfter unterwegs bin, gehackt. Meine Sorge ist nun, dass ich mir durch einen Besuch auf der ansonsten sicheren Seite etwas eingefangen haben könnte.

Scans mit Malwarebytes, Avast und SpyBot wurden bereits gemacht, haben nichts gefunden.

Logfiles habe ich vorerst wie im Hilfs-Thread hier beschrieben, erstellt.

Habe sie in den Anhang gepackt, weil der Post sonst zu lang geworden wäre.
Das Log zu GMER konnte ich nicht dazunehmen, weil es die maximal zulässige Dateigröße für .txt-Dateien (knapp unter 100kB) überschreitet. Wie könnte ich das hier sonst reinstellen?

Freue mich auf eure Hilfe!

schrauber · 08.07.2013, 21:04

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

maedron · 08.07.2013, 23:48

Vielleicht hilft noch folgende Info: wenn ich einen Webproxy nutze, kann ich die Seiten, die vorher unbetretbar waren, erreichen. Sie laden natürlich nicht 100% korrekt und ich will keine Logins über die Alternative tätigen, aber vielleicht hilft der Fakt.

Hier die Logfiles.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-07-2013
Ran by Martin (administrator) on 09-07-2013 00:45:17
Running from C:\Users\Martin\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) F:\AVAST Software\Avast\AvastSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(LogMeIn Inc.) F:\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(LogMeIn Inc.) F:\LogMeIn Hamachi\hamachi-2-ui.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) F:\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Almico Software (www.almico.com)) F:\SpeedFan\speedfan.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [6900024 2012-07-24] (Logitech Inc.)
HKCU\...\Run: [Google Update] "C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-09-30] (Google Inc.)
MountPoints2: {bb30cd6f-09c1-11e2-a415-806e6f6e6963} - D:\OblivionLauncher.exe
HKLM-x32\...\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] "F:\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKLM-x32\...\Run: [avast] "F:\AVAST Software\Avast\avastUI.exe" /nogui [x]
HKLM-x32\...\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe" [135536 2010-12-13] (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - F:\AVAST Software\Avast\aswWebRepIE64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - F:\AVAST Software\Avast\aswWebRepIE.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - F:\AVAST Software\Avast\aswWebRepIE64.dll No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - F:\AVAST Software\Avast\aswWebRepIE.dll No File
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\8w2pcce5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] F:\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - F:\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Turn Off the Lights) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.6_0
CHR Extension: (James White) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3_0
CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0
CHR Extension: (Google Search) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Wunderlist - To-do & Task List) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc\2.1.1_0
CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 avast! Antivirus; F:\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
R2 Hamachi2Svc; F:\LogMeIn Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-03-16] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-07] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-07] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-07] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-09-30] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
S3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [59224 2011-09-22] (Focusrite Audio Engineering Limited.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66328 2012-02-07] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-09-30] ()
U3 kwtiafow; \??\C:\Users\Martin\AppData\Local\Temp\kwtiafow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-09 00:44 - 2013-07-09 00:44 - 00000000 ____D C:\FRST
2013-07-09 00:43 - 2013-07-09 00:43 - 01934554 ____A (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-07-08 21:40 - 2013-07-08 21:40 - 00353391 ____A C:\Users\Martin\Desktop\Gmer.txt
2013-07-08 21:21 - 2013-07-08 21:21 - 00091340 ____A C:\Users\Martin\Desktop\Extras.Txt
2013-07-08 21:20 - 2013-07-08 21:20 - 00094020 ____A C:\Users\Martin\Desktop\OTL.Txt
2013-07-08 21:17 - 2013-07-08 21:12 - 00377856 ____A C:\Users\Martin\Desktop\gmer_2.1.19163.exe
2013-07-08 21:07 - 2013-07-08 21:07 - 00002639 ____A C:\Users\Martin\Desktop\trojboard_anweisung.txt
2013-07-08 21:05 - 2013-07-08 21:06 - 00000000 ____D C:\Users\Martin\Desktop\GE Project
2013-07-08 21:04 - 2013-07-08 21:05 - 00602112 ____A (OldTimer Tools) C:\Users\Martin\Desktop\OTL.exe
2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____A C:\Users\Martin\defogger_reenable
2013-07-08 16:45 - 2013-07-08 16:46 - 00004608 ____A C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-08 14:38 - 2013-07-08 14:38 - 00000000 ____D C:\Windows\pss
2013-07-08 13:33 - 2013-07-08 13:34 - 00000499 ____A C:\Users\Martin\Desktop\scans.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00003788 ____A C:\Users\Martin\Desktop\Rkill.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00000000 ____D C:\Users\Martin\Desktop\rkill
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-07 23:21 - 2013-07-08 21:26 - 00003604 ____A C:\Windows\PFRO.log
2013-07-07 23:20 - 2013-07-07 23:20 - 00000065 ____A C:\Windows\wininit.ini
2013-07-07 23:04 - 2013-07-07 23:11 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-07 20:53 - 2012-12-07 15:20 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\Wpc.dll
2013-07-07 20:53 - 2012-12-07 15:15 - 02746368 ____A (Microsoft Corporation) C:\Windows\System32\gameux.dll
2013-07-07 20:53 - 2012-12-07 14:26 - 00308736 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-07-07 20:53 - 2012-12-07 14:20 - 02576384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-07-07 20:53 - 2012-12-07 13:20 - 00045568 ____A (Microsoft) C:\Windows\System32\oflc-nz.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00044544 ____A (Microsoft) C:\Windows\System32\pegibbfc.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00043520 ____A (Microsoft) C:\Windows\System32\csrr.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00030720 ____A (Microsoft) C:\Windows\System32\usk.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00023552 ____A (Microsoft) C:\Windows\System32\oflc.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi-pt.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi-fi.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00055296 ____A (Microsoft) C:\Windows\System32\cero.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00051712 ____A (Microsoft) C:\Windows\System32\esrb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00046592 ____A (Microsoft) C:\Windows\System32\fpb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00040960 ____A (Microsoft) C:\Windows\System32\cob-au.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00021504 ____A (Microsoft) C:\Windows\System32\grb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00015360 ____A (Microsoft) C:\Windows\System32\djctq.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00055296 ____A (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00051712 ____A (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00046592 ____A (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00045568 ____A (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00044544 ____A (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00043520 ____A (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00040960 ____A (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00030720 ____A (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00023552 ____A (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00021504 ____A (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00015360 ____A (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-07-07 20:53 - 2012-10-03 19:44 - 00303104 ____A (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00246272 ____A (Microsoft Corporation) C:\Windows\System32\netcorehc.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00216576 ____A (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00070656 ____A (Microsoft Corporation) C:\Windows\System32\nlaapi.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00018944 ____A (Microsoft Corporation) C:\Windows\System32\netevent.dll
2013-07-07 20:53 - 2012-10-03 19:42 - 00569344 ____A (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00175104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00156672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00018944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-07-07 20:53 - 2012-10-03 18:07 - 00045568 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpipreg.sys
2013-07-07 20:53 - 2012-01-13 09:12 - 00052224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-07-07 20:52 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-07-07 20:52 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-07-07 20:52 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-07-07 20:52 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-07-07 20:52 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-07-07 20:52 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-07-07 20:52 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-07-07 20:52 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-07-07 20:52 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-07-07 20:52 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-07-07 20:52 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-07-07 20:52 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-07-07 20:52 - 2012-11-30 07:43 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-07-07 20:52 - 2012-11-30 07:41 - 01161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-07-07 20:52 - 2012-11-30 07:41 - 00424448 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:53 - 01114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-07-07 20:52 - 2012-11-30 06:53 - 00274944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 05:23 - 00338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-07-07 20:52 - 2012-11-30 04:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 01:17 - 00420064 ____A C:\Windows\SysWOW64\locale.nls
2013-07-07 20:52 - 2012-11-30 01:15 - 00420064 ____A C:\Windows\System32\locale.nls
2013-07-07 20:52 - 2012-11-23 05:13 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-07-07 20:52 - 2012-11-22 07:44 - 00800768 ____A (Microsoft Corporation) C:\Windows\System32\usp10.dll
2013-07-07 20:52 - 2012-11-22 06:45 - 00626688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-07-07 20:52 - 2012-11-09 07:45 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-07-07 20:52 - 2012-11-09 06:42 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-07-07 20:52 - 2012-10-09 20:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll
2013-07-07 20:52 - 2012-10-09 20:17 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll
2013-07-07 20:52 - 2012-10-09 19:40 - 00193536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-07-07 20:52 - 2012-10-09 19:40 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-07-07 20:50 - 2013-01-24 08:01 - 00223752 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft LifeCam
2013-07-07 20:18 - 2012-12-16 19:11 - 00046080 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-07-07 20:18 - 2012-12-16 16:45 - 00367616 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-07-07 20:18 - 2012-12-16 16:13 - 00295424 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-07-07 20:18 - 2012-12-16 16:13 - 00034304 ____A (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-07-07 20:17 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-07-07 20:17 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-07-07 20:17 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-07-07 20:17 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-07-07 20:17 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-07 20:17 - 2013-02-15 08:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-07-07 20:17 - 2013-02-15 08:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-07-07 20:17 - 2013-02-15 08:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-07-07 20:17 - 2013-02-15 06:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-07-07 20:17 - 2013-02-15 06:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-07-07 20:17 - 2013-02-15 05:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-07-07 20:17 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023x.sys
2013-07-07 20:17 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-07-07 20:17 - 2013-01-04 07:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-07-07 20:17 - 2013-01-04 06:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-07-07 20:17 - 2013-01-04 04:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-07-07 20:17 - 2013-01-04 04:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-07-07 20:17 - 2013-01-04 04:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-07-07 20:17 - 2013-01-04 04:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-07-07 20:17 - 2013-01-03 08:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-07-07 20:17 - 2012-11-20 07:48 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-07-07 20:17 - 2012-11-20 06:51 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-07-07 20:17 - 2012-11-02 07:59 - 00478208 ____A (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-07-07 20:17 - 2012-11-02 07:11 - 00376832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-07-07 20:17 - 2012-11-01 07:43 - 02002432 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-07-07 20:17 - 2012-11-01 07:43 - 01882624 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-07-07 20:17 - 2012-11-01 06:47 - 01389568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-07-07 20:17 - 2012-11-01 06:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-07-07 20:17 - 2012-09-26 00:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-07-07 20:16 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-07-07 20:16 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-07-07 20:16 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-07-07 20:16 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-07-07 20:16 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-07-07 20:16 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-07-07 20:16 - 2012-09-26 00:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-07-07 20:15 - 2013-03-19 08:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-07-07 20:15 - 2013-03-19 07:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-07-07 20:15 - 2013-03-19 07:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-07-07 20:15 - 2013-03-19 07:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-07-07 20:15 - 2013-03-19 06:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-07-07 20:15 - 2013-03-19 05:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-07-07 19:01 - 2013-07-07 19:01 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-07 19:01 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-07-07 19:01 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-07-07 19:01 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-07-07 18:29 - 2013-07-07 18:29 - 00008398 ____A C:\Users\Martin\Desktop\cc_20130707_182939.reg
2013-07-07 18:25 - 2013-07-08 22:03 - 02081961 ____A C:\Windows\setupact.log
2013-07-07 18:25 - 2013-07-07 18:25 - 00000000 ____A C:\Windows\setuperr.log
2013-07-07 18:24 - 2013-07-07 18:24 - 00052188 ____A C:\Users\Martin\Desktop\cc_20130707_182425.reg
2013-07-02 22:44 - 2013-07-02 22:44 - 00000202 ____A C:\Users\Martin\Desktop\Deadpool.url
2013-07-01 00:59 - 2013-07-01 00:59 - 00290381 ____A C:\Users\Martin\Desktop\Kiste.c4d
2013-06-27 16:40 - 2013-06-27 16:40 - 00018022 ____A C:\Users\Martin\Desktop\Farbenfroh.esp
2013-06-26 18:58 - 2013-06-26 18:58 - 00000000 ____D C:\Users\Martin\Desktop\Fackelfarben
2013-06-26 18:45 - 2013-06-26 18:45 - 15530220 ____A C:\Users\Martin\Desktop\Fackelfarben.rar
2013-06-17 23:03 - 2013-06-17 23:03 - 00416436 ____A C:\Users\Martin\Desktop\Stalker paradise2.pptx
2013-06-17 22:46 - 2013-06-17 22:46 - 00000000 ____D C:\Users\Martin\Desktop\Clickdummy_stalkerparadise
2013-06-17 20:52 - 2013-06-17 20:52 - 00640952 ____A C:\Users\Martin\Desktop\Farbenfroh (2).rar
2013-06-17 13:18 - 2013-06-17 13:18 - 00638653 ____A C:\Users\Martin\Desktop\Farbenfroh (1).rar
2013-06-17 10:34 - 2013-06-17 10:34 - 00658111 ____A C:\Users\Martin\Desktop\Farbenfroh.rar
2013-06-16 23:27 - 2013-06-16 23:27 - 34365484 ____A C:\Users\Martin\Desktop\shmaatz isht shlimm - tün leidet.wav
2013-06-15 18:23 - 2013-06-15 18:23 - 04969330 ____A C:\Users\Martin\Desktop\Harvest_Flora_for_Nehrim-40558-V1.rar
2013-06-15 01:16 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\stetic
2013-06-15 01:15 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-15 01:15 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 22:48 - 2013-06-14 22:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Unity
2013-06-14 22:46 - 2013-07-03 15:22 - 00000000 ____D C:\ProgramData\Unity
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2013-06-14 14:41 - 2013-06-29 21:34 - 00000000 ____D C:\Users\Martin\Desktop\plaster and concrete
2013-06-12 23:54 - 2013-06-12 23:54 - 00000661 ____A C:\Users\Public\Desktop\Unity.lnk
2013-06-12 23:54 - 2013-06-12 23:54 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2013-06-12 17:41 - 2013-06-12 17:41 - 00008644 ____A C:\Users\Martin\Desktop\Nehrim XP Progess Bar DV.rar
2013-06-11 20:30 - 2013-06-13 23:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\HexChat
2013-06-11 20:30 - 2013-06-11 20:30 - 00000000 ____D C:\ProgramData\Package Cache

