|
Plagegeister aller Art und deren Bekämpfung: w32 zero access entfernen ?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
16.07.2013, 10:44 | #1 |
| w32 zero access entfernen ? hallo, mein computer ist mit zero access infiziert. Mehrere Scanner werden mal fündig , mal nicht. Sophos zu Bsp. habe ich 2 mal hintereinander durchlaufen lassen, beim ersten mal hat er zero.access gefunden ( konte aber nicht entfernen) beim zweiten mal : no threats found. tdss Killer von Kaspersky war fündig, cure ausgeführt, keine Problemmeldung, dachte das wars, aber immer noch zero.access Meldung von Norten 360, manuelles entfernen erforderlich. Dann habe ich Norton Power eraser laufen lassen, der wurde auch fündig und behob angeblich das Problem aber der comuter spielt weiter verrückt , Firefox stürzt öfter ab , besonders beim streaming, Programme öffnen sich ohne Befehl , öfter Bluescreen, windows explorer stürzt öfters ab und startet neu , stürzt direkt wieder ab, startet neu,........... . Ich habe den Ratschlag befolgt , der hier schon einem anderen Mitglied gemacht wurde und den zero.access remover scannen lassen , der hat nichts gefunden, das logfile hänge ich hier an. helft mir bitte Vielen Dank |
16.07.2013, 10:46 | #2 |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
16.07.2013, 12:41 | #3 |
| w32 zero access entfernen ? Hallo,
__________________das ging ja flott, super. Hier die beiden logs zum hier herein posten zu lang, zum hochladen zu groß , also gezipt als Anhang Danke MFG Tom |
16.07.2013, 13:30 | #4 | |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? hi, Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter DeleteJunctionsIndirectory: C:\Program Files\Windows Defender ZeroAccess: C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4} C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\U C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\00000004.@ C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\76603ac3 Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.07.2013, 15:14 | #5 |
| w32 zero access entfernen ? Hallo, hier die Fixlog.txt : Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-07-2013 02 Ran by Thomas at 2013-07-16 15:32:17 Run:1 Running from C:\Users\Thomas\Desktop\Neuer Ordner (2) Boot Mode: Normal ============================================== "C:\Program Files\Windows Defender" => Deleting reparse point and unlocking started. "C:\Program Files\Windows Defender\de-DE" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpAsDesc.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpClient.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpCmdRun.exe" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpCommu.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpEvMsg.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpOAV.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpRTP.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MpSvc.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MSASCui.exe" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MsMpCom.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MsMpLics.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender\MsMpRes.dll" => Deleting reparse point and unlocking done. "C:\Program Files\Windows Defender" => Deleting reparse point and unlocking completed. C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4} => Moved successfully. "C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L" => File/Directory not found. "C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\U" => File/Directory not found. "C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\00000004.@" => File/Directory not found. "C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\76603a" => File/Directory not found. ==== End of Fixlog ==== Code:
ATTFilter ComboFix 13-07-15.01 - Thomas 16.07.2013 15:50:12.1.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.3838.2537 [GMT 2:00] ausgeführt von:: c:\users\Thomas\Desktop\ComboFix.exe AV: Lavasoft Ad-Aware *Disabled/Updated* {E0D97DD4-42BA-B3F2-A5A7-22E9ACE81FC7} AV: Norton 360 Online *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Lavasoft Ad-Aware *Disabled* {D8E2FCF1-08D5-B2AA-8EF8-8BDC523B58BC} FW: Norton 360 Online *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Lavasoft Ad-Aware *Disabled/Updated* {5BB89C30-6480-BC7C-9F17-199BD76F557A} SP: Norton 360 Online *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\Microsoft\Windows\Start Menu\Programs\sayfEE osyAve c:\programdata\Microsoft\Windows\Start Menu\Programs\sayfEE osyAve\sayfEE osyAve.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\sayfEE osyAve\Uninstall.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SeaariCh-NNewTAib c:\programdata\Microsoft\Windows\Start Menu\Programs\SeaariCh-NNewTAib\SeaariCh-NNewTAib.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SeaariCh-NNewTAib\Uninstall.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SEaaroch-NaewTaib c:\programdata\Microsoft\Windows\Start Menu\Programs\SEaaroch-NaewTaib\SEaaroch-NaewTaib.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SEaaroch-NaewTaib\Uninstall.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SEEarchh-iNewTab c:\programdata\Microsoft\Windows\Start Menu\Programs\SEEarchh-iNewTab\SEEarchh-iNewTab.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SEEarchh-iNewTab\Uninstall.lnk c:\programdata\sayfEE osyAve c:\programdata\sayfEE osyAve\51d9a5eeccb66.tlb c:\programdata\sayfEE osyAve\settings.ini c:\programdata\sayfEE osyAve\uninstall.exe c:\programdata\SeaariCh-NNewTAib c:\programdata\SeaariCh-NNewTAib\51da8df6242e5.tlb c:\programdata\SeaariCh-NNewTAib\settings.ini c:\programdata\SeaariCh-NNewTAib\uninstall.exe c:\programdata\SEaaroch-NaewTaib c:\programdata\SEaaroch-NaewTaib\51d42a8a0242c.tlb c:\programdata\SEaaroch-NaewTaib\data\SEaaroch-NaewTaib.dat c:\programdata\SEaaroch-NaewTaib\settings.ini c:\programdata\SEaaroch-NaewTaib\uninstall.exe c:\programdata\SEEarchh-iNewTab c:\programdata\SEEarchh-iNewTab\51d9a609f0f26.tlb c:\programdata\SEEarchh-iNewTab\settings.ini c:\programdata\SEEarchh-iNewTab\uninstall.exe c:\programdata\ssaafe saave c:\programdata\ssaafe saave\51da8dcbe8d32.tlb c:\programdata\ssaafe saave\settings.ini c:\programdata\suaafEE ssave c:\programdata\suaafEE ssave\51d42a18c78d8.tlb c:\programdata\suaafEE ssave\settings.ini c:\users\Thomas\AppData\Roaming\337 c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\ebase.dll c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_close.png c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_max.png c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_min.png c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_restore.png c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\wallpaper_resource.xml c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\window.png c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\en_us\wallpaper_lang.ini c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\es_es\wallpaper_lang.ini c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\pt_br\wallpaper_lang.ini c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\tr_tr\wallpaper_lang.ini c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\zh_tw\wallpaper_lang.ini c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\layout\default\dp_appwnd.xml c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\layout\default\msgbox.xml c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\libpng.dll c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\main c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\msvcp100.dll c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\msvcr100.dll c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\ouilibnl.dll c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\plusapp.exe c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\style\wallpaper_style.xml c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\TrayDownloader.exe c:\windows\wininit.ini . . ((((((((((((((((((((((( Dateien erstellt von 2013-06-16 bis 2013-07-16 )))))))))))))))))))))))))))))) . . 2013-07-16 13:56 . 2013-07-16 13:56 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-07-16 11:02 . 2013-07-16 13:32 -------- d-----w- C:\FRST 2013-07-16 08:51 . 2013-07-16 08:51 -------- d-----w- c:\users\Thomas\AppData\Roaming\QuickScan 2013-07-15 19:09 . 2013-07-15 19:09 -------- d-----w- c:\users\Thomas\AppData\Roaming\ParetoLogic 2013-07-15 19:09 . 2013-07-15 19:09 -------- d-----w- c:\users\Thomas\AppData\Roaming\DriverCure 2013-07-15 19:08 . 2013-07-16 08:28 -------- d-----w- c:\programdata\ParetoLogic 2013-07-15 16:19 . 2013-07-15 16:19 -------- d-----w- c:\users\Thomas\AppData\Local\Freemium 2013-07-15 16:04 . 2013-05-13 03:52 23624 ----a-w- c:\windows\Launcher.exe 2013-07-15 16:03 . 2013-07-15 16:04 -------- d-----w- c:\program files (x86)\SoftwareUpdater 2013-07-15 16:03 . 2013-07-15 16:03 -------- d-----w- c:\programdata\FreeSystemUtilities 2013-07-15 16:03 . 2013-07-15 16:03 -------- d-----w- c:\program files (x86)\Covus Freemium 2013-07-15 16:03 . 2013-07-15 16:03 -------- d-----w- c:\programdata\Package Cache 2013-07-15 16:01 . 2013-07-15 16:01 -------- d-----w- c:\users\Thomas\AppData\Roaming\GlarySoft 2013-07-15 15:59 . 2013-07-15 15:59 -------- d-----w- c:\program files (x86)\Glarysoft 2013-07-13 17:47 . 2013-07-13 17:47 -------- d-----w- c:\program files (x86)\MSECache 2013-07-12 01:04 . 2013-06-12 02:28 775256 ----a-w- c:\program files\Internet Explorer\iexplore.exe 2013-07-10 22:19 . 2013-07-10 22:19 -------- d-----w- C:\4a4b3f6258420da740c754 2013-07-10 18:40 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll 2013-07-10 18:40 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll 2013-07-10 18:40 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL 2013-07-10 18:40 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL 2013-07-10 18:39 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys 2013-07-10 18:39 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL 2013-07-10 18:39 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll 2013-07-10 18:39 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll 2013-07-10 18:39 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2013-07-10 18:39 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll 2013-07-10 18:39 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll 2013-07-10 18:39 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll 2013-07-08 17:58 . 2013-07-08 17:58 -------- d-----w- c:\users\Thomas\AppData\Roaming\Dealply 2013-07-08 09:15 . 2013-07-08 09:15 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared 2013-07-08 08:50 . 2013-07-09 11:11 177312 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS 2013-07-08 08:50 . 2013-07-08 08:50 -------- d-----w- c:\program files\Symantec 2013-07-08 08:50 . 2013-07-08 08:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2013-07-08 08:49 . 2013-07-09 15:08 -------- d-----w- c:\windows\system32\drivers\N360x64 2013-07-08 08:49 . 2013-07-08 08:49 -------- d-----w- c:\program files (x86)\Norton 360 2013-07-08 08:49 . 2013-07-08 08:49 -------- d-----w- c:\program files (x86)\NortonInstaller 2013-07-08 06:32 . 2013-07-15 16:22 -------- d-----w- c:\users\Thomas\AppData\Local\ElevatedDiagnostics 2013-07-08 05:45 . 2013-07-16 06:06 -------- d-----w- c:\users\Thomas\AppData\Local\NPE 2013-07-08 05:34 . 2013-07-08 05:34 -------- d-----w- C:\TDSSKiller_Quarantine 2013-07-07 19:34 . 2013-07-07 19:34 -------- d-----w- c:\programdata\Sophos 2013-07-07 19:33 . 2013-07-07 19:33 73728 ----a-r- c:\users\Thomas\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe1_810EDD9E2F0A4E2BACF86673C38D9F48.exe 2013-07-07 19:33 . 2013-07-07 19:33 73728 ----a-r- c:\users\Thomas\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe_810EDD9E2F0A4E2BACF86673C38D9F48.exe 2013-07-07 19:33 . 2013-07-07 19:33 73728 ----a-r- c:\users\Thomas\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\ARPPRODUCTICON.exe 2013-07-07 19:33 . 2013-07-07 19:33 -------- d-----w- c:\program files (x86)\Sophos 2013-07-05 16:25 . 2013-07-05 16:25 -------- d-----w- c:\users\Thomas\AppData\Local\FLT 2013-07-05 15:03 . 2013-07-05 15:03 -------- d-----w- c:\program files (x86)\7-Zip 2013-07-04 08:27 . 2013-07-04 08:27 -------- d-----w- c:\program files (x86)\Mario Forever 2013-07-04 07:34 . 2013-07-04 07:34 -------- d-----w- c:\users\Thomas\AppData\Roaming\YourFileDownloader 2013-07-04 06:06 . 2013-07-04 06:06 -------- d-----w- c:\programdata\RELOADED 2013-07-04 05:36 . 2013-07-04 08:57 -------- d-----w- C:\SMBX 2013-07-03 17:46 . 2013-07-03 17:42 62976 ----a-w- c:\windows\system32\steam_api.dll 2013-07-03 17:01 . 2013-07-03 17:01 -------- d-----w- c:\users\Thomas\AppData\Roaming\Namco 2013-07-03 15:25 . 2013-07-03 15:25 -------- d-----w- c:\program files (x86)\Capcom 2013-07-03 14:56 . 2013-07-04 11:27 -------- d-----w- c:\users\Thomas\AppData\Roaming\dp3d 2013-07-03 12:59 . 2013-07-03 12:59 -------- d-----w- c:\users\Thomas\AppData\Roaming\EZDownloader 2013-07-03 12:50 . 2013-07-15 19:54 -------- d-----w- c:\programdata\InstallMate 2013-07-03 12:11 . 2013-07-03 12:11 -------- d-----w- c:\windows\SysWow64\xlive 2013-07-03 12:10 . 2013-07-05 13:55 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE 2013-07-03 11:35 . 2013-07-03 11:35 -------- d-----w- c:\programdata\Logs 2013-07-03 10:28 . 2013-07-16 13:35 -------- d-----w- c:\programdata\ManiaPlanet 2013-07-03 10:28 . 2013-07-03 14:31 -------- d-----w- c:\program files (x86)\ManiaPlanet 2013-07-03 09:30 . 2013-07-03 09:30 -------- d-----w- c:\users\Thomas\AppData\Local\.inapptracking 2013-07-03 09:06 . 2013-07-03 09:09 -------- d-----w- c:\program files (x86)\Common Files\Steam 2013-07-02 06:02 . 2007-10-22 01:37 17928 ----a-w- c:\windows\SysWow64\X3DAudio1_2.dll 2013-07-02 05:20 . 2013-07-08 09:46 -------- d-----w- C:\Spiele 2013-07-01 17:30 . 2013-07-02 19:42 -------- d-----w- c:\program files (x86)\Emsisoft Anti-Malware 2013-07-01 16:45 . 2013-07-01 16:45 -------- d-----w- c:\users\Thomas\AppData\Roaming\Malwarebytes 2013-07-01 16:45 . 2013-07-01 16:45 -------- d-----w- c:\programdata\Malwarebytes 2013-07-01 15:31 . 2013-04-11 14:12 19392 ----a-w- c:\windows\system32\roboot64.exe 2013-07-01 15:31 . 2013-07-02 19:46 -------- d-----w- c:\users\Thomas\AppData\Roaming\systweak 2013-07-01 15:31 . 2012-12-10 09:04 81920 ----a-w- c:\windows\eSellerateControl350.dll 2013-07-01 15:31 . 2012-12-10 09:04 356352 ----a-w- c:\windows\eSellerateEngine.dll 2013-07-01 15:31 . 2009-07-23 16:32 274432 ----a-w- c:\windows\SysWow64\ssleay32.dll 2013-07-01 15:31 . 2009-07-23 16:32 1122304 ----a-w- c:\windows\SysWow64\libeay32.dll 2013-07-01 15:31 . 2013-07-02 19:41 -------- d-----w- c:\program files (x86)\Qvo 6 Virus Removal Tool 2013-07-01 13:36 . 2013-07-01 13:36 -------- d-----w- c:\users\Thomas\AppData\Local\AlawarWrapper 2013-07-01 13:35 . 2013-07-01 13:39 -------- d-----w- c:\program files (x86)\Alawar 2013-07-01 11:53 . 2013-07-01 13:40 -------- d-----w- c:\program files (x86)\data 2013-07-01 11:53 . 2013-07-01 11:53 75915 ----a-w- c:\program files (x86)\Uninstal.exe 2013-07-01 11:17 . 2013-07-01 11:17 -------- d-----w- c:\users\Thomas\AppData\Roaming\LavasoftStatistics 2013-07-01 11:17 . 2013-07-01 11:17 -------- d-----w- c:\programdata\Ad-Aware Antivirus 2013-07-01 11:15 . 2013-07-08 06:18 -------- d-----w- c:\program files (x86)\Ad-Aware Antivirus 2013-07-01 11:15 . 2013-07-01 11:15 -------- d-----w- c:\programdata\Lavasoft 2013-07-01 11:15 . 2013-07-01 11:15 -------- d-----w- c:\programdata\Downloaded Installations 2013-07-01 11:15 . 2013-07-01 11:15 -------- d-----w- c:\users\Thomas\AppData\Local\adawarebp 2013-07-01 11:15 . 2013-07-01 11:15 -------- d-----w- c:\programdata\blekko toolbars 2013-07-01 11:15 . 2013-07-01 11:15 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection 2013-07-01 11:14 . 2013-07-01 11:14 -------- d-----w- c:\program files (x86)\Toolbar Cleaner 2013-07-01 11:14 . 2013-07-01 11:15 -------- d-----w- c:\program files (x86)\adawaretb 2013-07-01 11:12 . 2013-07-01 11:12 47496 ----a-w- c:\windows\system32\sbbd.exe 2013-07-01 11:12 . 2013-07-01 11:12 14456 ----a-w- c:\windows\system32\drivers\gfibto.sys 2013-07-01 11:12 . 2013-07-01 15:09 -------- d-----w- c:\users\Thomas\AppData\Roaming\Ad-Aware Antivirus 2013-07-01 10:13 . 2013-07-01 10:29 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2013-07-01 10:12 . 2009-01-25 11:14 17272 ----a-w- c:\windows\system32\sdnclean64.exe 2013-07-01 10:12 . 