==================== One Month Modified Files and Folders =======

2013-07-09 00:44 - 2013-07-09 00:44 - 00000000 ____D C:\FRST
2013-07-09 00:43 - 2013-07-09 00:43 - 01934554 ____A (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-07-09 00:25 - 2012-10-02 20:11 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Audacity
2013-07-09 00:20 - 2012-10-01 10:48 - 00000023 ____A C:\Windows\BlendSettings.ini
2013-07-08 23:59 - 2012-09-30 12:31 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA.job
2013-07-08 22:58 - 2012-09-30 12:31 - 00001072 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core.job
2013-07-08 22:07 - 2011-04-12 09:43 - 00696714 ____A C:\Windows\System32\perfh007.dat
2013-07-08 22:07 - 2011-04-12 09:43 - 00148010 ____A C:\Windows\System32\perfc007.dat
2013-07-08 22:07 - 2009-07-14 07:13 - 01612864 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-08 22:03 - 2013-07-07 18:25 - 02081961 ____A C:\Windows\setupact.log
2013-07-08 21:40 - 2013-07-08 21:40 - 00353391 ____A C:\Users\Martin\Desktop\Gmer.txt
2013-07-08 21:34 - 2012-11-07 20:47 - 01180212 ____A C:\Windows\WindowsUpdate.log
2013-07-08 21:34 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-08 21:34 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-08 21:27 - 2013-01-17 20:04 - 00000000 ____D C:\Users\Martin\AppData\Local\LogMeIn Hamachi
2013-07-08 21:27 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-08 21:26 - 2013-07-07 23:21 - 00003604 ____A C:\Windows\PFRO.log
2013-07-08 21:21 - 2013-07-08 21:21 - 00091340 ____A C:\Users\Martin\Desktop\Extras.Txt
2013-07-08 21:20 - 2013-07-08 21:20 - 00094020 ____A C:\Users\Martin\Desktop\OTL.Txt
2013-07-08 21:12 - 2013-07-08 21:17 - 00377856 ____A C:\Users\Martin\Desktop\gmer_2.1.19163.exe
2013-07-08 21:07 - 2013-07-08 21:07 - 00002639 ____A C:\Users\Martin\Desktop\trojboard_anweisung.txt
2013-07-08 21:06 - 2013-07-08 21:05 - 00000000 ____D C:\Users\Martin\Desktop\GE Project
2013-07-08 21:05 - 2013-07-08 21:04 - 00602112 ____A (OldTimer Tools) C:\Users\Martin\Desktop\OTL.exe
2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____A C:\Users\Martin\defogger_reenable
2013-07-08 21:04 - 2012-11-07 20:34 - 00000000 ____D C:\users\Martin
2013-07-08 16:46 - 2013-07-08 16:45 - 00004608 ____A C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-08 14:38 - 2013-07-08 14:38 - 00000000 ____D C:\Windows\pss
2013-07-08 13:34 - 2013-07-08 13:33 - 00000499 ____A C:\Users\Martin\Desktop\scans.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00003788 ____A C:\Users\Martin\Desktop\Rkill.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00000000 ____D C:\Users\Martin\Desktop\rkill
2013-07-08 11:46 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-08 01:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-07 23:20 - 2013-07-07 23:20 - 00000065 ____A C:\Windows\wininit.ini
2013-07-07 23:11 - 2013-07-07 23:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-07 22:27 - 2013-02-13 21:35 - 01589822 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-07 21:16 - 2012-11-07 21:00 - 00162592 ____A C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-07 21:14 - 2009-07-14 06:45 - 10065392 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-07 21:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-07 20:42 - 2012-10-22 18:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-07 20:42 - 2012-10-22 18:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft LifeCam
2013-07-07 19:01 - 2013-07-07 19:01 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-07 19:01 - 2012-09-30 22:34 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-07-07 19:01 - 2012-09-30 22:33 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-07 18:51 - 2012-10-03 01:43 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2013-07-07 18:51 - 2012-09-30 17:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-07 18:51 - 2012-09-30 17:03 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-07 18:29 - 2013-07-07 18:29 - 00008398 ____A C:\Users\Martin\Desktop\cc_20130707_182939.reg
2013-07-07 18:25 - 2013-07-07 18:25 - 00000000 ____A C:\Windows\setuperr.log
2013-07-07 18:24 - 2013-07-07 18:24 - 00052188 ____A C:\Users\Martin\Desktop\cc_20130707_182425.reg
2013-07-07 18:23 - 2012-11-07 20:29 - 00000000 ____D C:\Windows\Panther
2013-07-07 18:23 - 2012-10-03 01:38 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Azureus
2013-07-07 16:37 - 2012-10-17 18:46 - 00000132 ____A C:\Users\Martin\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-07-04 18:58 - 2012-10-17 18:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 15:22 - 2013-06-14 22:46 - 00000000 ____D C:\ProgramData\Unity
2013-07-03 04:16 - 2012-09-30 15:28 - 00000000 ____D C:\Users\Martin\Documents\My Games
2013-07-02 23:07 - 2012-10-01 18:48 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2013-07-02 22:44 - 2013-07-02 22:44 - 00000202 ____A C:\Users\Martin\Desktop\Deadpool.url
2013-07-01 00:59 - 2013-07-01 00:59 - 00290381 ____A C:\Users\Martin\Desktop\Kiste.c4d
2013-06-30 14:36 - 2012-10-06 14:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Skyrim
2013-06-30 14:35 - 2012-12-24 13:09 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2013-06-29 21:34 - 2013-06-14 14:41 - 00000000 ____D C:\Users\Martin\Desktop\plaster and concrete
2013-06-27 16:40 - 2013-06-27 16:40 - 00018022 ____A C:\Users\Martin\Desktop\Farbenfroh.esp
2013-06-26 18:58 - 2013-06-26 18:58 - 00000000 ____D C:\Users\Martin\Desktop\Fackelfarben
2013-06-26 18:45 - 2013-06-26 18:45 - 15530220 ____A C:\Users\Martin\Desktop\Fackelfarben.rar
2013-06-23 20:54 - 2012-09-30 12:31 - 00002331 ____A C:\Users\Martin\Desktop\Google Chrome.lnk
2013-06-19 14:28 - 2012-12-29 14:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\GetRightToGo
2013-06-19 12:09 - 2013-04-19 22:14 - 00000000 ____A C:\END
2013-06-18 21:27 - 2013-04-30 02:23 - 00000000 ____D C:\Users\Martin\AppData\Local\Game Dev Tycoon
2013-06-17 23:03 - 2013-06-17 23:03 - 00416436 ____A C:\Users\Martin\Desktop\Stalker paradise2.pptx
2013-06-17 22:46 - 2013-06-17 22:46 - 00000000 ____D C:\Users\Martin\Desktop\Clickdummy_stalkerparadise
2013-06-17 20:52 - 2013-06-17 20:52 - 00640952 ____A C:\Users\Martin\Desktop\Farbenfroh (2).rar
2013-06-17 13:18 - 2013-06-17 13:18 - 00638653 ____A C:\Users\Martin\Desktop\Farbenfroh (1).rar
2013-06-17 10:34 - 2013-06-17 10:34 - 00658111 ____A C:\Users\Martin\Desktop\Farbenfroh.rar
2013-06-16 23:27 - 2013-06-16 23:27 - 34365484 ____A C:\Users\Martin\Desktop\shmaatz isht shlimm - tün leidet.wav
2013-06-16 18:55 - 2012-12-24 13:09 - 00000604 ____A C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2013-06-15 18:23 - 2013-06-15 18:23 - 04969330 ____A C:\Users\Martin\Desktop\Harvest_Flora_for_Nehrim-40558-V1.rar
2013-06-15 13:56 - 2013-01-12 03:10 - 00001456 ____A C:\Users\Martin\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-06-15 01:16 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\stetic
2013-06-15 01:16 - 2013-06-15 01:15 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-15 01:16 - 2013-06-15 01:15 - 00000000 ____D C:\Users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 22:49 - 2013-06-14 22:48 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Unity
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2013-06-14 22:46 - 2013-04-13 22:37 - 00000000 ____D C:\Users\Martin\AppData\Local\Unity
2013-06-13 23:45 - 2013-06-11 20:30 - 00000000 ____D C:\Users\Martin\AppData\Roaming\HexChat
2013-06-12 23:54 - 2013-06-12 23:54 - 00000661 ____A C:\Users\Public\Desktop\Unity.lnk
2013-06-12 23:54 - 2013-06-12 23:54 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2013-06-12 17:41 - 2013-06-12 17:41 - 00008644 ____A C:\Users\Martin\Desktop\Nehrim XP Progess Bar DV.rar
2013-06-11 20:30 - 2013-06-11 20:30 - 00000000 ____D C:\ProgramData\Package Cache
2013-06-10 18:07 - 2012-10-09 18:09 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Origin
2013-06-10 18:07 - 2012-10-09 18:07 - 00000000 ____D C:\ProgramData\Origin
2013-06-10 18:03 - 2012-10-09 18:08 - 00000000 ____D C:\Users\Martin\AppData\Local\Origin

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 05:59

==================== End Of Log ============================

--- --- ---

Addition.txt:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-07-2013
Ran by Martin at 2013-07-09 00:45:34
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe AIR (x32 Version: 3.4.0.2540)
Adobe Download Assistant (x32 Version: 1.2.3)
Adobe Flash Player 11 ActiveX (x32 Version: 11.3.300.265)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Photoshop CS6 (x32 Version: 13.0)
Adobe Reader X (10.1.6) - Deutsch (x32 Version: 10.1.6)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)
Anna - Extended Edition (x32)
Antichamber (x32)
applicationupdater (HKCU)
ArktwendUninstaller (x32 Version: 1.0.0)
ASRock eXtreme Tuner v0.1.190 (x32)
ASRock XFast RAM v2.0.9
Assassin's Creed (x32)
Assassin's Creed Revelations 1.03 (x32 Version: 1.03)
Assassin's Creed(R) III v1.03 (x32 Version: 1.03)
Audacity 2.0.2 (x32 Version: 2.0.2)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Battlefield 3™ (x32 Version: 1.5.0.0)
Battlefield: Bad Company™ 2 (x32 Version: 1.0.0.0)
Battlelog Web Plugins (x32 Version: 2.1.2)
BioShock Infinite (x32)
BlueStacks App Player (x32 Version: 0.7.7.813)
Borderlands (x32 Version: 1.0.295)
Borderlands 2 (x32)
Brütal Legend (x32)
Bulletstorm (x32 Version: 1.0.0000.130)
BulletStorm (x32 Version: 1.0.0005.130)
Capsule (x32 Version: 1.0.000)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485)
CCC Help Czech (x32 Version: 2012.1219.1520.27485)
CCC Help Danish (x32 Version: 2012.1219.1520.27485)
CCC Help Dutch (x32 Version: 2012.1219.1520.27485)
CCC Help English (x32 Version: 2012.1219.1520.27485)
CCC Help Finnish (x32 Version: 2012.1219.1520.27485)
CCC Help French (x32 Version: 2012.1219.1520.27485)
CCC Help German (x32 Version: 2012.1219.1520.27485)
CCC Help Greek (x32 Version: 2012.1219.1520.27485)
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485)
CCC Help Italian (x32 Version: 2012.1219.1520.27485)
CCC Help Japanese (x32 Version: 2012.1219.1520.27485)
CCC Help Korean (x32 Version: 2012.1219.1520.27485)
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485)
CCC Help Polish (x32 Version: 2012.1219.1520.27485)
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485)
CCC Help Russian (x32 Version: 2012.1219.1520.27485)
CCC Help Spanish (x32 Version: 2012.1219.1520.27485)
CCC Help Swedish (x32 Version: 2012.1219.1520.27485)
CCC Help Thai (x32 Version: 2012.1219.1520.27485)
CCC Help Turkish (x32 Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
CCleaner (Version: 3.24)
Ceville (x32)
CPUID CPU-Z 1.62
CrystalDiskInfo 5.0.5 (x32 Version: 5.0.5)
Deadpool (x32)
DH Driver Cleaner Professional Edition (x32 Version: Version 1.5)
Dishonored (x32 Version: 1.0)
Don't Starve (x32)
Doom 3 (x32 Version: 1.00.0000)
Dota 2 (x32)
dows-Treiberpaket - Focusrite USB 2.0 Audio Driver (09/22/2011 2.2.0.0) (Version: 09/22/2011 2.2.0.0)
ESN Sonar (x32 Version: 0.70.4)
Far Cry 3 (x32 Version: 1.05)
Far Cry® 3 Blood Dragon (x32)
Fraps (remove only) (x32)
FXAA Post Process Injector (x32)
Game Dev Tycoon Version 1.3.2 (x32 Version: 1.3.2)
gamelauncher-code4344-beta (HKCU)
Google Chrome (HKCU Version: 27.0.1453.116)
Guild Wars 2 (x32)
Haali Media Splitter (x32)
HashTab 5.1.0.23 (Version: 5.1.0.23)
HexChat (x64) (Version: 2.9.5)
Home (x32)
Incredipede (x32)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2867)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214)
Java 7 Update 15 (64-bit) (Version: 7.0.150)
Kingdoms of Amalur: Reckoning™ (x32)
LAME v3.99.3 (for Windows) (x32)
Legend of Grimrock (x32)
Logitech Gaming Software (Version: 8.35.18)
Logitech Gaming Software 8.35 (Version: 8.35.18)
LogMeIn Hamachi (x32 Version: 2.1.0.374)
Media Player Classic - Home Cinema 1.6.1.4235 (x32 Version: 1.6.1.4235)
Metro 2033 (x32)
Metro: Last Light (x32)
Microsoft – Speichern als PDF – Add-In für 2007 Microsoft Office-Programme (x32 Version: 12.0.4518.1014)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Corporation (Version: 9.1.0.0)
Microsoft Corporation (x32 Version: 9.1.0.0)
Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft LifeCam (Version: 3.60.253.0)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Might and Magic: Clash of Heroes (x32)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Mozilla Thunderbird 17.0.7 (x86 de) (x32 Version: 17.0.7)
MSVCRT Redists (Version: 1.0)
My Game Long Name
MyPhoneExplorer (x32 Version: 1.8.4)
NehrimUninstaller (x32 Version: 1.0.0)
Neverwinter (x32)
Nexus Mod Manager (Version: 0.44.15)
Notepad++ (x32 Version: 6.3.2)
Notification Center (x32 Version: 0.7.7.813)
NVIDIA PhysX (x32 Version: 9.12.1031)
Oblivion - BTmod 2.20 (x32 Version: 2.20)
Oblivion - Construction Set (x32 Version: 1.00.0000)
Oblivion (x32 Version: 1.00.0000)
Oblivion mod manager 1.1.12 (x32)
OpenTTD 1.2.3 (x32 Version: 1.2.3)
Origin (x32 Version: 9.0.13.2142)
Path of Exile (x32 Version: 0.10.0.22479)
PDF Settings CS6 (x32 Version: 11.0)
PlanetSide 2 (x32)
PunkBuster Services (x32 Version: 0.991)
RAGE (x32)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
Risen 2 - Dark Waters (x32)
Saints Row: The Third (x32)
Secure Download Manager (x32 Version: 3.1.0)
Shank 2 (x32)
Skype™ 6.3 (x32 Version: 6.3.107)
Sony Ericsson Update Engine (x32 Version: 2.13.2.16)
Sony PC Companion 2.10.136 (x32 Version: 2.10.136)
SpeedFan (remove only) (x32)
Steam (x32 Version: 1.0.0.0)
SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013. (x32 Version: +Recorder.2013.55)
Syberia (x32)
Syberia 2 (x32)
Symphony (x32)
TeamSpeak 3 Client (Version: 3.0.10)
Terraria (x32)
The Elder Scrolls III: Morrowind (x32)
The Elder Scrolls V: Skyrim (x32)
The Walking Dead (x32)
The Witcher 2 (x32 Version: 1.00.0000)
Thomas Was Alone (x32)
Tomb Raider (x32)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Unity (x32 Version: )
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Uplay (x32 Version: 2.1)
Vegas Pro 10.0 (64-bit) (Version: 10.0.470)
Winamp (x32 Version: 5.63 )
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Worms Reloaded (x32)
XCOM: Enemy Unknown (x32)
XSplit (x32 Version: 1.2.1303.0101)

==================== Restore Points  =========================

07-07-2013 15:49:01 avast! Free Antivirus Setup
07-07-2013 15:53:56 avast! Free Antivirus Setup
07-07-2013 16:31:11 avast! Free Antivirus Setup
07-07-2013 17:01:07 avast! Free Antivirus Setup
07-07-2013 18:17:26 Windows Update
07-07-2013 18:53:17 Windows Update
07-07-2013 19:39:02 Windows Update
07-07-2013 20:10:22 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-07-08 21:18 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {13535831-B6CA-4875-AD47-57AA4D9B9464} - System32\Tasks\AdobeAAMUpdater-1.0-Cheeseblock-Martin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {141EA4F6-2493-46FC-86F5-5D0E6515DE6E} - System32\Tasks\avast! Emergency Update => C:\AVAST Software\Avast\AvastEmUpdate.exe No File
Task: {77D86E29-540B-4E93-B220-A0CA40D7E8C2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {ACA948EE-BE99-470C-83E7-EC57120B9A94} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30] (Google Inc.)
Task: {B077508A-5A89-465A-9AA0-DECAD86BFB00} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30] (Google Inc.)
Task: {CCCEC94D-2A19-461D-9DC1-A72CD953ACB6} - System32\Tasks\CCleanerSkipUAC => C:\CCleaner\CCleaner.exe No File
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/09/2013 00:12:36 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Oblivion.exe, Version: 1.2.0.416, Zeitstempel: 0x462392c7
Name des fehlerhaften Moduls: Oblivion.exe, Version: 1.2.0.416, Zeitstempel: 0x462392c7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x004e19fa
ID des fehlerhaften Prozesses: 0x84c
Startzeit der fehlerhaften Anwendung: 0xOblivion.exe0
Pfad der fehlerhaften Anwendung: Oblivion.exe1
Pfad des fehlerhaften Moduls: Oblivion.exe2
Berichtskennung: Oblivion.exe3

Error: (07/08/2013 09:28:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2013 06:40:23 PM) (Source: Application Hang) (User: )
Description: Programm vegas100.exe, Version 10.0.0.470 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 878

Startzeit: 01ce7bed10a66d8d

Endzeit: 9

Anwendungspfad: F:\Vegas Pro 10.0\vegas100.exe

Berichts-ID: 146872ce-e7ed-11e2-a0d1-bc5ff45085b9

Error: (07/08/2013 02:44:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2013 02:31:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2013 02:29:00 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2013 02:21:49 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2013 11:48:31 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2013 08:31:26 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/07/2013 11:23:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (07/08/2013 09:27:48 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (07/08/2013 02:41:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 02:41:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 16279.01 MB
Available physical RAM: 12126.78 MB
Total Pagefile: 32556.2 MB
Available Pagefile: 27666.93 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:107.32 GB) (Free:35.67 GB) NTFS (Disk=0 Partition=2)
Drive d: (Oblivion) (CDROM) (Total:4.11 GB) (Free:0 GB) UDF
Drive f: (Volume) (Fixed) (Total:824.09 GB) (Free:260.32 GB) NTFS (Disk=0 Partition=3)
Drive h: (My Book) (Fixed) (Total:1862.98 GB) (Free:1305.3 GB) NTFS (Disk=1 Partition=1)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 1ED9B832)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=107 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=824 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00021365)
Partition 1: (Not Active) - (Size=-198659014656) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 09.07.2013, 07:21

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

maedron · 09.07.2013, 09:20

Muss diesmal dazu sagen, dass dies das 2. Logfile von Combofix ist. Nach dem Erstellen der ersten .txt konnte ich diese nicht finden, da ich annahm, dass sie wie bei den anderen Scannern auch, auf dem Desktop landet. Erst nach dem 2. Scan ist es mir in der Anleitung aufgefallen, dass es sich unter C:\ befindet.
Das erwähne ich, weil er mir beim ersten Durchlauf eine .dll und eine .ini gelöscht hat.
Ich hoffe, dass das Log dadurch nicht an Aussagekräftigkeit verliert.

Combofix Log:

Code:

ATTFilter

ComboFix 13-07-08.04 - Martin 09.07.2013  10:04:21.2.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.16279.13792 [GMT 2:00]
ausgeführt von:: c:\users\Martin\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-09 bis 2013-07-09  ))))))))))))))))))))))))))))))
.
.
2013-07-09 08:06 . 2013-07-09 08:06	--------	d-----w-	c:\users\matt\AppData\Local\temp
2013-07-09 08:06 . 2013-07-09 08:06	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-08 23:17 . 2013-07-08 23:17	--------	d-----w-	c:\users\Martin\AppData\Roaming\Opera Software
2013-07-08 23:17 . 2013-07-08 23:17	--------	d-----w-	c:\users\Martin\AppData\Local\Opera Software
2013-07-08 22:44 . 2013-07-08 22:44	--------	d-----w-	C:\FRST
2013-07-07 21:29 . 2013-07-07 21:29	--------	d-----w-	c:\users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 21:29 . 2013-07-07 21:29	--------	d-----w-	c:\programdata\Malwarebytes
2013-07-07 21:04 . 2013-07-07 21:11	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2013-07-07 18:52 . 2012-10-09 18:17	55296	----a-w-	c:\windows\system32\dhcpcsvc6.dll
2013-07-07 18:50 . 2013-01-24 06:01	223752	----a-w-	c:\windows\system32\drivers\fvevol.sys
2013-07-07 18:19 . 2013-07-07 18:19	--------	d-----w-	c:\program files\Microsoft LifeCam
2013-07-07 18:19 . 2013-07-07 18:19	--------	d-----w-	c:\program files (x86)\Microsoft LifeCam
2013-07-07 18:18 . 2012-12-16 17:11	46080	----a-w-	c:\windows\system32\atmlib.dll
2013-07-07 18:18 . 2012-12-16 14:45	367616	----a-w-	c:\windows\system32\atmfd.dll
2013-07-07 18:18 . 2012-12-16 14:13	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2013-07-07 18:18 . 2012-12-16 14:13	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2013-07-07 18:16 . 2013-04-26 05:51	751104	----a-w-	c:\windows\system32\win32spl.dll
2013-07-07 18:16 . 2013-04-26 04:55	492544	----a-w-	c:\windows\SysWow64\win32spl.dll
2013-07-07 18:16 . 2012-09-25 22:47	78336	----a-w-	c:\windows\SysWow64\synceng.dll
2013-07-07 18:16 . 2013-05-13 05:51	1464320	----a-w-	c:\windows\system32\crypt32.dll
2013-07-07 18:16 . 2013-05-13 03:43	1192448	----a-w-	c:\windows\system32\certutil.exe
2013-07-07 18:16 . 2013-05-13 03:08	903168	----a-w-	c:\windows\SysWow64\certutil.exe
2013-07-07 18:16 . 2013-05-13 05:51	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-07-07 18:16 . 2013-05-13 05:51	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-07-07 18:16 . 2013-05-13 05:50	52224	----a-w-	c:\windows\system32\certenc.dll
2013-07-07 18:16 . 2013-05-13 04:45	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-07-07 18:16 . 2013-05-13 04:45	1160192	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-07-07 18:16 . 2013-05-13 04:45	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-07-07 18:16 . 2013-05-13 03:08	43008	----a-w-	c:\windows\SysWow64\certenc.dll
2013-07-07 18:15 . 2013-03-19 06:04	5550424	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-07-07 18:15 . 2013-03-19 05:04	3968856	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2013-07-07 18:15 . 2013-03-19 05:46	43520	----a-w-	c:\windows\system32\csrsrv.dll
2013-07-07 18:15 . 2013-03-19 05:04	3913560	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2013-07-07 18:15 . 2013-03-19 04:47	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2013-07-07 18:15 . 2013-03-19 03:06	112640	----a-w-	c:\windows\system32\smss.exe
2013-07-07 17:01 . 2013-07-07 17:01	378944	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-07-07 17:01 . 2013-05-09 08:59	33400	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-07-07 17:01 . 2013-05-09 08:59	72016	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-07-07 17:01 . 2013-05-09 08:59	64288	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-07-07 17:01 . 2013-07-07 17:01	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-07-07 17:01 . 2013-07-07 17:01	1030952	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-07-07 17:01 . 2013-05-09 08:59	65336	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-07-07 17:01 . 2013-05-09 08:59	80816	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-07-07 17:01 . 2013-05-09 08:58	287840	----a-w-	c:\windows\system32\aswBoot.exe
2013-07-07 17:01 . 2013-05-09 08:58	41664	----a-w-	c:\windows\avastSS.scr
2013-06-14 23:16 . 2013-06-14 23:16	--------	d-----w-	c:\users\Martin\AppData\Roaming\stetic
2013-06-14 23:15 . 2013-06-14 23:16	--------	d-----w-	c:\users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-14 23:15 . 2013-06-14 23:16	--------	d-----w-	c:\users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 20:48 . 2013-06-14 20:49	--------	d-----w-	c:\users\Martin\AppData\Roaming\Unity
2013-06-14 20:46 . 2013-06-14 20:46	--------	d-----w-	c:\users\Martin\AppData\Roaming\Apple Computer
2013-06-14 20:46 . 2013-06-14 20:46	--------	d-----w-	c:\users\Martin\AppData\Local\Apple Computer
2013-06-14 20:46 . 2013-07-03 13:22	--------	d-----w-	c:\programdata\Unity
2013-06-11 18:30 . 2013-06-13 21:45	--------	d-----w-	c:\users\Martin\AppData\Roaming\HexChat
2013-06-11 18:30 . 2013-06-11 18:30	--------	d-----w-	c:\programdata\Package Cache
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-07 16:51 . 2012-09-30 15:03	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-07 16:51 . 2012-09-30 15:03	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-04-13 05:49 . 2013-07-07 18:52	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-07-07 18:52	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-07-07 18:52	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-07-07 18:52	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-07-07 18:52	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-07-07 18:52	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2009-09-27 08:39	369152	--sh--w-	c:\windows\SysWOW64\avisynth.dll
2005-07-14 11:31	32256	--sh--w-	c:\windows\SysWOW64\AVSredirect.dll
2004-02-22 09:11	719872	--sh--w-	c:\windows\SysWOW64\devil.dll
2006-05-03 10:06	163328	--sha-r-	c:\windows\SysWOW64\flvDX.dll
2004-01-24 23:00	70656	--sh--w-	c:\windows\SysWOW64\i420vfw.dll
2007-02-21 11:47	31232	--sha-r-	c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30	216064	--sha-r-	c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00	107520	--sha-r-	c:\windows\SysWOW64\TAKDSDecoder.dll
2012-10-05 18:54	188416	--sha-r-	c:\windows\SysWOW64\winDCE32.dll
2004-01-24 23:00	70656	--sh--w-	c:\windows\SysWOW64\yv12vfw.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-26 291608]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
"LogMeIn Hamachi Ui"="f:\logmein hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
"avast"="f:\avast software\Avast\avastUI.exe" [2013-05-09 4858968]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 ffusb2audio;Focusrite USB 2.0 Audio Driver;c:\windows\system32\DRIVERS\ffusb2audio.sys;c:\windows\SYSNATIVE\DRIVERS\ffusb2audio.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;f:\logmein hamachi\hamachi-2.exe;f:\logmein hamachi\hamachi-2.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core.job
- c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 10:31]
.
2013-07-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA.job
- c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 10:31]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	f:\avast software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-10-17 13307496]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-10 171040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-10 399392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-10 441888]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\8w2pcce5.default\
FF - ExtSQL: 2013-07-07 19:01; wrc@avast.com; f:\avast software\Avast\WebRep\FF
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-617326000-1486708450-1060777791-1000\Software\SecuROM\License information*]
"datasecu"=hex:6f,5d,0d,89,4b,1b,6a,db,e4,37,f6,93,cb,0d,64,07,95,b2,df,cb,e1,
   c1,a6,d7,5a,41,9d,a5,e9,ef,a7,71,af,ef,31,b0,8c,90,96,06,41,4d,07,e7,ff,9e,\
"rkeysecu"=hex:1d,5f,4b,9d,d6,51,5b,fd,4a,79,99,5d,16,8b,3a,32
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-09  10:07:52
ComboFix-quarantined-files.txt  2013-07-09 08:07
ComboFix2.txt  2013-07-09 07:55
.
Vor Suchlauf: 16 Verzeichnis(se), 37.835.837.440 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 37.767.127.040 Bytes frei
.
- - End Of File - - 05A89B624D9873023E65E4B3E97C5D20
A36C5E4F47E84449FF07ED3517B43A31