2013-07-01 10:30 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2 2013-07-01 09:58 . 2013-07-01 09:58 -------- d-----w- c:\program files\Enigma Software Group 2013-07-01 09:57 . 2013-07-01 10:28 -------- d-----w- c:\windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-07-01 09:57 . 2013-07-01 09:57 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard 2013-07-01 05:36 . 2013-07-01 05:38 -------- d-----w- c:\users\Thomas\AppData\Roaming\DreamDale 2013-07-01 05:36 . 2013-07-01 05:37 -------- d-----w- c:\users\Thomas\AppData\Roaming\SmashFrenzy4 2013-07-01 05:35 . 2013-07-01 07:16 -------- d-----w- c:\program files (x86)\CasualGameBox 2013-07-01 04:55 . 2013-07-01 09:43 -------- d-----w- c:\users\Thomas\AppData\Local\PlayFree Browser 2013-07-01 04:55 . 2013-07-01 10:30 -------- d-----w- c:\users\Thomas\AppData\Local\MPCBrowser 2013-06-30 20:30 . 2013-07-01 11:44 -------- d-----w- c:\program files (x86)\Strike Ball 2 2013-06-30 19:57 . 2013-07-01 13:15 -------- d-----w- c:\program files (x86)\Strike Ball 2013-06-30 19:11 . 2013-07-01 13:36 -------- d-----w- c:\programdata\AlawarWrapper 2013-06-30 18:27 . 2013-06-30 18:27 -------- d-----w- c:\programdata\Big Fish Games 2013-06-30 18:27 . 2013-06-30 18:27 -------- d-----w- c:\program files (x86)\bfgclient 2013-06-30 18:25 . 2013-06-30 21:06 -------- d-----w- C:\BigFishGamesCache 2013-06-30 17:56 . 2013-07-01 07:17 -------- d-----w- c:\program files (x86)\MyPlayCity.com 2013-06-30 16:03 . 2013-06-30 16:03 -------- d-----w- c:\users\Thomas\AppData\Roaming\eIntaller 2013-06-30 16:03 . 2013-06-30 16:03 -------- d-----w- c:\program files (x86)\Gophoto.it 2013-06-29 18:33 . 2013-06-29 18:33 -------- d-----w- c:\programdata\Browser Manager 2013-06-29 17:53 . 2007-04-16 08:56 43520 ----a-w- c:\windows\system32\tmffbdrv.dll 2013-06-29 17:53 . 2007-04-16 08:55 156160 ----a-w- c:\windows\system32\tmffbcpl.dll 2013-06-29 17:53 . 2007-01-20 02:44 208304 ----a-w- c:\windows\system32\isrt.dll 2013-06-29 17:53 . 2006-05-16 13:07 99840 ----a-w- c:\windows\system32\_IsRes.dll 2013-06-29 17:53 . 2005-09-09 09:16 135168 ----a-w- c:\windows\system32\GUStrLib.dll 2013-06-29 17:53 . 2005-01-28 10:49 106496 ----a-w- c:\windows\SysWow64\GUStrLib.dll 2013-06-29 17:53 . 2013-06-29 17:53 -------- d-----w- c:\program files (x86)\Thrustmaster 2013-06-29 17:53 . 2007-04-16 08:55 34304 ----a-w- c:\windows\SysWow64\tmffbdrv.dll 2013-06-29 17:53 . 2007-04-16 08:55 135168 ----a-w- c:\windows\SysWow64\tmffbcpl.dll 2013-06-29 17:53 . 2003-02-21 03:42 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll 2013-06-29 17:52 . 2013-06-29 17:52 -------- d-----w- c:\users\Thomas\AppData\Roaming\InstallShield . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-07-16 05:58 . 2013-05-14 14:06 1600512 ----a-w- c:\windows\system32\VSSVC.exe 2013-07-08 05:57 . 2009-07-13 23:19 328704 ----a-w- c:\windows\system32\services.exe 2013-07-05 14:49 . 2009-08-18 10:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll 2013-07-05 14:49 . 2009-08-18 09:24 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-07-04 06:27 . 2013-01-07 10:00 535008 ----a-w- c:\windows\SysWow64\msvcp110.dll 2013-07-04 06:26 . 2013-05-24 08:11 875472 ----a-w- c:\windows\SysWow64\msvcr110.dll 2013-07-03 17:50 . 2013-04-02 09:27 105808 ----a-w- c:\windows\SysWow64\steam_api.dll 2013-06-29 12:25 . 2011-02-19 21:03 421032 ----a-w- c:\windows\SysWow64\msvcp100.dll 2013-06-24 16:53 . 2011-02-18 22:40 773712 ----a-w- c:\windows\SysWow64\msvcr100.dll 2013-06-12 17:56 . 2013-04-17 20:16 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-06-12 17:56 . 2013-04-17 20:16 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-06-12 17:56 . 2013-06-12 17:56 9089416 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2013-05-15 07:55 . 2013-05-15 07:55 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-05-15 07:55 . 2013-05-15 07:55 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-05-15 07:55 . 2013-05-15 07:55 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-05-15 07:55 . 2013-05-15 07:55 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-05-15 07:55 . 2013-05-15 07:55 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-05-15 07:55 . 2013-05-15 07:55 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-05-15 07:55 . 2013-05-15 07:55 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-05-15 07:55 . 2013-05-15 07:55 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-05-15 07:55 . 2013-05-15 07:55 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-05-15 07:55 . 2013-05-15 07:55 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-05-15 07:55 . 2013-05-15 07:55 216064 ----a-w- c:\windows\system32\msls31.dll 2013-05-15 07:55 . 2013-05-15 07:55 197120 ----a-w- c:\windows\system32\msrating.dll 2013-05-15 07:55 . 2013-05-15 07:55 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-05-15 07:55 . 2013-05-15 07:55 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-05-15 07:55 . 2013-05-15 07:55 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-05-15 07:55 . 2013-05-15 07:55 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-05-15 07:55 . 2013-05-15 07:55 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-05-15 07:55 . 2013-05-15 07:55 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-05-15 07:55 . 2013-05-15 07:55 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-05-15 07:55 . 2013-05-15 07:55 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-05-15 07:55 . 2013-05-15 07:55 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-05-15 07:55 . 2013-05-15 07:55 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-05-15 07:55 . 2013-05-15 07:55 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-05-15 07:55 . 2013-05-15 07:55 81408 ----a-w- c:\windows\system32\icardie.dll 2013-05-15 07:55 . 2013-05-15 07:55 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-05-15 07:55 . 2013-05-15 07:55 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-05-15 07:55 . 2013-05-15 07:55 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-05-15 07:55 . 2013-05-15 07:55 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-05-15 07:55 . 2013-05-15 07:55 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-05-15 07:55 . 2013-05-15 07:55 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-05-15 07:55 . 2013-05-15 07:55 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-05-15 07:55 . 2013-05-15 07:55 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-05-15 07:55 . 2013-05-15 07:55 441856 ----a-w- c:\windows\system32\html.iec 2013-05-15 07:55 . 2013-05-15 07:55 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-05-15 07:55 . 2013-05-15 07:55 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-05-15 07:55 . 2013-05-15 07:55 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-05-15 07:55 . 2013-05-15 07:55 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-05-15 07:55 . 2013-05-15 07:55 235008 ----a-w- c:\windows\system32\url.dll 2013-05-15 07:55 . 2013-05-15 07:55 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-05-15 07:55 . 2013-05-15 07:55 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-05-15 07:55 . 2013-05-15 07:55 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-05-15 07:55 . 2013-05-15 07:55 149504 ----a-w- c:\windows\system32\occache.dll 2013-05-15 07:55 . 2013-05-15 07:55 144896 ----a-w- c:\windows\system32\wextract.exe 2013-05-15 07:55 . 2013-05-15 07:55 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-05-15 07:55 . 2013-05-15 07:55 13824 ----a-w- c:\windows\system32\mshta.exe 2013-05-15 07:55 . 2013-05-15 07:55 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-05-15 07:55 . 2013-05-15 07:55 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-05-15 07:55 . 2013-05-15 07:55 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-05-15 07:55 . 2013-05-15 07:55 102912 ----a-w- c:\windows\system32\inseng.dll 2013-05-15 07:54 . 2013-05-15 07:54 68608 ----a-w- c:\windows\system32\taskhost.exe 2013-05-15 07:53 . 2013-05-15 07:53 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2013-05-15 07:53 . 2013-05-15 07:53 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2013-05-15 07:53 . 2013-05-15 07:53 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-05-15 07:53 . 2013-05-15 07:53 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-05-15 07:53 . 2013-05-15 07:53 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 3928064 ----a-w- c:\windows\system32\d2d1.dll 2013-05-15 07:53 . 2013-05-15 07:53 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-05-15 07:53 . 2013-05-15 07:53 363008 ----a-w- c:\windows\system32\dxgi.dll 2013-05-15 07:53 . 2013-05-15 07:53 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 296960 ----a-w- c:\windows\system32\d3d10core.dll 2013-05-15 07:53 . 2013-05-15 07:53 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2013-05-15 07:53 . 2013-05-15 07:53 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2013-05-15 07:53 . 2013-05-15 07:53 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-15 07:53 . 2013-05-15 07:53 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll 2013-05-15 07:53 . 2013-05-15 07:53 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2013-05-15 07:53 . 2013-05-15 07:53 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll 2013-05-15 07:53 . 2013-05-15 07:53 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll 2013-05-15 07:53 . 2013-05-15 07:53 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll 2013-05-15 07:53 . 2013-05-15 07:53 1682432 ----a-w- c:\windows\system32\XpsPrint.dll 2013-05-15 07:53 . 2013-05-15 07:53 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll 2013-05-15 07:53 . 2013-05-15 07:53 1238528 ----a-w- c:\windows\system32\d3d10.dll 2013-05-15 07:53 . 2013-05-15 07:53 1175552 ----a-w- c:\windows\system32\FntCache.dll 2013-05-15 07:53 . 2013-05-15 07:53 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll 2013-05-15 07:53 . 2013-05-15 07:53 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll 2013-05-15 07:53 . 2013-05-15 07:53 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] 2013-02-11 10:47 87464 ----a-w- c:\program files (x86)\adawaretb\adawareDx.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2013-02-11 87464] . [HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Personal ID"="c:\coolsp~1\PERSON~1\PID.EXE" [2009-03-04 1134008] "SCheck"="c:\users\Thomas\AppData\Roaming\SCheck\SCheck.exe" [2013-04-09 36864] "SSync"="c:\users\Thomas\AppData\Roaming\SSync\SSync.exe" [2013-04-09 36864] "DataMgr"="c:\users\Thomas\AppData\Roaming\DataMgr\DataMgr.exe" [2013-06-18 168848] "Intermediate"="c:\users\Thomas\AppData\Roaming\Intermediate\Intermediate.exe" [2013-04-09 36864] "Spybot-S&D Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2013-05-16 3642312] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Ad-Aware Antivirus"="c:\program files (x86)\Ad-Aware Antivirus\AdAwareLauncher --windows-run" [X] "HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2012-02-09 5015040] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 98304] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-05-16 3830224] "Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2013-05-15 554408] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ad-Aware Service] @="Ad-Aware Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SystemStoreService;System Store;c:\program files (x86)\SoftwareUpdater\SystemStore.exe -displayname System Store -servicename SystemStoreService;c:\program files (x86)\SoftwareUpdater\SystemStore.exe -displayname System Store -servicename SystemStoreService [x] R3 cleanhlp;cleanhlp;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 rm;rm;c:\windows\system32\drivers\rm.sys;c:\windows\SYSNATIVE\drivers\rm.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMDS64.SYS [x] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMEFA64.SYS [x] S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys [x] S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\ccSetx64.sys [x] S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130713.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130713.001\IDSvia64.sys [x] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\Ironx64.SYS [x] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1404000.028\SYMNETS.SYS [x] S2 Ad-Aware Service;Ad-Aware Service;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [x] S2 SBAMSvc;Ad-Aware;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [x] S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x] S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x] S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x] S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x] S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x] S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x] . . Inhalt des "geplante Tasks" Ordners . 2013-07-16 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-17 17:56] . . --------- X64 Entries ----------- . . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = about:tabs uDefault_Search_URL = about:blank mDefault_Search_URL = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= mDefault_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHDS721050CLA362_JP1570HJ0545YK0545YKX&ts=1372608220 mStart Page = about:tabs mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= mSearch Bar = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= uInternet Settings,ProxyServer = localhost:21320 uSearchAssistant = hxxp://feed.snapdo.com/?publisher=VertiTechnologyYB&dpid=VertiTechnologyYB&co=DE&userid=e0067c59-ff67-4e5a-8201-d23f4bc42bab&searchtype=ds&q={searchTerms}&installDate=08/07/2013 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.fbdownloader.com/search.php?channel=sfde206&q= FF - prefs.js: browser.search.selectedEngine - Web Search FF - prefs.js: browser.startup.homepage - www.google.de FF - prefs.js: keyword.URL - hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= FF - ExtSQL: 2013-06-26 19:40; ftd@ftd.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\ftd@ftd.com.xpi FF - ExtSQL: 2013-06-30 10:44; trtv3@trtv.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\trtv3@trtv.com.xpi FF - ExtSQL: 2013-07-03 15:41; iuq6dmgwr@uuyyoopqeeue.org; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\iuq6dmgwr@uuyyoopqeeue.org FF - ExtSQL: 2013-07-03 15:43; vqfwad@csxlye.net; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\vqfwad@csxlye.net FF - ExtSQL: 2013-07-04 12:33; donottrackplus@abine.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\donottrackplus@abine.com FF - ExtSQL: 2013-07-07 19:32; uoioji5o@ioeeu.co.uk; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\uoioji5o@ioeeu.co.uk FF - ExtSQL: 2013-07-07 19:32; sbz2uue@lyyeo.net; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\sbz2uue@lyyeo.net FF - ExtSQL: 2013-07-07 19:38; umauoaqox9uuye@lyjpayoayu.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\umauoaqox9uuye@lyjpayoayu.com.xpi FF - ExtSQL: 2013-07-08 10:50; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn FF - ExtSQL: 2013-07-08 12:01; zo1bf@yatkewu-.co.uk; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\zo1bf@yatkewu-.co.uk FF - ExtSQL: 2013-07-08 12:01; eeey.i@jgpjjdk.net; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\eeey.i@jgpjjdk.net FF - ExtSQL: 2013-07-15 17:49; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn FF - ExtSQL: 2013-07-25 10:31; EFGLQA@78ETGYN-0W7FN789T87.COM; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\EFGLQA@78ETGYN-0W7FN789T87.COM . - - - - Entfernte verwaiste Registrierungseinträge - - - - . BHO-{32E3F0F9-F877-9DFF-AD4E-BFB58068F278} - (no file) Toolbar-10 - (no file) Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe Notify-SDWinLogon - SDWinLogon.dll SafeBoot-13701543.sys SafeBoot-50047533.sys SafeBoot-72262163.sys SafeBoot-73705921.sys SafeBoot-CleanHlp SafeBoot-CleanHlp.sys HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-10 - (no file) . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\N360] "ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.4.0.40\diMaster.dll\" /prefetch:1" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{722b3793-5367-4446-b6bb-db89b05c1f24}\LocalServer32] @DACL=(02 0000) @=expand:"%SystemRoot%\\System32\\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {722b3793-5367-4446-b6bb-db89b05c1f24}" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\ASUS\EPU-4 Engine\FourEngine.exe . ************************************************************************** . Zeit der Fertigstellung: 2013-07-16 16:02:15 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2013-07-16 14:02 . Vor Suchlauf: 14 Verzeichnis(se), 348.104.404.992 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 348.004.421.632 Bytes frei . - - End Of File - - 49A5B67C2C54D46278D99BC76A5C98E8 A36C5E4F47E84449FF07ED3517B43A31 Greetings Tom |