schrauber · 09.07.2013, 09:56

Bitte den Inhalt von C:\Qoobox\Combofix2.txt posten.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST Log bitte.

maedron · 09.07.2013, 10:28

Super, da ist ja das erste Combofix-Log.

Combofix2.txt:

Code:

ATTFilter

ComboFix 13-07-08.04 - Martin 09.07.2013   9:50.1.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.16279.14159 [GMT 2:00]
ausgeführt von:: c:\users\Martin\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\frapsvid.dll
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-09 bis 2013-07-09  ))))))))))))))))))))))))))))))
.
.
2013-07-09 07:54 . 2013-07-09 07:54	--------	d-----w-	c:\users\matt\AppData\Local\temp
2013-07-09 07:54 . 2013-07-09 07:54	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-08 23:17 . 2013-07-08 23:17	--------	d-----w-	c:\users\Martin\AppData\Roaming\Opera Software
2013-07-08 23:17 . 2013-07-08 23:17	--------	d-----w-	c:\users\Martin\AppData\Local\Opera Software
2013-07-08 22:44 . 2013-07-08 22:44	--------	d-----w-	C:\FRST
2013-07-07 21:29 . 2013-07-07 21:29	--------	d-----w-	c:\users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 21:29 . 2013-07-07 21:29	--------	d-----w-	c:\programdata\Malwarebytes
2013-07-07 21:04 . 2013-07-07 21:11	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2013-07-07 18:52 . 2012-10-09 18:17	55296	----a-w-	c:\windows\system32\dhcpcsvc6.dll
2013-07-07 18:50 . 2013-01-24 06:01	223752	----a-w-	c:\windows\system32\drivers\fvevol.sys
2013-07-07 18:19 . 2013-07-07 18:19	--------	d-----w-	c:\program files\Microsoft LifeCam
2013-07-07 18:19 . 2013-07-07 18:19	--------	d-----w-	c:\program files (x86)\Microsoft LifeCam
2013-07-07 18:18 . 2012-12-16 17:11	46080	----a-w-	c:\windows\system32\atmlib.dll
2013-07-07 18:18 . 2012-12-16 14:45	367616	----a-w-	c:\windows\system32\atmfd.dll
2013-07-07 18:18 . 2012-12-16 14:13	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2013-07-07 18:18 . 2012-12-16 14:13	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2013-07-07 18:16 . 2013-04-26 05:51	751104	----a-w-	c:\windows\system32\win32spl.dll
2013-07-07 18:16 . 2013-04-26 04:55	492544	----a-w-	c:\windows\SysWow64\win32spl.dll
2013-07-07 18:16 . 2012-09-25 22:47	78336	----a-w-	c:\windows\SysWow64\synceng.dll
2013-07-07 18:16 . 2013-05-13 05:51	1464320	----a-w-	c:\windows\system32\crypt32.dll
2013-07-07 18:16 . 2013-05-13 03:43	1192448	----a-w-	c:\windows\system32\certutil.exe
2013-07-07 18:16 . 2013-05-13 03:08	903168	----a-w-	c:\windows\SysWow64\certutil.exe
2013-07-07 18:16 . 2013-05-13 05:51	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-07-07 18:16 . 2013-05-13 05:51	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-07-07 18:16 . 2013-05-13 05:50	52224	----a-w-	c:\windows\system32\certenc.dll
2013-07-07 18:16 . 2013-05-13 04:45	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-07-07 18:16 . 2013-05-13 04:45	1160192	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-07-07 18:16 . 2013-05-13 04:45	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-07-07 18:16 . 2013-05-13 03:08	43008	----a-w-	c:\windows\SysWow64\certenc.dll
2013-07-07 18:15 . 2013-03-19 06:04	5550424	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-07-07 18:15 . 2013-03-19 05:04	3968856	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2013-07-07 18:15 . 2013-03-19 05:46	43520	----a-w-	c:\windows\system32\csrsrv.dll
2013-07-07 18:15 . 2013-03-19 05:04	3913560	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2013-07-07 18:15 . 2013-03-19 04:47	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2013-07-07 18:15 . 2013-03-19 03:06	112640	----a-w-	c:\windows\system32\smss.exe
2013-07-07 17:01 . 2013-07-07 17:01	378944	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-07-07 17:01 . 2013-05-09 08:59	33400	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-07-07 17:01 . 2013-05-09 08:59	72016	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-07-07 17:01 . 2013-05-09 08:59	64288	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-07-07 17:01 . 2013-07-07 17:01	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-07-07 17:01 . 2013-07-07 17:01	1030952	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-07-07 17:01 . 2013-05-09 08:59	65336	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-07-07 17:01 . 2013-05-09 08:59	80816	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-07-07 17:01 . 2013-05-09 08:58	287840	----a-w-	c:\windows\system32\aswBoot.exe
2013-07-07 17:01 . 2013-05-09 08:58	41664	----a-w-	c:\windows\avastSS.scr
2013-06-14 23:16 . 2013-06-14 23:16	--------	d-----w-	c:\users\Martin\AppData\Roaming\stetic
2013-06-14 23:15 . 2013-06-14 23:16	--------	d-----w-	c:\users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-14 23:15 . 2013-06-14 23:16	--------	d-----w-	c:\users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 20:48 . 2013-06-14 20:49	--------	d-----w-	c:\users\Martin\AppData\Roaming\Unity
2013-06-14 20:46 . 2013-06-14 20:46	--------	d-----w-	c:\users\Martin\AppData\Roaming\Apple Computer
2013-06-14 20:46 . 2013-06-14 20:46	--------	d-----w-	c:\users\Martin\AppData\Local\Apple Computer
2013-06-14 20:46 . 2013-07-03 13:22	--------	d-----w-	c:\programdata\Unity
2013-06-11 18:30 . 2013-06-13 21:45	--------	d-----w-	c:\users\Martin\AppData\Roaming\HexChat
2013-06-11 18:30 . 2013-06-11 18:30	--------	d-----w-	c:\programdata\Package Cache
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-07 16:51 . 2012-09-30 15:03	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-07 16:51 . 2012-09-30 15:03	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-04-13 05:49 . 2013-07-07 18:52	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-07-07 18:52	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-07-07 18:52	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-07-07 18:52	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-07-07 18:52	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-07-07 18:52	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2009-09-27 08:39	369152	--sh--w-	c:\windows\SysWOW64\avisynth.dll
2005-07-14 11:31	32256	--sh--w-	c:\windows\SysWOW64\AVSredirect.dll
2004-02-22 09:11	719872	--sh--w-	c:\windows\SysWOW64\devil.dll
2006-05-03 10:06	163328	--sha-r-	c:\windows\SysWOW64\flvDX.dll
2004-01-24 23:00	70656	--sh--w-	c:\windows\SysWOW64\i420vfw.dll
2007-02-21 11:47	31232	--sha-r-	c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30	216064	--sha-r-	c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00	107520	--sha-r-	c:\windows\SysWOW64\TAKDSDecoder.dll
2012-10-05 18:54	188416	--sha-r-	c:\windows\SysWOW64\winDCE32.dll
2004-01-24 23:00	70656	--sh--w-	c:\windows\SysWOW64\yv12vfw.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-26 291608]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
"LogMeIn Hamachi Ui"="f:\logmein hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
"avast"="f:\avast software\Avast\avastUI.exe" [2013-05-09 4858968]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 ffusb2audio;Focusrite USB 2.0 Audio Driver;c:\windows\system32\DRIVERS\ffusb2audio.sys;c:\windows\SYSNATIVE\DRIVERS\ffusb2audio.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;f:\logmein hamachi\hamachi-2.exe;f:\logmein hamachi\hamachi-2.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core.job
- c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 10:31]
.
2013-07-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA.job
- c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-30 10:31]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	f:\avast software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-10-17 13307496]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-10 171040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-10 399392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-10 441888]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\8w2pcce5.default\
FF - ExtSQL: 2013-07-07 19:01; wrc@avast.com; f:\avast software\Avast\WebRep\FF
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
SafeBoot-31771550.sys
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-PlanetSide 2 Beta - f:\planetside 2 beta\Uninstaller.exe
AddRemove-UnityWebPlayer - c:\users\Martin\AppData\Local\Unity\WebPlayer\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-617326000-1486708450-1060777791-1000\Software\SecuROM\License information*]
"datasecu"=hex:6f,5d,0d,89,4b,1b,6a,db,e4,37,f6,93,cb,0d,64,07,95,b2,df,cb,e1,
   c1,a6,d7,5a,41,9d,a5,e9,ef,a7,71,af,ef,31,b0,8c,90,96,06,41,4d,07,e7,ff,9e,\
"rkeysecu"=hex:1d,5f,4b,9d,d6,51,5b,fd,4a,79,99,5d,16,8b,3a,32
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-09  09:55:08
ComboFix-quarantined-files.txt  2013-07-09 07:55
.
Vor Suchlauf: 10 Verzeichnis(se), 38.177.050.624 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 37.778.898.944 Bytes frei
.
- - End Of File - - 01E62505AA6FAE8DC0F7CD9CCB5972E5
A36C5E4F47E84449FF07ED3517B43A31

AdwCleaner Log:

Code:

ATTFilter

# AdwCleaner v2.304 - Datei am 09/07/2013 um 11:11:02 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : Martin - CHEESEBLOCK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Martin\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Conduit

***** [Internet Browser] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\8w2pcce5.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v27.0.1453.116

Datei : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [949 octets] - [09/07/2013 11:11:02]