17.07.2013, 07:24 | #6 |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> w32 zero access entfernen ? |
17.07.2013, 08:09 | #7 |
| w32 zero access entfernen ? Guten Morgen, hier ist schonmal die AdwCleaner[Sx].txt Code:
ATTFilter # AdwCleaner v2.305 - Datei am 17/07/2013 um 08:34:20 erstellt # Aktualisiert am 11/07/2013 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzer : Thomas - THOMAS-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Thomas\Desktop\adwcleaner.exe # Option [Löschen] **** [Dienste] **** Gestoppt & Gelöscht : SystemStoreService ***** [Dateien / Ordner] ***** Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Datei Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\foxydeal.sqlite Datei Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\searchplugins\search.xml Ordner Gelöscht : C:\Program Files (x86)\adawaretb Ordner Gelöscht : C:\Program Files (x86)\Covus Freemium Ordner Gelöscht : C:\Program Files (x86)\Gophoto.it Ordner Gelöscht : C:\Program Files (x86)\Omiga Plus Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater Ordner Gelöscht : C:\ProgramData\blekko toolbars Ordner Gelöscht : C:\ProgramData\Browser Manager Ordner Gelöscht : C:\ProgramData\InstallMate Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Covus Freemium Ordner Gelöscht : C:\ProgramData\ParetoLogic Ordner Gelöscht : C:\ProgramData\Tarma Installer Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Freemium Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpepfkjapeclaafmhoelccknpfedainn Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk Ordner Gelöscht : C:\Users\Thomas\AppData\Local\PutLockerDownloader Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\adawaretb Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\delta Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\searchresultstb Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\SimplyTech Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\DataMgr Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\DealPly Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\DriverCure Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\eIntaller Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\fbDownloader Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\file scout Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\jetpack Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Omiga Plus Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\ParetoLogic Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\PerformerSoft Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\SpeedAnalysis2 Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\yourfiledownloader ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKCU\Software\1ClickDownload Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer Schlüssel Gelöscht : HKCU\Software\filescout Schlüssel Gelöscht : HKCU\Software\FoxyDeal Schlüssel Gelöscht : HKCU\Software\ilivid Schlüssel Gelöscht : HKCU\Software\IM Schlüssel Gelöscht : HKCU\Software\Iminent Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6492E171-2427-4932-B414-33574A089F5E} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C} Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\systweak Schlüssel Gelöscht : HKCU\Software\5f2d6d8b16eef17 Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Schlüssel Gelöscht : HKLM\Software\adawaretb Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF} Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\iLividSRTB Schlüssel Gelöscht : HKLM\Software\Iminent Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS Schlüssel Gelöscht : HKLM\Software\qvo6Software Schlüssel Gelöscht : HKLM\Software\SoftwareUpdater Schlüssel Gelöscht : HKLM\Software\SProtector Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5f2d6d8b16eef17 Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC2BAE47-25AF-4CE9-9E78-10627A49C9EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\adawaretb Schlüssel Gelöscht : HKLM\Software\YourFileDownloader Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr] Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}] Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16635 Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=&st=bs&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q=%s --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHDS721050CLA362_JP1570HJ0545YK0545YKX&ts=1372608220 --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHDS721050CLA362_JP1570HJ0545YK0545YKX&ts=1372608220 --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\prefs.js Gelöscht : user_pref("aol_toolbar.default.search.check", false); Gelöscht : user_pref("browser.search.defaultengine", "Web Search"); Gelöscht : user_pref("browser.search.defaultenginename", "Web Search"); Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.fbdownloader.com/search.php?channel=sfde206&q=[...] Gelöscht : user_pref("browser.search.order.1", "Web Search"); Gelöscht : user_pref("browser.search.selectedEngine", "Web Search"); Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 0); Gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Gelöscht : user_pref("extensions.delta.admin", false); Gelöscht : user_pref("extensions.delta.aflt", "babsst"); Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Gelöscht : user_pref("extensions.delta.autoRvrt", "false"); Gelöscht : user_pref("extensions.delta.dfltLng", "de"); Gelöscht : user_pref("extensions.delta.excTlbr", false); Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true); Gelöscht : user_pref("extensions.delta.id", "44815b3f000000000000647002e987f3"); Gelöscht : user_pref("extensions.delta.instlDay", "15901"); Gelöscht : user_pref("extensions.delta.instlRef", "sst"); Gelöscht : user_pref("extensions.delta.newTab", false); Gelöscht : user_pref("extensions.delta.prdct", "delta"); Gelöscht : user_pref("extensions.delta.prtnrId", "delta"); Gelöscht : user_pref("extensions.delta.rvrt", "false"); Gelöscht : user_pref("extensions.delta.smplGrp", "none"); Gelöscht : user_pref("extensions.delta.tlbrId", "base"); Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", ""); Gelöscht : user_pref("extensions.delta.vrsn", "1.8.21.5"); Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.21.517:59:17"); Gelöscht : user_pref("extensions.delta.vrsni", "1.8.21.5"); Gelöscht : user_pref("extensions.delta_i.babExt", ""); Gelöscht : user_pref("extensions.delta_i.babTrack", "affID=121245&tt=150713_91114&tsp=4944"); Gelöscht : user_pref("extensions.delta_i.srcExt", "ss"); Gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false); Gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false); Gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false); Gelöscht : user_pref("extensions.helperbar.Visibility", true); Gelöscht : user_pref("extensions.helperbar.countryiso", "de"); Gelöscht : user_pref("extensions.helperbar.downloadprovider", "vertitechnologyyb"); Gelöscht : user_pref("extensions.helperbar.installationid", "e0067c59-ff67-4e5a-8201-d23f4bc42bab"); Gelöscht : user_pref("extensions.helperbar.installdate", "08/07/2013"); Gelöscht : user_pref("extensions.helperbar.publisher", "vertitechnologyyb"); Gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000"); Gelöscht : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373[...] Gelöscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); Gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); Gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); Gelöscht : user_pref("sweetim.toolbar.searchguard.enable", ""); ************************* AdwCleaner[S1].txt - [23955 octets] - [17/07/2013 08:34:20] ########## EOF - C:\AdwCleaner[S1].txt - [24016 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.1.2 (07.16.2013:1) OS: Windows 7 Ultimate x64 Ran by Thomas on 17.07.2013 at 8:48:51,49 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\big fish games" Successfully deleted: [Folder] "C:\Users\Thomas\AppData\Roaming\systweak" Successfully deleted: [Folder] "C:\Users\Thomas\appdata\local\adawarebp" ~~~ FireFox Successfully deleted: [File] C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\invalidprefs.js Successfully deleted: [Folder] C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\jetpack Successfully deleted the following from C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\prefs.js user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v2"); user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1"); user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar"); user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01"); user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000"); user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000"); user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11"); user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02"); user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1"); Emptied folder: C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\minidumps [12 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 17.07.2013 at 8:52:14,72 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-07-2013 02 Ran by Thomas (administrator) on 17-07-2013 08:53:36 Running from C:\Users\Thomas\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe (Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== HKCU\...\Run: [Personal ID] - C:\COOLSP~1\PERSON~1\PID.EXE [1134008 2009-03-04] (coolspot AG, Düsseldorf) HKCU\...\Run: [SCheck] - "C:\Users\Thomas\AppData\Roaming\SCheck\SCheck.exe" check [36864 2013-04-10] () HKCU\...\Run: [SSync] - "C:\Users\Thomas\AppData\Roaming\SSync\SSync.exe" [36864 2013-04-10] () HKCU\...\Run: [Intermediate] - "C:\Users\Thomas\AppData\Roaming\Intermediate\Intermediate.exe" [36864 2013-04-10] () HKCU\...\Run: [Spybot-S&D Cleaning] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean [3642312 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5015040 2012-02-09] (VIA) HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-02-10] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft) HKLM-x32\...\Run: [Ad-Aware Antivirus] - "C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher" --windows-run [x] ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:tabs HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: No Name - {32E3F0F9-F877-9DFF-AD4E-BFB58068F278} - No File BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation) DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF} FF Extension: DoNotTrackMe - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\donottrackplus@abine.com FF Extension: SeaariCh-NNewTAib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\eeey.i@jgpjjdk.net FF Extension: pricealarm - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM FF Extension: suaafEE ssave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\iuq6dmgwr@uuyyoopqeeue.org FF Extension: sayfEE osyAve - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\sbz2uue@lyyeo.net FF Extension: SEEarchh-iNewTab - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\uoioji5o@ioeeu.co.uk FF Extension: SEaaroch-NaewTaib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\vqfwad@csxlye.net FF Extension: ssaafe saave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\zo1bf@yatkewu-.co.uk FF Extension: ftd - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\ftd@ftd.com.xpi FF Extension: trtv3 - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\trtv3@trtv.com.xpi FF Extension: umauoaqox9uuye - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\umauoaqox9uuye@lyjpayoayu.com.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\ FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\ Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (FTdownloader V4.0) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebnnlollpcjnfpkafhoclljaojgnfok\4.0_0 CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: () - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html CHR Extension: (SEaaroch-NaewTaib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabakelkhlkfbibdngkjmmpnhkjkogch\1 CHR Extension: (OfferMosquito) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.4.1_0 CHR Extension: (SeaariCh-NNewTAib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebbilelhgjmofbjmfaocdglilladgpf\1 CHR Extension: (ssaafe saave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpibhpiooemnakpklemdcbhldoojjjg\1 CHR Extension: (SEEarchh-iNewTab) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb\1 CHR Extension: (Norton Identity Protection) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0 CHR Extension: (Cool Smiley Bar for Facebook) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.4_0 CHR Extension: (suaafEE ssave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakblkgcmhjcpfedglmhojonabkjjemp\1 CHR Extension: (sayfEE osyAve) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdncopncngigainmcdjndjihapgiboef\1 CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 Ad-Aware Service; C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited) R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation) S2 SBAMSvc; C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.) S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x] S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x] ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] () R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] () R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation) R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-18] (Symantec Corporation) R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-07-01] (GFI Software) R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation) R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] () R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 rm; \??\C:\Windows\system32\drivers\rm.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt 2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT 2013-07-17 08:47 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe 2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe 2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt 2013-07-17 08:33 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe 2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe 2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt 2013-07-16 15:41 - 2013-07-16 15:46 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3) 2013-07-16 15:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-07-16 15:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-07-16 15:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-07-16 15:39 - 2013-07-16 16:02 - 00000000 ____D C:\Qoobox 2013-07-16 15:38 - 2013-07-16 16:01 - 00000000 ____D C:\Windows\erdnt 2013-07-16 15:29 - 2013-07-16 15:24 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe 2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP 2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp 2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe 2013-07-16 13:35 - 2013-07-16 13:36 - 00027086 _____ C:\Users\Thomas\Desktop\FRST.zip 2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt 2013-07-16 13:02 - 2013-07-16 15:32 - 00000000 ____D C:\FRST 2013-07-16 12:59 - 2013-07-16 15:36 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2) 2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe 2013-07-16 12:58 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe 2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip 2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log 2013-07-16 10:59 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe 2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe 2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan 2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe 2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe 2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache 2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe 2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg 2013-07-15 18:18 - 2013-07-16 10:25 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint 2013-07-15 18:04 - 2013-07-17 06:54 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater 2013-07-15 18:04 - 2013-07-17 06:54 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-07-15 18:04 - 2013-05-13 05:52 - 00023624 _____ C:\Windows\Launcher.exe 2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities 2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe 2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft 2013-07-14 18:25 - 2013-07-14 18:42 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile 2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller 2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache 2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip 2013-07-12 03:05 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-12 03:05 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-12 03:05 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-12 03:05 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-12 03:05 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-12 03:05 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-12 03:05 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-12 03:05 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-12 03:05 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-12 03:05 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-12 03:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-12 03:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-12 03:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-12 03:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754 2013-07-10 20:40 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-10 20:40 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-10 20:40 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-10 20:40 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-10 20:39 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-10 20:39 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-10 20:39 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-09 17:13 - 2013-07-09 17:14 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360 2013-07-08 20:57 - 2013-07-08 20:58 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner 2013-07-08 20:56 - 2013-07-15 19:40 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip 2013-07-08 19:58 - 2013-07-13 19:47 - 00003238 _____ C:\Windows\System32\Tasks\Dealply 2013-07-08 12:11 - 2013-07-15 19:43 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP 2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip 2013-07-08 10:50 - 2013-07-09 17:08 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration 2013-07-08 10:50 - 2013-07-09 13:11 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2013-07-08 10:50 - 2013-07-09 13:11 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-07-08 10:49 - 2013-07-09 17:08 - 00000000 ____D C:\Windows\system32\Drivers\N360x64 2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360 2013-07-08 10:39 - 2013-07-08 10:43 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe 2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe 2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe 2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe 2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe 2013-07-08 07:45 - 2013-07-16 08:06 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE 2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe 2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine 2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe 2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos 2013-07-07 21:31 - 2013-07-07 21:32 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe 2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT 2013-07-05 18:24 - 2013-07-08 10:22 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log 2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk 2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby 2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar 2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-07-05 14:35 - 2013-07-05 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar 2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends 2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP 2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP 2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2) 2013-07-04 23:19 - 2013-07-05 00:04 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar 2013-07-04 23:14 - 2013-07-05 08:26 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar 2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar 2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar 2013-07-04 22:27 - 2013-07-05 08:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar 2013-07-04 22:27 - 2013-07-05 00:54 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar 2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar 2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar 2013-07-04 22:26 - 2013-07-05 08:28 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar 2013-07-04 22:26 - 2013-07-05 08:27 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar 2013-07-04 22:26 - 2013-07-05 08:27 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar 2013-07-04 22:26 - 2013-07-05 08:27 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar 2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar 2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar 2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar 2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar 2013-07-04 22:25 - 2013-07-05 08:28 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar 2013-07-04 22:25 - 2013-07-05 08:27 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar 2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar 2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar 2013-07-04 19:15 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar 2013-07-04 19:15 - 2013-07-04 19:52 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar 2013-07-04 19:15 - 2013-07-04 19:51 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar 2013-07-04 19:15 - 2013-07-04 19:49 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar 2013-07-04 19:14 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar 2013-07-04 19:13 - 2013-07-04 19:51 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar 2013-07-04 19:13 - 2013-07-04 19:48 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar 2013-07-04 19:13 - 2013-07-04 19:46 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar 2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar 2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar 2013-07-04 16:31 - 2013-07-04 16:53 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar 2013-07-04 15:31 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar 2013-07-04 15:31 - 2013-07-04 16:03 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar 2013-07-04 15:31 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar 2013-07-04 15:31 - 2013-07-04 15:53 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar 2013-07-04 15:30 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar 2013-07-04 15:29 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar 2013-07-04 12:56 - 2013-07-04 12:58 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar 2013-07-04 12:54 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar 2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe 2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar 2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar 2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar 2013-07-04 11:09 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar 2013-07-04 11:09 - 2013-07-04 15:50 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar 2013-07-04 11:09 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar 2013-07-04 11:09 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar 2013-07-04 11:09 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar 2013-07-04 11:08 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar 2013-07-04 11:08 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar 2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar 2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar 2013-07-04 11:08 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar 2013-07-04 11:08 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar 2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar 2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar 2013-07-04 11:07 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar 2013-07-04 11:07 - 2013-07-04 15:16 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar 2013-07-04 11:07 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar 2013-07-04 11:06 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar 2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar 2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar 2013-07-04 11:06 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar 2013-07-04 11:06 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar 2013-07-04 11:06 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar 2013-07-04 10:52 - 2013-07-04 21:55 - 00000036 _____ C:\Windows\mafosav.INI 2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk 2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever 2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe 2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate 2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip 2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip 2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar 2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED 2013-07-04 07:36 - 2013-07-04 10:57 - 00000000 ____D C:\SMBX 2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk 2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe 2013-07-03 22:24 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar 2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar 2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar 2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar 2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar 2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar 2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar 2013-07-03 22:23 - 2013-07-03 22:54 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar 2013-07-03 22:23 - 2013-07-03 22:52 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar 2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe 2013-07-03 19:46 - 2013-07-03 19:42 - 00062976 _____ C:\Windows\system32\steam_api.dll 2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll 2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip 2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk 2013-07-03 19:20 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar 2013-07-03 19:20 - 2013-07-03 19:22 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar 2013-07-03 19:19 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar 2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar 2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar 2013-07-03 19:19 - 2013-07-03 19:41 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar 2013-07-03 19:08 - 2013-07-03 20:32 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar 2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco 2013-07-03 18:58 - 2013-07-03 18:59 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar 2013-07-03 18:53 - 2013-07-03 19:17 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar 2013-07-03 18:53 - 2013-07-03 19:15 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar 2013-07-03 18:53 - 2013-07-03 18:59 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar 2013-07-03 18:07 - 2013-07-03 19:06 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar 2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM 2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk 2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP 2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom 2013-07-03 16:56 - 2013-07-04 13:27 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d 2013-07-03 16:55 - 2013-07-04 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare 2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar 2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader 2013-07-03 14:36 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar 2013-07-03 14:36 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar 2013-07-03 14:36 - 2013-07-03 14:46 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar 2013-07-03 14:35 - 2013-07-03 15:53 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar 2013-07-03 14:35 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar 2013-07-03 14:35 - 2013-07-03 15:45 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar 2013-07-03 14:35 - 2013-07-03 15:43 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar 2013-07-03 14:35 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar 2013-07-03 14:35 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar 2013-07-03 14:34 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar 2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk 2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos 2013-07-03 14:10 - 2013-07-05 15:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe 2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip 2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe 2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe 2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar 2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar 2013-07-03 13:06 - 2013-07-03 13:14 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar 2013-07-03 12:29 - 2013-07-16 15:35 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet 2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-07-03 12:28 - 2013-07-16 15:35 - 00000000 ____D C:\ProgramData\ManiaPlanet 2013-07-03 12:28 - 2013-07-03 16:31 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet 2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking 2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi 2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk 2013-07-03 09:57 - 2013-07-03 10:21 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar 2013-07-03 09:56 - 2013-07-03 10:29 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar 2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar 2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar 2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar 2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar 2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar 2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar 2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar 2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar 2013-07-03 09:55 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar 2013-07-03 09:55 - 2013-07-03 10:23 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar 2013-07-03 09:44 - 2013-07-03 09:51 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar 2013-07-03 09:44 - 2013-07-03 09:48 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar 2013-07-03 08:10 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar 2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar 2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar 2013-07-03 08:10 - 2013-07-03 08:47 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar 2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar 2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar 2013-07-03 08:09 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar 2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar 2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar 2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar 2013-07-03 08:08 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar 2013-07-03 08:08 - 2013-07-03 08:55 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar 2013-07-03 07:57 - 2013-07-03 08:07 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar 2013-07-03 06:43 - 2013-07-13 19:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox |
17.07.2013, 08:12 | #8 |
| w32 zero access entfernen ? FRST log 2/2 Code:
ATTFilter 44640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar 2013-07-02 22:19 - 2013-07-02 22:41 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar 2013-07-02 21:09 - 2013-07-02 21:31 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar 2013-07-02 19:36 - 2013-07-02 19:58 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar 2013-07-02 18:19 - 2013-07-02 18:42 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar 2013-07-02 17:14 - 2013-07-02 17:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar 2013-07-02 13:57 - 2013-07-02 14:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar 2013-07-02 09:01 - 2013-07-02 09:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar 2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk 2013-07-02 08:04 - 2013-07-03 10:25 - 00000000 ____D C:\Users\Thomas\Documents\My Games 2013-07-02 08:03 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2013-07-02 08:03 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2013-07-02 08:03 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2013-07-02 08:03 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2013-07-02 08:03 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2013-07-02 08:03 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2013-07-02 08:03 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2013-07-02 08:03 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2013-07-02 08:03 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2013-07-02 08:03 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2013-07-02 08:03 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2013-07-02 08:03 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2013-07-02 08:03 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2013-07-02 08:03 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2013-07-02 08:03 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2013-07-02 08:03 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2013-07-02 08:03 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2013-07-02 08:03 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2013-07-02 08:03 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2013-07-02 08:03 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2013-07-02 08:03 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2013-07-02 08:03 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2013-07-02 08:03 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2013-07-02 08:03 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2013-07-02 08:03 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2013-07-02 08:03 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2013-07-02 08:02 - 2013-07-02 08:03 - 00010047 _____ C:\Windows\DirectX.log 2013-07-02 08:02 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2013-07-02 08:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2013-07-02 08:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2013-07-02 08:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2013-07-02 08:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2013-07-02 08:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2013-07-02 08:02 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2013-07-02 08:02 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2013-07-02 08:02 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2013-07-02 08:02 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2013-07-02 08:02 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2013-07-02 08:02 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2013-07-02 08:02 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2013-07-02 08:02 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2013-07-02 08:02 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2013-07-02 08:02 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2013-07-02 08:02 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2013-07-02 08:02 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2013-07-02 08:02 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2013-07-02 08:02 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2013-07-02 08:02 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2013-07-02 08:02 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2013-07-02 08:02 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2013-07-02 08:02 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2013-07-02 08:02 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2013-07-02 08:02 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2013-07-02 08:02 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2013-07-02 08:02 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2013-07-02 08:02 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2013-07-02 08:02 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2013-07-02 08:02 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2013-07-02 08:02 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2013-07-02 08:02 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2013-07-02 08:02 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2013-07-02 08:02 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2013-07-02 08:02 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2013-07-02 08:02 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2013-07-02 08:02 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2013-07-02 08:02 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2013-07-02 08:02 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2013-07-02 08:02 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2013-07-02 08:02 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2013-07-02 08:02 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2013-07-02 08:02 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2013-07-02 08:02 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2013-07-02 08:02 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2013-07-02 08:02 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2013-07-02 08:02 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2013-07-02 08:02 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2013-07-02 08:02 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2013-07-02 08:00 - 2013-07-02 08:02 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-07-02 07:59 - 2013-07-02 08:03 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-07-02 07:20 - 2013-07-08 11:46 - 00000000 ____D C:\Spiele 2013-07-02 06:28 - 2013-07-02 07:02 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar 2013-07-01 21:15 - 2013-07-01 21:49 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar 2013-07-01 19:30 - 2013-07-02 21:42 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2013-07-01 19:30 - 2013-07-02 21:40 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-01 17:40 - 2013-07-01 21:05 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar 2013-07-01 17:39 - 2013-07-01 20:06 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar 2013-07-01 17:31 - 2013-07-02 21:41 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool 2013-07-01 17:31 - 2013-04-11 16:12 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe 2013-07-01 17:31 - 2012-12-10 11:04 - 00356352 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll 2013-07-01 17:31 - 2012-12-10 11:04 - 00081920 _____ (eSellerate Inc.) C:\Windows\eSellerateControl350.dll 2013-07-01 17:31 - 2009-07-23 18:32 - 01122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll 2013-07-01 17:31 - 2009-07-23 18:32 - 00274432 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll 2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile 2013-07-01 15:56 - 2013-07-02 08:54 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller 2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper 2013-07-01 15:35 - 2013-07-01 15:39 - 00000000 ____D C:\Program Files (x86)\Alawar 2013-07-01 14:44 - 2013-07-01 15:06 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar 2013-07-01 13:53 - 2013-07-01 15:40 - 00000000 ____D C:\Program Files (x86)\data 2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe 2013-07-01 13:41 - 2013-06-30 22:30 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk 2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus 2013-07-01 13:15 - 2013-07-08 08:18 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection 2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner 2013-07-01 13:12 - 2013-07-01 17:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus 2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe 2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys 2013-07-01 12:13 - 2013-07-01 12:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-07-01 12:12 - 2013-07-01 12:30 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-07-01 12:12 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat 2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-07-01 11:57 - 2013-07-01 12:28 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-07-01 10:54 - 2013-07-14 19:00 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini 2013-07-01 10:31 - 2013-07-01 10:43 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller 2013-07-01 07:36 - 2013-07-01 07:38 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale 2013-07-01 07:36 - 2013-07-01 07:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4 2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox 2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Program Files (x86)\CasualGameBox 2013-07-01 06:55 - 2013-07-01 12:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser 2013-07-01 06:55 - 2013-07-01 11:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser 2013-06-30 22:30 - 2013-07-01 13:44 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2 2013-06-30 21:57 - 2013-07-01 15:15 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2013-06-30 21:44 - 2013-06-30 21:52 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3 (CRACKED) (DIRECT PLAY) [blaze69] 2013-06-30 21:11 - 2013-07-01 15:36 - 00000000 ____D C:\ProgramData\AlawarWrapper 2013-06-30 21:11 - 2013-07-01 09:38 - 00000000 ____D C:\Program Files (x86)\Alawar.de 2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper 2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient 2013-06-30 20:25 - 2013-06-30 23:06 - 00000000 ____D C:\BigFishGamesCache 2013-06-30 19:56 - 2013-07-01 09:17 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com 2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip 2013-06-29 20:13 - 2008-08-29 09:12 - 00932864 _____ C:\Users\Thomas\Desktop\Xpadder.exe 2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster 2013-06-29 19:53 - 2007-04-16 10:56 - 00043520 _____ (Thrustmaster) C:\Windows\system32\tmffbdrv.dll 2013-06-29 19:53 - 2007-04-16 10:55 - 00156160 _____ (Thrustmaster) C:\Windows\system32\tmffbcpl.dll 2013-06-29 19:53 - 2007-04-16 10:55 - 00135168 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbcpl.dll 2013-06-29 19:53 - 2007-04-16 10:55 - 00034304 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbdrv.dll 2013-06-29 19:53 - 2007-01-20 04:44 - 00208304 _____ (Macrovision Corporation) C:\Windows\system32\isrt.dll 2013-06-29 19:53 - 2006-05-16 15:07 - 00099840 _____ (Macrovision Corporation) C:\Windows\system32\_IsRes.dll 2013-06-29 19:53 - 2005-09-09 11:16 - 00135168 _____ (Guillemot Corporation) C:\Windows\system32\GUStrLib.dll 2013-06-29 19:53 - 2005-01-28 12:49 - 00106496 _____ (Guillemot Corporation) C:\Windows\SysWOW64\GUStrLib.dll 2013-06-29 19:53 - 2003-02-21 05:42 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield 2013-06-29 19:41 - 2013-06-30 22:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar 2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium 2013-06-29 19:40 - 2013-07-01 09:14 - 00000000 ____D C:\Program Files (x86)\OXXOGames 2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com 2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat 2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker 2013-06-29 17:07 - 2013-06-29 19:09 - 00000000 ____D C:\ProgramData\WildTangent 2013-06-29 14:37 - 2013-06-29 14:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper 2013-06-29 14:25 - 2013-07-01 09:07 - 00000000 ____D C:\Program Files (x86)\WinZipper 2013-06-29 14:25 - 2013-06-29 18:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper 2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel 2013-06-27 09:51 - 2013-06-27 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk 2013-06-26 17:25 - 2013-06-26 17:26 - 00000000 ____D C:\Program Files (x86)\MPU 2012 2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects 2013-06-26 15:29 - 2013-06-30 18:08 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate 2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common 2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC 2013-06-26 14:31 - 2013-05-16 14:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll 2013-06-26 14:31 - 2013-05-16 14:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2013-06-22 17:51 - 2013-06-22 17:52 - 00000000 ____D C:\Users\Thomas\.dia 2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia 2013-06-20 11:43 - 2013-07-08 20:23 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt ==================== One Month Modified Files and Folders ======= 2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt 2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT 2013-07-17 08:46 - 2013-07-17 08:47 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe 2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe 2013-07-17 08:43 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-17 08:43 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-17 08:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-17 08:35 - 2009-07-14 06:51 - 00094386 _____ C:\Windows\setupact.log 2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt 2013-07-17 08:34 - 2013-04-17 15:34 - 00000997 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-07-17 08:34 - 2013-04-17 15:23 - 01637246 _____ C:\Windows\WindowsUpdate.log 2013-07-17 08:32 - 2013-07-17 08:33 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe 2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe 2013-07-17 07:56 - 2013-04-17 22:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-17 06:54 - 2013-07-15 18:04 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater 2013-07-17 06:54 - 2013-07-15 18:04 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt 2013-07-16 16:02 - 2013-07-16 15:39 - 00000000 ____D C:\Qoobox 2013-07-16 16:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-07-16 16:01 - 2013-07-16 15:38 - 00000000 ____D C:\Windows\erdnt 2013-07-16 15:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-07-16 15:57 - 2013-04-17 15:56 - 01151256 _____ C:\Windows\PFRO.log 2013-07-16 15:46 - 2013-07-16 15:41 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3) 2013-07-16 15:36 - 2013-07-16 12:59 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2) 2013-07-16 15:35 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet 2013-07-16 15:35 - 2013-07-03 12:28 - 00000000 ____D C:\ProgramData\ManiaPlanet 2013-07-16 15:35 - 2013-05-30 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\mucke 2013-07-16 15:32 - 2013-07-16 13:02 - 00000000 ____D C:\FRST 2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP 2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp 2013-07-16 15:26 - 2013-04-19 08:14 - 00000000 ____D C:\Windows\Minidump 2013-07-16 15:24 - 2013-07-16 15:29 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe 2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe 2013-07-16 13:36 - 2013-07-16 13:35 - 00027086 _____ C:\Users\Thomas\Desktop\FRST.zip 2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt 2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe 2013-07-16 12:59 - 2013-07-16 12:58 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe 2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip 2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log 2013-07-16 10:58 - 2013-07-16 10:59 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe 2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe 2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan 2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe 2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe 2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache 2013-07-16 10:29 - 2013-04-30 17:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps 2013-07-16 10:25 - 2013-07-15 18:18 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint 2013-07-16 08:06 - 2013-07-08 07:45 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE 2013-07-16 07:58 - 2013-05-14 16:06 