########## EOF - C:\AdwCleaner[S1].txt - [1008 octets] ##########

JRT.txt:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.1 (07.08.2013:5)
OS: Windows 7 Professional x64
Ran by Martin on 09.07.2013 at 11:14:16,54
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.07.2013 at 11:16:33,81
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Frisches FRST Log.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-07-2013
Ran by Martin (administrator) on 09-07-2013 11:20:20
Running from C:\Users\Martin\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) F:\AVAST Software\Avast\AvastSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(LogMeIn Inc.) F:\LogMeIn Hamachi\hamachi-2-ui.exe
(AVAST Software) F:\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(LogMeIn Inc.) F:\LogMeIn Hamachi\hamachi-2.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [6900024 2012-07-24] (Logitech Inc.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] "F:\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKLM-x32\...\Run: [avast] "F:\AVAST Software\Avast\avastUI.exe" /nogui [x]
HKLM-x32\...\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe" [135536 2010-12-13] (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - F:\AVAST Software\Avast\aswWebRepIE64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - F:\AVAST Software\Avast\aswWebRepIE.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - F:\AVAST Software\Avast\aswWebRepIE64.dll No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - F:\AVAST Software\Avast\aswWebRepIE.dll No File
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\8w2pcce5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] F:\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - F:\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Google Update) - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Turn Off the Lights) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.6_0
CHR Extension: (James White) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3_0
CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0
CHR Extension: (Google Search) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Wunderlist - To-do & Task List) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc\2.1.1_0
CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 avast! Antivirus; F:\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
R2 Hamachi2Svc; F:\LogMeIn Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-03-16] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-07] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-07] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-07] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-09-30] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
S3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [59224 2011-09-22] (Focusrite Audio Engineering Limited.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66328 2012-02-07] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-09-30] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-09 11:16 - 2013-07-09 11:16 - 00000626 ____A C:\Users\Martin\Desktop\JRT.txt
2013-07-09 11:14 - 2013-07-09 11:14 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 11:11 - 2013-07-09 11:11 - 00001077 ____A C:\AdwCleaner[S1].txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00552081 ____A (Oleg N. Scherbakov) C:\Users\Martin\Desktop\JRT.exe
2013-07-09 11:04 - 2013-07-09 11:04 - 00650027 ____A C:\Users\Martin\Desktop\adwcleaner.exe
2013-07-09 10:09 - 2013-07-09 10:07 - 00018128 ____A C:\Users\Martin\Desktop\ComboFix.txt
2013-07-09 10:07 - 2013-07-09 10:07 - 00018128 ____A C:\ComboFix.txt
2013-07-09 09:49 - 2013-07-09 10:07 - 00000000 ____D C:\Qoobox
2013-07-09 09:49 - 2013-07-09 09:54 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:49 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-09 09:49 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-09 09:49 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-09 09:42 - 2013-07-09 09:42 - 05086951 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Opera Software
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Local\Opera Software
2013-07-09 00:45 - 2013-07-09 00:45 - 00020090 ____A C:\Users\Martin\Desktop\Addition.txt
2013-07-09 00:44 - 2013-07-09 00:44 - 00000000 ____D C:\FRST
2013-07-09 00:43 - 2013-07-09 00:43 - 01934554 ____A (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-07-08 21:40 - 2013-07-08 21:40 - 00353391 ____A C:\Users\Martin\Desktop\Gmer.txt
2013-07-08 21:21 - 2013-07-08 21:21 - 00091340 ____A C:\Users\Martin\Desktop\Extras.Txt
2013-07-08 21:20 - 2013-07-08 21:20 - 00094020 ____A C:\Users\Martin\Desktop\OTL.Txt
2013-07-08 21:17 - 2013-07-08 21:12 - 00377856 ____A C:\Users\Martin\Desktop\gmer_2.1.19163.exe
2013-07-08 21:07 - 2013-07-08 21:07 - 00002639 ____A C:\Users\Martin\Desktop\trojboard_anweisung.txt
2013-07-08 21:05 - 2013-07-08 21:06 - 00000000 ____D C:\Users\Martin\Desktop\GE Project
2013-07-08 21:04 - 2013-07-08 21:05 - 00602112 ____A (OldTimer Tools) C:\Users\Martin\Desktop\OTL.exe
2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____A C:\Users\Martin\defogger_reenable
2013-07-08 16:45 - 2013-07-08 16:46 - 00004608 ____A C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-08 14:38 - 2013-07-08 14:38 - 00000000 ____D C:\Windows\pss
2013-07-08 13:33 - 2013-07-08 13:34 - 00000499 ____A C:\Users\Martin\Desktop\scans.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00003788 ____A C:\Users\Martin\Desktop\Rkill.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00000000 ____D C:\Users\Martin\Desktop\rkill
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-07 23:21 - 2013-07-09 10:10 - 00004678 ____A C:\Windows\PFRO.log
2013-07-07 23:04 - 2013-07-07 23:11 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-07 20:53 - 2012-12-07 15:20 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\Wpc.dll
2013-07-07 20:53 - 2012-12-07 15:15 - 02746368 ____A (Microsoft Corporation) C:\Windows\System32\gameux.dll
2013-07-07 20:53 - 2012-12-07 14:26 - 00308736 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-07-07 20:53 - 2012-12-07 14:20 - 02576384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-07-07 20:53 - 2012-12-07 13:20 - 00045568 ____A (Microsoft) C:\Windows\System32\oflc-nz.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00044544 ____A (Microsoft) C:\Windows\System32\pegibbfc.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00043520 ____A (Microsoft) C:\Windows\System32\csrr.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00030720 ____A (Microsoft) C:\Windows\System32\usk.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00023552 ____A (Microsoft) C:\Windows\System32\oflc.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi-pt.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi-fi.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00055296 ____A (Microsoft) C:\Windows\System32\cero.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00051712 ____A (Microsoft) C:\Windows\System32\esrb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00046592 ____A (Microsoft) C:\Windows\System32\fpb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00040960 ____A (Microsoft) C:\Windows\System32\cob-au.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00021504 ____A (Microsoft) C:\Windows\System32\grb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00015360 ____A (Microsoft) C:\Windows\System32\djctq.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00055296 ____A (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00051712 ____A (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00046592 ____A (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00045568 ____A (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00044544 ____A (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00043520 ____A (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00040960 ____A (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00030720 ____A (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00023552 ____A (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00021504 ____A (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00015360 ____A (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-07-07 20:53 - 2012-10-03 19:44 - 00303104 ____A (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00246272 ____A (Microsoft Corporation) C:\Windows\System32\netcorehc.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00216576 ____A (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00070656 ____A (Microsoft Corporation) C:\Windows\System32\nlaapi.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00018944 ____A (Microsoft Corporation) C:\Windows\System32\netevent.dll
2013-07-07 20:53 - 2012-10-03 19:42 - 00569344 ____A (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00175104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00156672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00018944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-07-07 20:53 - 2012-10-03 18:07 - 00045568 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpipreg.sys
2013-07-07 20:53 - 2012-01-13 09:12 - 00052224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-07-07 20:52 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-07-07 20:52 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-07-07 20:52 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-07-07 20:52 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-07-07 20:52 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-07-07 20:52 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-07-07 20:52 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-07-07 20:52 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-07-07 20:52 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-07-07 20:52 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-07-07 20:52 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-07-07 20:52 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-07-07 20:52 - 2012-11-30 07:43 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-07-07 20:52 - 2012-11-30 07:41 - 01161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-07-07 20:52 - 2012-11-30 07:41 - 00424448 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:53 - 01114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-07-07 20:52 - 2012-11-30 06:53 - 00274944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 05:23 - 00338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-07-07 20:52 - 2012-11-30 04:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 01:17 - 00420064 ____A C:\Windows\SysWOW64\locale.nls
2013-07-07 20:52 - 2012-11-30 01:15 - 00420064 ____A C:\Windows\System32\locale.nls
2013-07-07 20:52 - 2012-11-23 05:13 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-07-07 20:52 - 2012-11-22 07:44 - 00800768 ____A (Microsoft Corporation) C:\Windows\System32\usp10.dll
2013-07-07 20:52 - 2012-11-22 06:45 - 00626688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-07-07 20:52 - 2012-11-09 07:45 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-07-07 20:52 - 2012-11-09 06:42 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-07-07 20:52 - 2012-10-09 20:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll
2013-07-07 20:52 - 2012-10-09 20:17 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll
2013-07-07 20:52 - 2012-10-09 19:40 - 00193536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-07-07 20:52 - 2012-10-09 19:40 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-07-07 20:50 - 2013-01-24 08:01 - 00223752 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft LifeCam
2013-07-07 20:18 - 2012-12-16 19:11 - 00046080 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-07-07 20:18 - 2012-12-16 16:45 - 00367616 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-07-07 20:18 - 2012-12-16 16:13 - 00295424 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-07-07 20:18 - 2012-12-16 16:13 - 00034304 ____A (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-07-07 20:17 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-07-07 20:17 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-07-07 20:17 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-07-07 20:17 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-07-07 20:17 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-07 20:17 - 2013-02-15 08:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-07-07 20:17 - 2013-02-15 08:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-07-07 20:17 - 2013-02-15 08:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-07-07 20:17 - 2013-02-15 06:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-07-07 20:17 - 2013-02-15 06:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-07-07 20:17 - 2013-02-15 05:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-07-07 20:17 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023x.sys
2013-07-07 20:17 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-07-07 20:17 - 2013-01-04 07:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-07-07 20:17 - 2013-01-04 06:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-07-07 20:17 - 2013-01-04 04:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-07-07 20:17 - 2013-01-04 04:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-07-07 20:17 - 2013-01-04 04:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-07-07 20:17 - 2013-01-04 04:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-07-07 20:17 - 2013-01-03 08:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-07-07 20:17 - 2012-11-20 07:48 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-07-07 20:17 - 2012-11-20 06:51 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-07-07 20:17 - 2012-11-02 07:59 - 00478208 ____A (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-07-07 20:17 - 2012-11-02 07:11 - 00376832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-07-07 20:17 - 2012-11-01 07:43 - 02002432 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-07-07 20:17 - 2012-11-01 07:43 - 01882624 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-07-07 20:17 - 2012-11-01 06:47 - 01389568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-07-07 20:17 - 2012-11-01 06:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-07-07 20:17 - 2012-09-26 00:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-07-07 20:16 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-07-07 20:16 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-07-07 20:16 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-07-07 20:16 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-07-07 20:16 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-07-07 20:16 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-07-07 20:16 - 2012-09-26 00:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-07-07 20:15 - 2013-03-19 08:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-07-07 20:15 - 2013-03-19 07:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-07-07 20:15 - 2013-03-19 07:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-07-07 20:15 - 2013-03-19 07:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-07-07 20:15 - 2013-03-19 06:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-07-07 20:15 - 2013-03-19 05:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-07-07 19:01 - 2013-07-07 19:01 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-07 19:01 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-07-07 19:01 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-07-07 19:01 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-07-07 18:29 - 2013-07-07 18:29 - 00008398 ____A C:\Users\Martin\Desktop\cc_20130707_182939.reg
2013-07-07 18:25 - 2013-07-09 11:18 - 02440963 ____A C:\Windows\setupact.log
2013-07-07 18:25 - 2013-07-07 18:25 - 00000000 ____A C:\Windows\setuperr.log
2013-07-07 18:24 - 2013-07-07 18:24 - 00052188 ____A C:\Users\Martin\Desktop\cc_20130707_182425.reg
2013-07-02 22:44 - 2013-07-02 22:44 - 00000202 ____A C:\Users\Martin\Desktop\Deadpool.url
2013-07-01 00:59 - 2013-07-01 00:59 - 00290381 ____A C:\Users\Martin\Desktop\Kiste.c4d
2013-06-27 16:40 - 2013-06-27 16:40 - 00018022 ____A C:\Users\Martin\Desktop\Farbenfroh.esp
2013-06-26 18:58 - 2013-06-26 18:58 - 00000000 ____D C:\Users\Martin\Desktop\Fackelfarben
2013-06-26 18:45 - 2013-06-26 18:45 - 15530220 ____A C:\Users\Martin\Desktop\Fackelfarben.rar
2013-06-17 23:03 - 2013-06-17 23:03 - 00416436 ____A C:\Users\Martin\Desktop\Stalker paradise2.pptx
2013-06-17 22:46 - 2013-06-17 22:46 - 00000000 ____D C:\Users\Martin\Desktop\Clickdummy_stalkerparadise
2013-06-17 20:52 - 2013-06-17 20:52 - 00640952 ____A C:\Users\Martin\Desktop\Farbenfroh (2).rar
2013-06-17 13:18 - 2013-06-17 13:18 - 00638653 ____A C:\Users\Martin\Desktop\Farbenfroh (1).rar
2013-06-17 10:34 - 2013-06-17 10:34 - 00658111 ____A C:\Users\Martin\Desktop\Farbenfroh.rar
2013-06-16 23:27 - 2013-06-16 23:27 - 34365484 ____A C:\Users\Martin\Desktop\shmaatz isht shlimm - tün leidet.wav
2013-06-15 18:23 - 2013-06-15 18:23 - 04969330 ____A C:\Users\Martin\Desktop\Harvest_Flora_for_Nehrim-40558-V1.rar
2013-06-15 01:16 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\stetic
2013-06-15 01:15 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-15 01:15 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 22:48 - 2013-06-14 22:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Unity
2013-06-14 22:46 - 2013-07-03 15:22 - 00000000 ____D C:\ProgramData\Unity
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2013-06-14 14:41 - 2013-06-29 21:34 - 00000000 ____D C:\Users\Martin\Desktop\plaster and concrete
2013-06-12 23:54 - 2013-06-12 23:54 - 00000661 ____A C:\Users\Public\Desktop\Unity.lnk
2013-06-12 23:54 - 2013-06-12 23:54 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2013-06-12 17:41 - 2013-06-12 17:41 - 00008644 ____A C:\Users\Martin\Desktop\Nehrim XP Progess Bar DV.rar
2013-06-11 20:30 - 2013-06-13 23:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\HexChat
2013-06-11 20:30 - 2013-06-11 20:30 - 00000000 ____D C:\ProgramData\Package Cache