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe 2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg 2013-07-15 19:57 - 2013-04-17 15:32 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-15 19:43 - 2013-07-08 12:11 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP 2013-07-15 19:40 - 2013-07-08 20:56 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip 2013-07-15 18:16 - 2013-04-19 20:32 - 00003583 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog 2013-07-15 18:14 - 2013-06-01 15:13 - 00000000 ____D C:\Program Files (x86)\Epson Software 2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities 2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe 2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft 2013-07-15 17:53 - 2013-04-17 15:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-07-14 19:00 - 2013-07-01 10:54 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini 2013-07-14 18:42 - 2013-07-14 18:25 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile 2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller 2013-07-13 19:49 - 2013-07-03 06:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache 2013-07-13 19:47 - 2013-07-08 19:58 - 00003238 _____ C:\Windows\System32\Tasks\Dealply 2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip 2013-07-12 03:25 - 2009-07-14 06:45 - 00273288 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-12 03:07 - 2009-07-14 19:58 - 00696878 _____ C:\Windows\system32\perfh007.dat 2013-07-12 03:07 - 2009-07-14 19:58 - 00148174 _____ C:\Windows\system32\perfc007.dat 2013-07-12 03:07 - 2009-07-14 07:13 - 01634596 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-12 03:01 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-11 13:54 - 2013-06-14 10:35 - 00001470 _____ C:\Users\Thomas\Desktop\strom.txt 2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754 2013-07-09 17:14 - 2013-07-09 17:13 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360 2013-07-09 17:08 - 2013-07-08 10:50 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration 2013-07-09 17:08 - 2013-07-08 10:49 - 00000000 ____D C:\Windows\system32\Drivers\N360x64 2013-07-09 13:11 - 2013-07-08 10:50 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2013-07-09 13:11 - 2013-07-08 10:50 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2013-07-08 20:58 - 2013-07-08 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner 2013-07-08 20:23 - 2013-06-20 11:43 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt 2013-07-08 11:46 - 2013-07-02 07:20 - 00000000 ____D C:\Spiele 2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360 2013-07-08 10:49 - 2013-04-17 15:51 - 00000000 ____D C:\ProgramData\Norton 2013-07-08 10:43 - 2013-07-08 10:39 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe 2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe 2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe 2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe 2013-07-08 10:22 - 2013-07-05 18:24 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log 2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe 2013-07-08 08:18 - 2013-07-01 13:15 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus 2013-07-08 08:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-07-08 07:57 - 2009-07-14 01:19 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe 2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine 2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe 2013-07-08 07:19 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas 2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos 2013-07-07 21:32 - 2013-07-07 21:31 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe 2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP 2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP 2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT 2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk 2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby 2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar 2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-07-05 15:55 - 2013-07-03 14:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2013-07-05 15:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-07-05 15:14 - 2013-07-05 14:35 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar 2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends 2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2) 2013-07-05 11:11 - 2013-04-19 20:37 - 01590498 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar 2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar 2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar 2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar 2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar 2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar 2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar 2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar 2013-07-05 08:28 - 2013-07-04 22:26 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar 2013-07-05 08:28 - 2013-07-04 22:25 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar 2013-07-05 08:27 - 2013-07-04 22:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar 2013-07-05 08:27 - 2013-07-04 22:26 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar 2013-07-05 08:27 - 2013-07-04 22:26 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar 2013-07-05 08:27 - 2013-07-04 22:26 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar 2013-07-05 08:27 - 2013-07-04 22:25 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar 2013-07-05 08:26 - 2013-07-04 23:14 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar 2013-07-05 00:54 - 2013-07-04 22:27 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar 2013-07-05 00:04 - 2013-07-04 23:19 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar 2013-07-04 21:55 - 2013-07-04 10:52 - 00000036 _____ C:\Windows\mafosav.INI 2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar 2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar 2013-07-04 19:53 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar 2013-07-04 19:53 - 2013-07-04 19:14 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar 2013-07-04 19:52 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar 2013-07-04 19:51 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar 2013-07-04 19:51 - 2013-07-04 19:13 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar 2013-07-04 19:49 - 2013-07-04 19:15 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar 2013-07-04 19:48 - 2013-07-04 19:13 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar 2013-07-04 19:46 - 2013-07-04 19:13 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar 2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar 2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar 2013-07-04 16:53 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar 2013-07-04 16:04 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar 2013-07-04 16:04 - 2013-07-04 15:30 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar 2013-07-04 16:03 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar 2013-07-04 16:02 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar 2013-07-04 16:02 - 2013-07-04 15:29 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar 2013-07-04 15:53 - 2013-07-04 15:31 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar 2013-07-04 15:51 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar 2013-07-04 15:51 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar 2013-07-04 15:50 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar 2013-07-04 15:47 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar 2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar 2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar 2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar 2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar 2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar 2013-07-04 15:20 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar 2013-07-04 15:19 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar 2013-07-04 15:19 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar 2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar 2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar 2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar 2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar 2013-07-04 15:18 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar 2013-07-04 15:16 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar 2013-07-04 15:15 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar 2013-07-04 15:15 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar 2013-07-04 15:14 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar 2013-07-04 15:14 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar 2013-07-04 15:14 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar 2013-07-04 15:13 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar 2013-07-04 15:13 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar 2013-07-04 13:27 - 2013-07-03 16:56 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d 2013-07-04 12:58 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar 2013-07-04 12:56 - 2013-07-04 12:54 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar 2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe 2013-07-04 10:57 - 2013-07-04 07:36 - 00000000 ____D C:\SMBX 2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk 2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever 2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe 2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate 2013-07-04 09:16 - 2013-07-03 16:55 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare 2013-07-04 08:27 - 2013-01-07 12:00 - 00535008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110.dll 2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip 2013-07-04 08:26 - 2013-05-24 10:11 - 00875472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110.dll 2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip 2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar 2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED 2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk 2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe 2013-07-03 22:57 - 2013-07-03 22:24 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar 2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar 2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar 2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar 2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar 2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar 2013-07-03 22:54 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar 2013-07-03 22:52 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar 2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar 2013-07-03 20:32 - 2013-07-03 19:08 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar 2013-07-03 19:50 - 2013-04-02 11:27 - 00105808 _____ (Valve Corporation) C:\Windows\SysWOW64\steam_api.dll 2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe 2013-07-03 19:43 - 2013-07-03 19:20 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar 2013-07-03 19:43 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar 2013-07-03 19:42 - 2013-07-03 19:46 - 00062976 _____ C:\Windows\system32\steam_api.dll 2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll 2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar 2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar 2013-07-03 19:41 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar 2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip 2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk 2013-07-03 19:22 - 2013-07-03 19:20 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar 2013-07-03 19:17 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar 2013-07-03 19:15 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar 2013-07-03 19:06 - 2013-07-03 18:07 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar 2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco 2013-07-03 18:59 - 2013-07-03 18:58 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar 2013-07-03 18:59 - 2013-07-03 18:53 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar 2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM 2013-07-03 17:35 - 2013-04-17 15:56 - 00060432 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT 2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk 2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP 2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom 2013-07-03 16:31 - 2013-07-03 12:28 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet 2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar 2013-07-03 15:53 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar 2013-07-03 15:47 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar 2013-07-03 15:47 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar 2013-07-03 15:45 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar 2013-07-03 15:43 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar 2013-07-03 15:42 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar 2013-07-03 15:42 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar 2013-07-03 15:41 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar 2013-07-03 15:41 - 2013-07-03 14:34 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar 2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader 2013-07-03 14:46 - 2013-07-03 14:36 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar 2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk 2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos 2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe 2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip 2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe 2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe 2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar 2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar 2013-07-03 13:14 - 2013-07-03 13:06 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar 2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-07-03 12:29 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore 2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking 2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi 2013-07-03 10:33 - 2013-04-17 15:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-03 10:29 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar 2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar 2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar 2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar 2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar 2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar 2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar 2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar 2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar 2013-07-03 10:26 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar 2013-07-03 10:25 - 2013-07-02 08:04 - 00000000 ____D C:\Users\Thomas\Documents\My Games 2013-07-03 10:23 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar 2013-07-03 10:21 - 2013-07-03 09:57 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar 2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk 2013-07-03 09:51 - 2013-07-03 09:44 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar 2013-07-03 09:48 - 2013-07-03 09:44 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar 2013-07-03 08:59 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar 2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar 2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar 2013-07-03 08:59 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar 2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar 2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar 2013-07-03 08:57 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar 2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar 2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar 2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar 2013-07-03 08:55 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar 2013-07-03 08:47 - 2013-07-03 08:10 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar 2013-07-03 08:07 - 2013-07-03 07:57 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar 2013-07-03 07:00 - 2013-07-03 06:38 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar 2013-07-02 22:41 - 2013-07-02 22:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar 2013-07-02 21:42 - 2013-07-01 19:30 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2013-07-02 21:41 - 2013-07-01 17:31 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool 2013-07-02 21:40 - 2013-07-01 19:30 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware 2013-07-02 21:31 - 2013-07-02 21:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar 2013-07-02 19:58 - 2013-07-02 19:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar 2013-07-02 18:42 - 2013-07-02 18:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar 2013-07-02 17:36 - 2013-07-02 17:14 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar 2013-07-02 14:19 - 2013-07-02 13:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar 2013-07-02 09:23 - 2013-07-02 09:01 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar 2013-07-02 08:54 - 2013-07-01 15:56 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller 2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk 2013-07-02 08:03 - 2013-07-02 08:02 - 00010047 _____ C:\Windows\DirectX.log 2013-07-02 08:03 - 2013-07-02 07:59 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-07-02 08:02 - 2013-07-02 08:00 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-07-02 07:02 - 2013-07-02 06:28 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar 2013-07-01 21:49 - 2013-07-01 21:15 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar 2013-07-01 21:05 - 2013-07-01 17:40 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar 2013-07-01 20:06 - 2013-07-01 17:39 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-01 17:09 - 2013-07-01 13:12 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus 2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile 2013-07-01 15:40 - 2013-07-01 13:53 - 00000000 ____D C:\Program Files (x86)\data 2013-07-01 15:39 - 2013-07-01 15:35 - 00000000 ____D C:\Program Files (x86)\Alawar 2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper 2013-07-01 15:36 - 2013-06-30 21:11 - 00000000 ____D C:\ProgramData\AlawarWrapper 2013-07-01 15:15 - 2013-06-30 21:57 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2013-07-01 15:06 - 2013-07-01 14:44 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar 2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe 2013-07-01 13:44 - 2013-06-30 22:30 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2 2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection 2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner 2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe 2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys 2013-07-01 12:30 - 2013-07-01 12:12 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-07-01 12:30 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser 2013-07-01 12:29 - 2013-07-01 12:13 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-07-01 12:28 - 2013-07-01 11:57 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-07-01 12:28 - 2013-05-01 21:55 - 00000000 ____D C:\Windows\system32\appmgmt 2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat 2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-07-01 11:43 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser 2013-07-01 10:43 - 2013-07-01 10:31 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller 2013-07-01 09:38 - 2013-06-30 21:11 - 00000000 ____D C:\Program Files (x86)\Alawar.de 2013-07-01 09:17 - 2013-06-30 19:56 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com 2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox 2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Program Files (x86)\CasualGameBox 2013-07-01 09:14 - 2013-06-29 19:40 - 00000000 ____D C:\Program Files (x86)\OXXOGames 2013-07-01 09:07 - 2013-06-29 14:25 - 00000000 ____D C:\Program Files (x86)\WinZipper 2013-07-01 09:07 - 2013-04-19 20:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\player 2013-07-01 07:38 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale 2013-07-01 07:37 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4 2013-06-30 23:06 - 2013-06-30 20:25 - 00000000 ____D C:\BigFishGamesCache 2013-06-30 22:30 - 2013-07-01 13:41 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk 2013-06-30 22:15 - 2013-06-29 19:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar 2013-06-30 21:52 - 2013-06-30 21:44 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3 (CRACKED) (DIRECT PLAY) [blaze69] 2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper 2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient 2013-06-30 18:08 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC 2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip 2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster 2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield 2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium 2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com 2013-06-29 19:09 - 2013-06-29 17:07 - 00000000 ____D C:\ProgramData\WildTangent 2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat 2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker 2013-06-29 18:09 - 2013-06-29 14:25 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper 2013-06-29 14:43 - 2013-06-29 14:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper 2013-06-29 14:25 - 2011-02-19 23:03 - 00421032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll 2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel 2013-06-28 10:22 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-27 11:01 - 2013-06-27 09:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk 2013-06-26 17:26 - 2013-06-26 17:25 - 00000000 ____D C:\Program Files (x86)\MPU 2012 2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate 2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common 2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC 2013-06-24 19:01 - 2013-04-19 20:36 - 00001088 _____ C:\Windows\KB893803v2.log 2013-06-24 18:53 - 2011-02-19 00:40 - 00773712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll 2013-06-22 17:52 - 2013-06-22 17:51 - 00000000 ____D C:\Users\Thomas\.dia 2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-13 22:12 ==================== End Of Log ============================ MFG Tom |
17.07.2013, 08:29 | #9 |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" CHR Extension: (SEaaroch-NaewTaib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabakelkhlkfbibdngkjmmpnhkjkogch\1 CHR Extension: (OfferMosquito) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.4.1_0 CHR Extension: (SeaariCh-NNewTAib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebbilelhgjmofbjmfaocdglilladgpf\1 CHR Extension: (ssaafe saave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpibhpiooemnakpklemdcbhldoojjjg\1 CHR Extension: (SEEarchh-iNewTab) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb\1 CHR Extension: (suaafEE ssave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakblkgcmhjcpfedglmhojonabkjjemp\1 CHR Extension: (sayfEE osyAve) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdncopncngigainmcdjndjihapgiboef\1 S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] 2013-07-08 19:58 - 2013-07-13 19:47 - 00003238 _____ C:\Windows\System32\Tasks\Dealply Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.07.2013, 11:49 | #10 |
| w32 zero access entfernen ? hier die fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-07-2013 02 Ran by Thomas at 2013-07-17 11:36:53 Run:2 Running from C:\Users\Thomas\Desktop Boot Mode: Normal ============================================== Winsock: Catalog5 entry 000000000001\\LibraryPath was set successfully to %SystemRoot%\system32\NLAapi.dll Winsock: Catalog5-x64 entry 000000000001\\LibraryPath was set successfully to %SystemRoot%\system32\NLAapi.dll C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabakelkhlkfbibdngkjmmpnhkjkogch => Moved successfully. C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk => Moved successfully. C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebbilelhgjmofbjmfaocdglilladgpf => Moved successfully. C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpibhpiooemnakpklemdcbhldoojjjg => Moved successfully. C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb => Moved successfully. C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakblkgcmhjcpfedglmhojonabkjjemp => Moved successfully. C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdncopncngigainmcdjndjihapgiboef => Moved successfully. esgiguard => Service deleted successfully. C:\Windows\System32\Tasks\Dealply => Moved successfully. ==== End of Fixlog ==== Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=9bea8be20ceb8d49bd300502fa76e2aa # engine=14427 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-07-17 10:37:20 # local_time=2013-07-17 12:37:20 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=3592 16777213 100 91 561990 124719936 0 0 # compatibility_mode=5893 16776574 100 94 12071 125687290 0 0 # scanned=153188 # found=6 # cleaned=0 # scan_time=3075 sh=6EC29E5CD2566E483C7974B0FA9C168DA2DF2E26 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\gabakelkhlkfbibdngkjmmpnhkjkogch\1\51d42a8a022473.12063695.js" sh=9C0B3A55BB2CA23A9803ADFC59EF2D32EA367ADE ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\jebbilelhgjmofbjmfaocdglilladgpf\1\51da8df6240b19.32154066.js" sh=F00D179A085E03D0302FEC88942883AD47E0269E ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\klpibhpiooemnakpklemdcbhldoojjjg\1\51da8dcbe8ae69.12509569.js" sh=45D92F5397C134F0786D6D2475E0BB4DA2C1B46A ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb\1\51d9a609f0d003.72095747.js" sh=584A9A5783A2698CD240740AFDBF934F9AD995CB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\pakblkgcmhjcpfedglmhojonabkjjemp\1\51d42a18c76b50.67952827.js" sh=F75871ADACA6B84D19D968EDE7C3C5164CD2F0DA ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\pdncopncngigainmcdjndjihapgiboef\1\51d9a5eecc92c3.64024319.js" Code:
ATTFilter Results of screen317's Security Check version 0.99.69 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Lavasoft Ad-Aware Norton 360 Online Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Adobe Flash Player 11.7.700.224 Adobe Reader XI Mozilla Firefox (22.0) Mozilla Thunderbird (17.0.7) ````````Process Check: objlist.exe by Laurent```````` Norton ccSvcHst.exe Spybot Teatimer.exe is disabled! Ad-Aware Antivirus AdAwareService.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
17.07.2013, 11:57 | #11 |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.07.2013, 12:01 | #12 |
| w32 zero access entfernen ? ein frisches FRST log 1/2 Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-07-2013 02 Ran by Thomas (administrator) on 17-07-2013 12:54:14 Running from C:\Users\Thomas\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe (Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKCU\...\Run: [Personal ID] - C:\COOLSP~1\PERSON~1\PID.EXE [1134008 2009-03-04] (coolspot AG, Düsseldorf) HKCU\...\Run: [SCheck] - "C:\Users\Thomas\AppData\Roaming\SCheck\SCheck.exe" check [36864 2013-04-10] () HKCU\...\Run: [SSync] - "C:\Users\Thomas\AppData\Roaming\SSync\SSync.exe" [36864 2013-04-10] () HKCU\...\Run: [Intermediate] - "C:\Users\Thomas\AppData\Roaming\Intermediate\Intermediate.exe" [36864 2013-04-10] () HKCU\...\Run: [Spybot-S&D Cleaning] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean [3642312 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5015040 2012-02-09] (VIA) HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-02-10] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft) HKLM-x32\...\Run: [Ad-Aware Antivirus] - "C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher" --windows-run [x] ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:tabs HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: No Name - {32E3F0F9-F877-9DFF-AD4E-BFB58068F278} - No File BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation) DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF} FF Extension: DoNotTrackMe - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\donottrackplus@abine.com FF Extension: SeaariCh-NNewTAib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\eeey.i@jgpjjdk.net FF Extension: pricealarm - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM FF Extension: suaafEE ssave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\iuq6dmgwr@uuyyoopqeeue.org FF Extension: sayfEE osyAve - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\sbz2uue@lyyeo.net FF Extension: SEEarchh-iNewTab - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\uoioji5o@ioeeu.co.uk FF Extension: SEaaroch-NaewTaib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\vqfwad@csxlye.net FF Extension: ssaafe saave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\zo1bf@yatkewu-.co.uk FF Extension: ftd - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\ftd@ftd.com.xpi FF Extension: trtv3 - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\trtv3@trtv.com.xpi FF Extension: umauoaqox9uuye - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\umauoaqox9uuye@lyjpayoayu.com.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\ FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\ Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (FTdownloader V4.0) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebnnlollpcjnfpkafhoclljaojgnfok\4.0_0 CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: () - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html CHR Extension: (Norton Identity Protection) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0 CHR Extension: (Cool Smiley Bar for Facebook) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.4_0 CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 Ad-Aware Service; C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited) R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation) S2 SBAMSvc; C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.) S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x] S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x] ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] () R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] () R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation) R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-18] (Symantec Corporation) R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-07-01] (GFI Software) R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation) R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] () R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x] S3 rm; \??\C:\Windows\system32\drivers\rm.