==================== One Month Modified Files and Folders =======

2013-07-09 11:18 - 2013-07-07 18:25 - 02440963 ____A C:\Windows\setupact.log
2013-07-09 11:18 - 2013-01-17 20:04 - 00000000 ____D C:\Users\Martin\AppData\Local\LogMeIn Hamachi
2013-07-09 11:18 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-09 11:17 - 2012-11-07 20:47 - 01295037 ____A C:\Windows\WindowsUpdate.log
2013-07-09 11:17 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-09 11:17 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-09 11:16 - 2013-07-09 11:16 - 00000626 ____A C:\Users\Martin\Desktop\JRT.txt
2013-07-09 11:14 - 2013-07-09 11:14 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 11:11 - 2013-07-09 11:11 - 00001077 ____A C:\AdwCleaner[S1].txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00552081 ____A (Oleg N. Scherbakov) C:\Users\Martin\Desktop\JRT.exe
2013-07-09 11:04 - 2013-07-09 11:04 - 00650027 ____A C:\Users\Martin\Desktop\adwcleaner.exe
2013-07-09 10:58 - 2012-09-30 12:31 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA.job
2013-07-09 10:16 - 2011-04-12 09:43 - 00696714 ____A C:\Windows\System32\perfh007.dat
2013-07-09 10:16 - 2011-04-12 09:43 - 00148010 ____A C:\Windows\System32\perfc007.dat
2013-07-09 10:16 - 2009-07-14 07:13 - 01612864 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-09 10:10 - 2013-07-07 23:21 - 00004678 ____A C:\Windows\PFRO.log
2013-07-09 10:07 - 2013-07-09 10:09 - 00018128 ____A C:\Users\Martin\Desktop\ComboFix.txt
2013-07-09 10:07 - 2013-07-09 10:07 - 00018128 ____A C:\ComboFix.txt
2013-07-09 10:07 - 2013-07-09 09:49 - 00000000 ____D C:\Qoobox
2013-07-09 10:07 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-07-09 09:54 - 2013-07-09 09:49 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:42 - 2013-07-09 09:42 - 05086951 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Opera Software
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Local\Opera Software
2013-07-09 00:45 - 2013-07-09 00:45 - 00020090 ____A C:\Users\Martin\Desktop\Addition.txt
2013-07-09 00:44 - 2013-07-09 00:44 - 00000000 ____D C:\FRST
2013-07-09 00:43 - 2013-07-09 00:43 - 01934554 ____A (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-07-09 00:25 - 2012-10-02 20:11 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Audacity
2013-07-09 00:20 - 2012-10-01 10:48 - 00000023 ____A C:\Windows\BlendSettings.ini
2013-07-08 22:58 - 2012-09-30 12:31 - 00001072 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core.job
2013-07-08 21:40 - 2013-07-08 21:40 - 00353391 ____A C:\Users\Martin\Desktop\Gmer.txt
2013-07-08 21:21 - 2013-07-08 21:21 - 00091340 ____A C:\Users\Martin\Desktop\Extras.Txt
2013-07-08 21:20 - 2013-07-08 21:20 - 00094020 ____A C:\Users\Martin\Desktop\OTL.Txt
2013-07-08 21:12 - 2013-07-08 21:17 - 00377856 ____A C:\Users\Martin\Desktop\gmer_2.1.19163.exe
2013-07-08 21:07 - 2013-07-08 21:07 - 00002639 ____A C:\Users\Martin\Desktop\trojboard_anweisung.txt
2013-07-08 21:06 - 2013-07-08 21:05 - 00000000 ____D C:\Users\Martin\Desktop\GE Project
2013-07-08 21:05 - 2013-07-08 21:04 - 00602112 ____A (OldTimer Tools) C:\Users\Martin\Desktop\OTL.exe
2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____A C:\Users\Martin\defogger_reenable
2013-07-08 21:04 - 2012-11-07 20:34 - 00000000 ____D C:\users\Martin
2013-07-08 16:46 - 2013-07-08 16:45 - 00004608 ____A C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-08 14:38 - 2013-07-08 14:38 - 00000000 ____D C:\Windows\pss
2013-07-08 13:34 - 2013-07-08 13:33 - 00000499 ____A C:\Users\Martin\Desktop\scans.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00003788 ____A C:\Users\Martin\Desktop\Rkill.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00000000 ____D C:\Users\Martin\Desktop\rkill
2013-07-08 11:46 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-08 01:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-07 23:11 - 2013-07-07 23:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-07 22:27 - 2013-02-13 21:35 - 01589822 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-07 21:16 - 2012-11-07 21:00 - 00162592 ____A C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-07 21:14 - 2009-07-14 06:45 - 10065392 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-07 21:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-07 20:42 - 2012-10-22 18:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-07 20:42 - 2012-10-22 18:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft LifeCam
2013-07-07 19:01 - 2013-07-07 19:01 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-07 19:01 - 2012-09-30 22:34 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-07-07 19:01 - 2012-09-30 22:33 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-07 18:51 - 2012-10-03 01:43 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2013-07-07 18:51 - 2012-09-30 17:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-07 18:51 - 2012-09-30 17:03 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-07 18:29 - 2013-07-07 18:29 - 00008398 ____A C:\Users\Martin\Desktop\cc_20130707_182939.reg
2013-07-07 18:25 - 2013-07-07 18:25 - 00000000 ____A C:\Windows\setuperr.log
2013-07-07 18:24 - 2013-07-07 18:24 - 00052188 ____A C:\Users\Martin\Desktop\cc_20130707_182425.reg
2013-07-07 18:23 - 2012-11-07 20:29 - 00000000 ____D C:\Windows\Panther
2013-07-07 18:23 - 2012-10-03 01:38 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Azureus
2013-07-07 16:37 - 2012-10-17 18:46 - 00000132 ____A C:\Users\Martin\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-07-04 18:58 - 2012-10-17 18:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 15:22 - 2013-06-14 22:46 - 00000000 ____D C:\ProgramData\Unity
2013-07-03 04:16 - 2012-09-30 15:28 - 00000000 ____D C:\Users\Martin\Documents\My Games
2013-07-02 23:07 - 2012-10-01 18:48 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2013-07-02 22:44 - 2013-07-02 22:44 - 00000202 ____A C:\Users\Martin\Desktop\Deadpool.url
2013-07-01 00:59 - 2013-07-01 00:59 - 00290381 ____A C:\Users\Martin\Desktop\Kiste.c4d
2013-06-30 14:36 - 2012-10-06 14:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Skyrim
2013-06-30 14:35 - 2012-12-24 13:09 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2013-06-29 21:34 - 2013-06-14 14:41 - 00000000 ____D C:\Users\Martin\Desktop\plaster and concrete
2013-06-27 16:40 - 2013-06-27 16:40 - 00018022 ____A C:\Users\Martin\Desktop\Farbenfroh.esp
2013-06-26 18:58 - 2013-06-26 18:58 - 00000000 ____D C:\Users\Martin\Desktop\Fackelfarben
2013-06-26 18:45 - 2013-06-26 18:45 - 15530220 ____A C:\Users\Martin\Desktop\Fackelfarben.rar
2013-06-23 20:54 - 2012-09-30 12:31 - 00002331 ____A C:\Users\Martin\Desktop\Google Chrome.lnk
2013-06-19 14:28 - 2012-12-29 14:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\GetRightToGo
2013-06-18 21:27 - 2013-04-30 02:23 - 00000000 ____D C:\Users\Martin\AppData\Local\Game Dev Tycoon
2013-06-17 23:03 - 2013-06-17 23:03 - 00416436 ____A C:\Users\Martin\Desktop\Stalker paradise2.pptx
2013-06-17 22:46 - 2013-06-17 22:46 - 00000000 ____D C:\Users\Martin\Desktop\Clickdummy_stalkerparadise
2013-06-17 20:52 - 2013-06-17 20:52 - 00640952 ____A C:\Users\Martin\Desktop\Farbenfroh (2).rar
2013-06-17 13:18 - 2013-06-17 13:18 - 00638653 ____A C:\Users\Martin\Desktop\Farbenfroh (1).rar
2013-06-17 10:34 - 2013-06-17 10:34 - 00658111 ____A C:\Users\Martin\Desktop\Farbenfroh.rar
2013-06-16 23:27 - 2013-06-16 23:27 - 34365484 ____A C:\Users\Martin\Desktop\shmaatz isht shlimm - tün leidet.wav
2013-06-16 18:55 - 2012-12-24 13:09 - 00000604 ____A C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2013-06-15 18:23 - 2013-06-15 18:23 - 04969330 ____A C:\Users\Martin\Desktop\Harvest_Flora_for_Nehrim-40558-V1.rar
2013-06-15 13:56 - 2013-01-12 03:10 - 00001456 ____A C:\Users\Martin\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-06-15 01:16 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\stetic
2013-06-15 01:16 - 2013-06-15 01:15 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-15 01:16 - 2013-06-15 01:15 - 00000000 ____D C:\Users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 22:49 - 2013-06-14 22:48 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Unity
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2013-06-14 22:46 - 2013-04-13 22:37 - 00000000 ____D C:\Users\Martin\AppData\Local\Unity
2013-06-13 23:45 - 2013-06-11 20:30 - 00000000 ____D C:\Users\Martin\AppData\Roaming\HexChat
2013-06-12 23:54 - 2013-06-12 23:54 - 00000661 ____A C:\Users\Public\Desktop\Unity.lnk
2013-06-12 23:54 - 2013-06-12 23:54 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2013-06-12 17:41 - 2013-06-12 17:41 - 00008644 ____A C:\Users\Martin\Desktop\Nehrim XP Progess Bar DV.rar
2013-06-11 20:30 - 2013-06-11 20:30 - 00000000 ____D C:\ProgramData\Package Cache
2013-06-10 18:07 - 2012-10-09 18:09 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Origin
2013-06-10 18:07 - 2012-10-09 18:07 - 00000000 ____D C:\ProgramData\Origin
2013-06-10 18:03 - 2012-10-09 18:08 - 00000000 ____D C:\Users\Martin\AppData\Local\Origin

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 05:59

==================== End Of Log ============================

--- --- ---

schrauber · 09.07.2013, 10:52

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST Log bitte. Noch Probleme?

maedron · 09.07.2013, 13:40

Alles erledigt, leider besteht das Problem weiterhin.
Keiner der Tests scheint was gefunden zu haben.
Könnte es sein, dass es vielleicht gar kein Schädling ist? Da sich der Fehler nur auf https-Seiten zu beziehen scheint, stimmt evtl. etwas mit den Zertifikaten nicht? Bin echt ratlos.

ESET Log:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5f91e95eeb932743ac079c693e4b96d9
# engine=14325
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-09 11:55:41
# local_time=2013-07-09 01:55:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 88 154434 150080813 0 0
# compatibility_mode=5893 16776573 100 94 14976 125000791 0 0
# scanned=330952
# found=0
# cleaned=0
# scan_time=6170

SecurityCheck checkup.txt:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.68  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 DH Driver Cleaner Professional Edition 
 Adobe Flash Player 11.7.700.224  
 Adobe Reader 10.1.6 Adobe Reader out of Date!  
 Mozilla Firefox (22.0) 
 Mozilla Thunderbird (17.0.7) 
 Google Chrome 27.0.1453.110  
 Google Chrome 27.0.1453.116  
````````Process Check: objlist.exe by Laurent````````  
 Avast AvastSvc.exe   
 Avast AvastUI.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

Frisches FRST Log.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-07-2013
Ran by Martin (administrator) on 09-07-2013 14:26:35
Running from C:\Users\Martin\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) F:\AVAST Software\Avast\AvastSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(LogMeIn Inc.) F:\LogMeIn Hamachi\hamachi-2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(LogMeIn Inc.) F:\LogMeIn Hamachi\hamachi-2-ui.exe
(AVAST Software) F:\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [6900024 2012-07-24] (Logitech Inc.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] "F:\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKLM-x32\...\Run: [avast] "F:\AVAST Software\Avast\avastUI.exe" /nogui [x]
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - F:\AVAST Software\Avast\aswWebRepIE64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - F:\AVAST Software\Avast\aswWebRepIE.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - F:\AVAST Software\Avast\aswWebRepIE64.dll No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - F:\AVAST Software\Avast\aswWebRepIE.dll No File
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\8w2pcce5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] F:\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - F:\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Google Update) - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Turn Off the Lights) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.6_0
CHR Extension: (James White) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3_0
CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0
CHR Extension: (Google Search) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Wunderlist - To-do & Task List) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc\2.1.1_0
CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 avast! Antivirus; F:\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
R2 Hamachi2Svc; F:\LogMeIn Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-03-16] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-07] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-07] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-07] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-09-30] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
S3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [59224 2011-09-22] (Focusrite Audio Engineering Limited.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66328 2012-02-07] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-09-30] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-09 14:20 - 2013-07-09 14:20 - 00000930 ____A C:\Users\Martin\Desktop\checkup.txt
2013-07-09 14:11 - 2013-07-09 14:11 - 00890988 ____A C:\Users\Martin\Desktop\SecurityCheck.exe
2013-07-09 11:16 - 2013-07-09 11:16 - 00000626 ____A C:\Users\Martin\Desktop\JRT.txt
2013-07-09 11:14 - 2013-07-09 11:14 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 11:11 - 2013-07-09 11:11 - 00001077 ____A C:\AdwCleaner[S1].txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00552081 ____A (Oleg N. Scherbakov) C:\Users\Martin\Desktop\JRT.exe
2013-07-09 11:04 - 2013-07-09 11:04 - 00650027 ____A C:\Users\Martin\Desktop\adwcleaner.exe
2013-07-09 10:09 - 2013-07-09 10:07 - 00018128 ____A C:\Users\Martin\Desktop\ComboFix.txt
2013-07-09 10:07 - 2013-07-09 10:07 - 00018128 ____A C:\ComboFix.txt
2013-07-09 09:49 - 2013-07-09 10:07 - 00000000 ____D C:\Qoobox
2013-07-09 09:49 - 2013-07-09 09:54 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:49 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-09 09:49 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-09 09:49 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-09 09:49 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-09 09:42 - 2013-07-09 09:42 - 05086951 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Opera Software
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Local\Opera Software
2013-07-09 00:45 - 2013-07-09 00:45 - 00020090 ____A C:\Users\Martin\Desktop\Addition.txt
2013-07-09 00:44 - 2013-07-09 00:44 - 00000000 ____D C:\FRST
2013-07-09 00:43 - 2013-07-09 00:43 - 01934554 ____A (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-07-08 21:40 - 2013-07-08 21:40 - 00353391 ____A C:\Users\Martin\Desktop\Gmer.txt
2013-07-08 21:21 - 2013-07-08 21:21 - 00091340 ____A C:\Users\Martin\Desktop\Extras.Txt
2013-07-08 21:20 - 2013-07-08 21:20 - 00094020 ____A C:\Users\Martin\Desktop\OTL.Txt
2013-07-08 21:17 - 2013-07-08 21:12 - 00377856 ____A C:\Users\Martin\Desktop\gmer_2.1.19163.exe
2013-07-08 21:07 - 2013-07-08 21:07 - 00002639 ____A C:\Users\Martin\Desktop\trojboard_anweisung.txt
2013-07-08 21:05 - 2013-07-08 21:06 - 00000000 ____D C:\Users\Martin\Desktop\GE Project
2013-07-08 21:04 - 2013-07-08 21:05 - 00602112 ____A (OldTimer Tools) C:\Users\Martin\Desktop\OTL.exe
2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____A C:\Users\Martin\defogger_reenable
2013-07-08 16:45 - 2013-07-08 16:46 - 00004608 ____A C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-08 14:38 - 2013-07-08 14:38 - 00000000 ____D C:\Windows\pss
2013-07-08 13:33 - 2013-07-08 13:34 - 00000499 ____A C:\Users\Martin\Desktop\scans.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00003788 ____A C:\Users\Martin\Desktop\Rkill.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00000000 ____D C:\Users\Martin\Desktop\rkill
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-07 23:21 - 2013-07-09 14:13 - 00005504 ____A C:\Windows\PFRO.log
2013-07-07 23:04 - 2013-07-07 23:11 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-07 20:53 - 2012-12-07 15:20 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\Wpc.dll
2013-07-07 20:53 - 2012-12-07 15:15 - 02746368 ____A (Microsoft Corporation) C:\Windows\System32\gameux.dll
2013-07-07 20:53 - 2012-12-07 14:26 - 00308736 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-07-07 20:53 - 2012-12-07 14:20 - 02576384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-07-07 20:53 - 2012-12-07 13:20 - 00045568 ____A (Microsoft) C:\Windows\System32\oflc-nz.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00044544 ____A (Microsoft) C:\Windows\System32\pegibbfc.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00043520 ____A (Microsoft) C:\Windows\System32\csrr.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00030720 ____A (Microsoft) C:\Windows\System32\usk.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00023552 ____A (Microsoft) C:\Windows\System32\oflc.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi-pt.rs
2013-07-07 20:53 - 2012-12-07 13:20 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi-fi.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00055296 ____A (Microsoft) C:\Windows\System32\cero.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00051712 ____A (Microsoft) C:\Windows\System32\esrb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00046592 ____A (Microsoft) C:\Windows\System32\fpb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00040960 ____A (Microsoft) C:\Windows\System32\cob-au.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00021504 ____A (Microsoft) C:\Windows\System32\grb.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00020480 ____A (Microsoft) C:\Windows\System32\pegi.rs
2013-07-07 20:53 - 2012-12-07 13:19 - 00015360 ____A (Microsoft) C:\Windows\System32\djctq.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00055296 ____A (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00051712 ____A (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00046592 ____A (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00045568 ____A (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00044544 ____A (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00043520 ____A (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00040960 ____A (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00030720 ____A (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00023552 ____A (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00021504 ____A (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00020480 ____A (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-07-07 20:53 - 2012-12-07 12:46 - 00015360 ____A (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-07-07 20:53 - 2012-10-03 19:44 - 00303104 ____A (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00246272 ____A (Microsoft Corporation) C:\Windows\System32\netcorehc.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00216576 ____A (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00070656 ____A (Microsoft Corporation) C:\Windows\System32\nlaapi.dll
2013-07-07 20:53 - 2012-10-03 19:44 - 00018944 ____A (Microsoft Corporation) C:\Windows\System32\netevent.dll
2013-07-07 20:53 - 2012-10-03 19:42 - 00569344 ____A (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00175104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00156672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-07-07 20:53 - 2012-10-03 18:42 - 00018944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-07-07 20:53 - 2012-10-03 18:07 - 00045568 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpipreg.sys
2013-07-07 20:53 - 2012-01-13 09:12 - 00052224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-07-07 20:52 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-07-07 20:52 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-07-07 20:52 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-07-07 20:52 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-07-07 20:52 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-07-07 20:52 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-07-07 20:52 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-07-07 20:52 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-07-07 20:52 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-07-07 20:52 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-07-07 20:52 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-07-07 20:52 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-07-07 20:52 - 2012-11-30 07:45 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-07-07 20:52 - 2012-11-30 07:43 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-07-07 20:52 - 2012-11-30 07:41 - 01161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-07-07 20:52 - 2012-11-30 07:41 - 00424448 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 07:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:53 - 01114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-07-07 20:52 - 2012-11-30 06:53 - 00274944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 06:45 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 05:23 - 00338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-07-07 20:52 - 2012-11-30 04:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 04:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-07-07 20:52 - 2012-11-30 01:17 - 00420064 ____A C:\Windows\SysWOW64\locale.nls
2013-07-07 20:52 - 2012-11-30 01:15 - 00420064 ____A C:\Windows\System32\locale.nls
2013-07-07 20:52 - 2012-11-23 05:13 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-07-07 20:52 - 2012-11-22 07:44 - 00800768 ____A (Microsoft Corporation) C:\Windows\System32\usp10.dll
2013-07-07 20:52 - 2012-11-22 06:45 - 00626688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-07-07 20:52 - 2012-11-09 07:45 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-07-07 20:52 - 2012-11-09 06:42 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-07-07 20:52 - 2012-10-09 20:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll
2013-07-07 20:52 - 2012-10-09 20:17 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll
2013-07-07 20:52 - 2012-10-09 19:40 - 00193536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-07-07 20:52 - 2012-10-09 19:40 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-07-07 20:50 - 2013-01-24 08:01 - 00223752 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft LifeCam
2013-07-07 20:18 - 2012-12-16 19:11 - 00046080 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-07-07 20:18 - 2012-12-16 16:45 - 00367616 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-07-07 20:18 - 2012-12-16 16:13 - 00295424 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-07-07 20:18 - 2012-12-16 16:13 - 00034304 ____A (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-07-07 20:17 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-07-07 20:17 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-07-07 20:17 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-07-07 20:17 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-07-07 20:17 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-07 20:17 - 2013-02-15 08:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-07-07 20:17 - 2013-02-15 08:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-07-07 20:17 - 2013-02-15 08:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-07-07 20:17 - 2013-02-15 06:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-07-07 20:17 - 2013-02-15 06:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-07-07 20:17 - 2013-02-15 05:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-07-07 20:17 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023x.sys
2013-07-07 20:17 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-07-07 20:17 - 2013-01-04 07:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-07-07 20:17 - 2013-01-04 06:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-07-07 20:17 - 2013-01-04 04:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-07-07 20:17 - 2013-01-04 04:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-07-07 20:17 - 2013-01-04 04:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-07-07 20:17 - 2013-01-04 04:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-07-07 20:17 - 2013-01-03 08:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-07-07 20:17 - 2012-11-20 07:48 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-07-07 20:17 - 2012-11-20 06:51 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-07-07 20:17 - 2012-11-02 07:59 - 00478208 ____A (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-07-07 20:17 - 2012-11-02 07:11 - 00376832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-07-07 20:17 - 2012-11-01 07:43 - 02002432 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-07-07 20:17 - 2012-11-01 07:43 - 01882624 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-07-07 20:17 - 2012-11-01 06:47 - 01389568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-07-07 20:17 - 2012-11-01 06:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-07-07 20:17 - 2012-09-26 00:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-07-07 20:16 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-07-07 20:16 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-07-07 20:16 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-07-07 20:16 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-07-07 20:16 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-07-07 20:16 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-07-07 20:16 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-07-07 20:16 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-07-07 20:16 - 2012-09-26 00:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-07-07 20:15 - 2013-03-19 08:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-07-07 20:15 - 2013-03-19 07:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-07-07 20:15 - 2013-03-19 07:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-07-07 20:15 - 2013-03-19 07:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-07-07 20:15 - 2013-03-19 06:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-07-07 20:15 - 2013-03-19 05:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-07-07 19:01 - 2013-07-07 19:01 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-07 19:01 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-07-07 19:01 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-07-07 19:01 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-07-07 19:01 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-07-07 18:29 - 2013-07-07 18:29 - 00008398 ____A C:\Users\Martin\Desktop\cc_20130707_182939.reg
2013-07-07 18:25 - 2013-07-09 14:24 - 02927855 ____A C:\Windows\setupact.log
2013-07-07 18:25 - 2013-07-07 18:25 - 00000000 ____A C:\Windows\setuperr.log
2013-07-07 18:24 - 2013-07-07 18:24 - 00052188 ____A C:\Users\Martin\Desktop\cc_20130707_182425.reg
2013-07-02 22:44 - 2013-07-02 22:44 - 00000202 ____A C:\Users\Martin\Desktop\Deadpool.url
2013-07-01 00:59 - 2013-07-01 00:59 - 00290381 ____A C:\Users\Martin\Desktop\Kiste.c4d
2013-06-27 16:40 - 2013-06-27 16:40 - 00018022 ____A C:\Users\Martin\Desktop\Farbenfroh.esp
2013-06-26 18:58 - 2013-06-26 18:58 - 00000000 ____D C:\Users\Martin\Desktop\Fackelfarben
2013-06-26 18:45 - 2013-06-26 18:45 - 15530220 ____A C:\Users\Martin\Desktop\Fackelfarben.rar
2013-06-17 23:03 - 2013-06-17 23:03 - 00416436 ____A C:\Users\Martin\Desktop\Stalker paradise2.pptx
2013-06-17 22:46 - 2013-06-17 22:46 - 00000000 ____D C:\Users\Martin\Desktop\Clickdummy_stalkerparadise
2013-06-17 20:52 - 2013-06-17 20:52 - 00640952 ____A C:\Users\Martin\Desktop\Farbenfroh (2).rar
2013-06-17 13:18 - 2013-06-17 13:18 - 00638653 ____A C:\Users\Martin\Desktop\Farbenfroh (1).rar
2013-06-17 10:34 - 2013-06-17 10:34 - 00658111 ____A C:\Users\Martin\Desktop\Farbenfroh.rar
2013-06-16 23:27 - 2013-06-16 23:27 - 34365484 ____A C:\Users\Martin\Desktop\shmaatz isht shlimm - tün leidet.wav
2013-06-15 18:23 - 2013-06-15 18:23 - 04969330 ____A C:\Users\Martin\Desktop\Harvest_Flora_for_Nehrim-40558-V1.rar
2013-06-15 01:16 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\stetic
2013-06-15 01:15 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-15 01:15 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 22:48 - 2013-06-14 22:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Unity
2013-06-14 22:46 - 2013-07-03 15:22 - 00000000 ____D C:\ProgramData\Unity
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2013-06-14 14:41 - 2013-06-29 21:34 - 00000000 ____D C:\Users\Martin\Desktop\plaster and concrete
2013-06-12 23:54 - 2013-06-12 23:54 - 00000661 ____A C:\Users\Public\Desktop\Unity.lnk
2013-06-12 23:54 - 2013-06-12 23:54 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2013-06-12 17:41 - 2013-06-12 17:41 - 00008644 ____A C:\Users\Martin\Desktop\Nehrim XP Progess Bar DV.rar
2013-06-11 20:30 - 2013-06-13 23:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\HexChat
2013-06-11 20:30 - 2013-06-11 20:30 - 00000000 ____D C:\ProgramData\Package Cache

==================== One Month Modified Files and Folders =======

2013-07-09 14:25 - 2013-01-17 20:04 - 00000000 ____D C:\Users\Martin\AppData\Local\LogMeIn Hamachi
2013-07-09 14:24 - 2013-07-07 18:25 - 02927855 ____A C:\Windows\setupact.log
2013-07-09 14:24 - 2012-11-07 20:47 - 01347907 ____A C:\Windows\WindowsUpdate.log
2013-07-09 14:24 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-09 14:21 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-09 14:21 - 2009-07-14 06:45 - 00021808 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-09 14:20 - 2013-07-09 14:20 - 00000930 ____A C:\Users\Martin\Desktop\checkup.txt
2013-07-09 14:19 - 2011-04-12 09:43 - 00696714 ____A C:\Windows\System32\perfh007.dat
2013-07-09 14:19 - 2011-04-12 09:43 - 00148010 ____A C:\Windows\System32\perfc007.dat
2013-07-09 14:19 - 2009-07-14 07:13 - 01612864 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-09 14:13 - 2013-07-07 23:21 - 00005504 ____A C:\Windows\PFRO.log
2013-07-09 14:11 - 2013-07-09 14:11 - 00890988 ____A C:\Users\Martin\Desktop\SecurityCheck.exe
2013-07-09 13:58 - 2012-09-30 12:31 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000UA.job
2013-07-09 11:16 - 2013-07-09 11:16 - 00000626 ____A C:\Users\Martin\Desktop\JRT.txt
2013-07-09 11:14 - 2013-07-09 11:14 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 11:11 - 2013-07-09 11:11 - 00001077 ____A C:\AdwCleaner[S1].txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00552081 ____A (Oleg N. Scherbakov) C:\Users\Martin\Desktop\JRT.exe
2013-07-09 11:04 - 2013-07-09 11:04 - 00650027 ____A C:\Users\Martin\Desktop\adwcleaner.exe
2013-07-09 10:07 - 2013-07-09 10:09 - 00018128 ____A C:\Users\Martin\Desktop\ComboFix.txt
2013-07-09 10:07 - 2013-07-09 10:07 - 00018128 ____A C:\ComboFix.txt
2013-07-09 10:07 - 2013-07-09 09:49 - 00000000 ____D C:\Qoobox
2013-07-09 10:07 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-07-09 09:54 - 2013-07-09 09:49 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:42 - 2013-07-09 09:42 - 05086951 ____R (Swearware) C:\Users\Martin\Desktop\ComboFix.exe
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Opera Software
2013-07-09 01:17 - 2013-07-09 01:17 - 00000000 ____D C:\Users\Martin\AppData\Local\Opera Software
2013-07-09 00:45 - 2013-07-09 00:45 - 00020090 ____A C:\Users\Martin\Desktop\Addition.txt
2013-07-09 00:44 - 2013-07-09 00:44 - 00000000 ____D C:\FRST
2013-07-09 00:43 - 2013-07-09 00:43 - 01934554 ____A (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-07-09 00:25 - 2012-10-02 20:11 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Audacity
2013-07-09 00:20 - 2012-10-01 10:48 - 00000023 ____A C:\Windows\BlendSettings.ini
2013-07-08 22:58 - 2012-09-30 12:31 - 00001072 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-617326000-1486708450-1060777791-1000Core.job
2013-07-08 21:40 - 2013-07-08 21:40 - 00353391 ____A C:\Users\Martin\Desktop\Gmer.txt
2013-07-08 21:21 - 2013-07-08 21:21 - 00091340 ____A C:\Users\Martin\Desktop\Extras.Txt
2013-07-08 21:20 - 2013-07-08 21:20 - 00094020 ____A C:\Users\Martin\Desktop\OTL.Txt
2013-07-08 21:12 - 2013-07-08 21:17 - 00377856 ____A C:\Users\Martin\Desktop\gmer_2.1.19163.exe
2013-07-08 21:07 - 2013-07-08 21:07 - 00002639 ____A C:\Users\Martin\Desktop\trojboard_anweisung.txt
2013-07-08 21:06 - 2013-07-08 21:05 - 00000000 ____D C:\Users\Martin\Desktop\GE Project
2013-07-08 21:05 - 2013-07-08 21:04 - 00602112 ____A (OldTimer Tools) C:\Users\Martin\Desktop\OTL.exe
2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____A C:\Users\Martin\defogger_reenable
2013-07-08 21:04 - 2012-11-07 20:34 - 00000000 ____D C:\users\Martin
2013-07-08 16:46 - 2013-07-08 16:45 - 00004608 ____A C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-08 14:38 - 2013-07-08 14:38 - 00000000 ____D C:\Windows\pss
2013-07-08 13:34 - 2013-07-08 13:33 - 00000499 ____A C:\Users\Martin\Desktop\scans.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00003788 ____A C:\Users\Martin\Desktop\Rkill.txt
2013-07-08 12:32 - 2013-07-08 12:32 - 00000000 ____D C:\Users\Martin\Desktop\rkill
2013-07-08 11:46 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-08 01:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Malwarebytes
2013-07-07 23:29 - 2013-07-07 23:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-07 23:11 - 2013-07-07 23:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-07 22:27 - 2013-02-13 21:35 - 01589822 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-07 21:16 - 2012-11-07 21:00 - 00162592 ____A C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-07 21:14 - 2009-07-14 06:45 - 10065392 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-07 21:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-07 20:42 - 2012-10-22 18:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-07 20:42 - 2012-10-22 18:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-07-07 20:19 - 2013-07-07 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft LifeCam
2013-07-07 19:01 - 2013-07-07 19:01 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-07 19:01 - 2013-07-07 19:01 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-07 19:01 - 2012-09-30 22:34 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-07-07 19:01 - 2012-09-30 22:33 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-07 18:51 - 2012-10-03 01:43 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2013-07-07 18:51 - 2012-09-30 17:03 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-07 18:51 - 2012-09-30 17:03 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-07 18:29 - 2013-07-07 18:29 - 00008398 ____A C:\Users\Martin\Desktop\cc_20130707_182939.reg
2013-07-07 18:25 - 2013-07-07 18:25 - 00000000 ____A C:\Windows\setuperr.log
2013-07-07 18:24 - 2013-07-07 18:24 - 00052188 ____A C:\Users\Martin\Desktop\cc_20130707_182425.reg
2013-07-07 18:23 - 2012-11-07 20:29 - 00000000 ____D C:\Windows\Panther
2013-07-07 18:23 - 2012-10-03 01:38 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Azureus
2013-07-07 16:37 - 2012-10-17 18:46 - 00000132 ____A C:\Users\Martin\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-07-04 18:58 - 2012-10-17 18:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 15:22 - 2013-06-14 22:46 - 00000000 ____D C:\ProgramData\Unity
2013-07-03 04:16 - 2012-09-30 15:28 - 00000000 ____D C:\Users\Martin\Documents\My Games
2013-07-02 23:07 - 2012-10-01 18:48 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2013-07-02 22:44 - 2013-07-02 22:44 - 00000202 ____A C:\Users\Martin\Desktop\Deadpool.url
2013-07-01 00:59 - 2013-07-01 00:59 - 00290381 ____A C:\Users\Martin\Desktop\Kiste.c4d
2013-06-30 14:36 - 2012-10-06 14:18 - 00000000 ____D C:\Users\Martin\AppData\Local\Skyrim
2013-06-30 14:35 - 2012-12-24 13:09 - 00000000 ____D C:\Users\Martin\Documents\Nexus Mod Manager
2013-06-29 21:34 - 2013-06-14 14:41 - 00000000 ____D C:\Users\Martin\Desktop\plaster and concrete
2013-06-27 16:40 - 2013-06-27 16:40 - 00018022 ____A C:\Users\Martin\Desktop\Farbenfroh.esp
2013-06-26 18:58 - 2013-06-26 18:58 - 00000000 ____D C:\Users\Martin\Desktop\Fackelfarben
2013-06-26 18:45 - 2013-06-26 18:45 - 15530220 ____A C:\Users\Martin\Desktop\Fackelfarben.rar
2013-06-23 20:54 - 2012-09-30 12:31 - 00002331 ____A C:\Users\Martin\Desktop\Google Chrome.lnk
2013-06-19 14:28 - 2012-12-29 14:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\GetRightToGo
2013-06-18 21:27 - 2013-04-30 02:23 - 00000000 ____D C:\Users\Martin\AppData\Local\Game Dev Tycoon
2013-06-17 23:03 - 2013-06-17 23:03 - 00416436 ____A C:\Users\Martin\Desktop\Stalker paradise2.pptx
2013-06-17 22:46 - 2013-06-17 22:46 - 00000000 ____D C:\Users\Martin\Desktop\Clickdummy_stalkerparadise
2013-06-17 20:52 - 2013-06-17 20:52 - 00640952 ____A C:\Users\Martin\Desktop\Farbenfroh (2).rar
2013-06-17 13:18 - 2013-06-17 13:18 - 00638653 ____A C:\Users\Martin\Desktop\Farbenfroh (1).rar
2013-06-17 10:34 - 2013-06-17 10:34 - 00658111 ____A C:\Users\Martin\Desktop\Farbenfroh.rar
2013-06-16 23:27 - 2013-06-16 23:27 - 34365484 ____A C:\Users\Martin\Desktop\shmaatz isht shlimm - tün leidet.wav
2013-06-16 18:55 - 2012-12-24 13:09 - 00000604 ____A C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2013-06-15 18:23 - 2013-06-15 18:23 - 04969330 ____A C:\Users\Martin\Desktop\Harvest_Flora_for_Nehrim-40558-V1.rar
2013-06-15 13:56 - 2013-01-12 03:10 - 00001456 ____A C:\Users\Martin\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-06-15 01:16 - 2013-06-15 01:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\stetic
2013-06-15 01:16 - 2013-06-15 01:15 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MonoDevelop-Unity-2.8
2013-06-15 01:16 - 2013-06-15 01:15 - 00000000 ____D C:\Users\Martin\AppData\Local\MonoDevelop-Unity-2.8
2013-06-14 22:49 - 2013-06-14 22:48 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Unity
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-06-14 22:46 - 2013-06-14 22:46 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2013-06-14 22:46 - 2013-04-13 22:37 - 00000000 ____D C:\Users\Martin\AppData\Local\Unity
2013-06-13 23:45 - 2013-06-11 20:30 - 00000000 ____D C:\Users\Martin\AppData\Roaming\HexChat
2013-06-12 23:54 - 2013-06-12 23:54 - 00000661 ____A C:\Users\Public\Desktop\Unity.lnk
2013-06-12 23:54 - 2013-06-12 23:54 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2013-06-12 17:41 - 2013-06-12 17:41 - 00008644 ____A C:\Users\Martin\Desktop\Nehrim XP Progess Bar DV.rar
2013-06-11 20:30 - 2013-06-11 20:30 - 00000000 ____D C:\ProgramData\Package Cache
2013-06-10 18:07 - 2012-10-09 18:09 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Origin
2013-06-10 18:07 - 2012-10-09 18:07 - 00000000 ____D C:\ProgramData\Origin
2013-06-10 18:03 - 2012-10-09 18:08 - 00000000 ____D C:\Users\Martin\AppData\Local\Origin

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 05:59

==================== End Of Log ============================

--- --- ---

schrauber · 09.07.2013, 13:43

Update mal bitte Adobe.

Deinstalliere betroffene Browser, keine Daten behalten, neu installieren.
Router 15 min vom Strom trennen, wieder anschliessen, dann

Windows+Taste + R drücken, schreib

ipconfig /flushdns

und drücke Enter. Teste nochma.

maedron · 09.07.2013, 15:16

Habe Adobe geupdatet, "ipconfig /flushdns" getestet und den Router von Strom getrennt.
Keine Veränderung.

ABER:
Brachte nun meinen Laptop - wo das Problem ebenfalls besteht - in die Hochschule, verbinde mich hier mit dem WLAN und voilà; Problem von der Bildfläche verschwunden.
Scheint also zum größten Teil an meinem Router (Fritz!Box 6340) zu liegen. Wäre toll, wenn es dazu hier auch Ideen zu Herangehensweisen geben könnte. Würde aber verstehen, wenn nicht.

schrauber · 09.07.2013, 16:51

Router komplett resetten, dann musste aber die Verbindungsdaten neu eingeben.

maedron · 10.07.2013, 09:44

Router wurde jetzt komplett resettet, zurück auf die Werkseinstellungen.
Gleiches Problem besteht weiterhin.

Erkundigte mich ein wenig bei anderen Mitnutzern des Routers im Haus, aber bei denen scheint alles ordnungsgemäß zu funktionieren.

Wenn ich mich von hier aus über einen VPN Tunnel zu meinem Uni-Netz verbinde, dann habe ich zwar wahnsinnig langsames Internet, aber die https-Seiten funktionieren wieder.
Eine konkrete Lösung ist das natürlich noch nicht.

schrauber · 10.07.2013, 10:53

Wie weit biste vom Router entfernt?

maedron · 10.07.2013, 11:07

Sollte nichts ausmachen; bin mit dem Laptop zwar per WLAN drin, aber mein Stand-PC hängt am Kabel.
Und das Internet ging ja bis letztes Wochenende einwandfrei. Habe nichts Neues installiert oder deinstalliert, plötzlich ging es nicht mehr.

09.07.2013, 16:51	#12
schrauber /// the machine /// TB-Ausbilder	"Die Webseite ist nicht verfügbar" (Chrome Fehler 102) - alle Browser Router komplett resetten, dann musste aber die Verbindungsdaten neu eingeben. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

10.07.2013, 10:53	#14
schrauber /// the machine /// TB-Ausbilder	"Die Webseite ist nicht verfügbar" (Chrome Fehler 102) - alle Browser Wie weit biste vom Router entfernt? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

"Die Webseite ist nicht verfügbar" (Chrome Fehler 102) - alle Browser

Log-Analyse und Auswertung: "Die Webseite ist nicht verfügbar" (Chrome Fehler 102) - alle Browser