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-17 12:45 - 2013-07-17 12:44 - 00891022 _____ C:\Users\Thomas\Desktop\SecurityCheck.exe 2013-07-17 12:44 - 2013-07-17 12:44 - 00891022 _____ C:\Users\Thomas\Downloads\SecurityCheck.exe 2013-07-17 11:43 - 2013-07-17 11:43 - 02347384 _____ (ESET) C:\Users\Thomas\Downloads\esetsmartinstaller_enu.exe 2013-07-17 09:21 - 2013-07-17 09:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\adawarebp 2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt 2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT 2013-07-17 08:47 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe 2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe 2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt 2013-07-17 08:33 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe 2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe 2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt 2013-07-16 15:41 - 2013-07-16 15:46 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3) 2013-07-16 15:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-07-16 15:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-07-16 15:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-07-16 15:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-07-16 15:39 - 2013-07-16 16:02 - 00000000 ____D C:\Qoobox 2013-07-16 15:38 - 2013-07-16 16:01 - 00000000 ____D C:\Windows\erdnt 2013-07-16 15:29 - 2013-07-16 15:24 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe 2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP 2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp 2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe 2013-07-16 13:35 - 2013-07-17 08:56 - 00027809 _____ C:\Users\Thomas\Desktop\FRST.zip 2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt 2013-07-16 13:02 - 2013-07-16 15:32 - 00000000 ____D C:\FRST 2013-07-16 12:59 - 2013-07-16 15:36 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2) 2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe 2013-07-16 12:58 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe 2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip 2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log 2013-07-16 10:59 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe 2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe 2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan 2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe 2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe 2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache 2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe 2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg 2013-07-15 18:18 - 2013-07-16 10:25 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint 2013-07-15 18:04 - 2013-07-17 06:54 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater 2013-07-15 18:04 - 2013-07-17 06:54 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-07-15 18:04 - 2013-05-13 05:52 - 00023624 _____ C:\Windows\Launcher.exe 2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities 2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe 2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft 2013-07-14 18:25 - 2013-07-14 18:42 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile 2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller 2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache 2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip 2013-07-12 03:05 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-12 03:05 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-12 03:05 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-12 03:05 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-12 03:05 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-12 03:05 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-12 03:05 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-12 03:05 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-12 03:05 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-12 03:05 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-12 03:05 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-12 03:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-12 03:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-12 03:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-12 03:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-12 03:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-12 03:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754 2013-07-10 20:40 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-10 20:40 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-10 20:40 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-10 20:40 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-10 20:39 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-10 20:39 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-10 20:39 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-09 17:13 - 2013-07-09 17:14 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360 2013-07-08 20:57 - 2013-07-17 11:33 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner 2013-07-08 20:56 - 2013-07-15 19:40 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip 2013-07-08 12:11 - 2013-07-15 19:43 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP 2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip 2013-07-08 10:50 - 2013-07-09 17:08 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration 2013-07-08 10:50 - 2013-07-09 13:11 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2013-07-08 10:50 - 2013-07-09 13:11 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-07-08 10:49 - 2013-07-09 17:08 - 00000000 ____D C:\Windows\system32\Drivers\N360x64 2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360 2013-07-08 10:39 - 2013-07-08 10:43 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe 2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe 2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe 2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe 2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe 2013-07-08 07:45 - 2013-07-16 08:06 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE 2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe 2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine 2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe 2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos 2013-07-07 21:31 - 2013-07-07 21:32 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe 2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT 2013-07-05 18:24 - 2013-07-08 10:22 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log 2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk 2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby 2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar 2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-07-05 14:35 - 2013-07-05 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar 2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends 2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP 2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP 2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2) 2013-07-04 23:19 - 2013-07-05 00:04 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar 2013-07-04 23:14 - 2013-07-05 08:26 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar 2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar 2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar 2013-07-04 22:27 - 2013-07-05 08:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar 2013-07-04 22:27 - 2013-07-05 00:54 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar 2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar 2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar 2013-07-04 22:26 - 2013-07-05 08:28 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar 2013-07-04 22:26 - 2013-07-05 08:27 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar 2013-07-04 22:26 - 2013-07-05 08:27 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar 2013-07-04 22:26 - 2013-07-05 08:27 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar 2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar 2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar 2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar 2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar 2013-07-04 22:25 - 2013-07-05 08:28 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar 2013-07-04 22:25 - 2013-07-05 08:27 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar 2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar 2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar 2013-07-04 19:15 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar 2013-07-04 19:15 - 2013-07-04 19:52 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar 2013-07-04 19:15 - 2013-07-04 19:51 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar 2013-07-04 19:15 - 2013-07-04 19:49 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar 2013-07-04 19:14 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar 2013-07-04 19:13 - 2013-07-04 19:51 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar 2013-07-04 19:13 - 2013-07-04 19:48 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar 2013-07-04 19:13 - 2013-07-04 19:46 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar 2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar 2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar 2013-07-04 16:31 - 2013-07-04 16:53 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar 2013-07-04 15:31 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar 2013-07-04 15:31 - 2013-07-04 16:03 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar 2013-07-04 15:31 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar 2013-07-04 15:31 - 2013-07-04 15:53 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar 2013-07-04 15:30 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar 2013-07-04 15:29 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar 2013-07-04 12:56 - 2013-07-04 12:58 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar 2013-07-04 12:54 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar 2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe 2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar 2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar 2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar 2013-07-04 11:09 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar 2013-07-04 11:09 - 2013-07-04 15:50 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar 2013-07-04 11:09 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar 2013-07-04 11:09 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar 2013-07-04 11:09 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar 2013-07-04 11:08 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar 2013-07-04 11:08 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar 2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar 2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar 2013-07-04 11:08 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar 2013-07-04 11:08 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar 2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar 2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar 2013-07-04 11:07 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar 2013-07-04 11:07 - 2013-07-04 15:16 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar 2013-07-04 11:07 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar 2013-07-04 11:06 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar 2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar 2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar 2013-07-04 11:06 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar 2013-07-04 11:06 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar 2013-07-04 11:06 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar 2013-07-04 10:52 - 2013-07-04 21:55 - 00000036 _____ C:\Windows\mafosav.INI 2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk 2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever 2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe 2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate 2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip 2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip 2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar 2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED 2013-07-04 07:36 - 2013-07-04 10:57 - 00000000 ____D C:\SMBX 2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk 2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe 2013-07-03 22:24 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar 2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar 2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar 2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar 2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar 2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar 2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar 2013-07-03 22:23 - 2013-07-03 22:54 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar 2013-07-03 22:23 - 2013-07-03 22:52 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar 2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe 2013-07-03 19:46 - 2013-07-03 19:42 - 00062976 _____ C:\Windows\system32\steam_api.dll 2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll 2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip 2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk 2013-07-03 19:20 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar 2013-07-03 19:20 - 2013-07-03 19:22 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar 2013-07-03 19:19 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar 2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar 2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar 2013-07-03 19:19 - 2013-07-03 19:41 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar 2013-07-03 19:08 - 2013-07-03 20:32 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar 2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco 2013-07-03 18:58 - 2013-07-03 18:59 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar 2013-07-03 18:53 - 2013-07-03 19:17 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar 2013-07-03 18:53 - 2013-07-03 19:15 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar 2013-07-03 18:53 - 2013-07-03 18:59 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar 2013-07-03 18:07 - 2013-07-03 19:06 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar 2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM 2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk 2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP 2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom 2013-07-03 16:56 - 2013-07-04 13:27 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d 2013-07-03 16:55 - 2013-07-04 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare 2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar 2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader 2013-07-03 14:36 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar 2013-07-03 14:36 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar 2013-07-03 14:36 - 2013-07-03 14:46 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar 2013-07-03 14:35 - 2013-07-03 15:53 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar 2013-07-03 14:35 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar 2013-07-03 14:35 - 2013-07-03 15:45 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar 2013-07-03 14:35 - 2013-07-03 15:43 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar 2013-07-03 14:35 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar 2013-07-03 14:35 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar 2013-07-03 14:34 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar 2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk 2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos 2013-07-03 14:10 - 2013-07-05 15:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe 2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip 2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe 2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe 2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar 2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar 2013-07-03 13:06 - 2013-07-03 13:14 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar 2013-07-03 12:29 - 2013-07-16 15:35 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet 2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-07-03 12:28 - 2013-07-16 15:35 - 00000000 ____D C:\ProgramData\ManiaPlanet 2013-07-03 12:28 - 2013-07-03 16:31 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet 2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking 2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi 2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk 2013-07-03 09:57 - 2013-07-03 10:21 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar 2013-07-03 09:56 - 2013-07-03 10:29 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar 2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar 2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar 2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar 2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar 2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar 2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar 2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar 2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar 2013-07-03 09:55 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar 2013-07-03 09:55 - 2013-07-03 10:23 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar 2013-07-03 09:44 - 2013-07-03 09:51 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar 2013-07-03 09:44 - 2013-07-03 09:48 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar 2013-07-03 08:10 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar 2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar 2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar 2013-07-03 08:10 - 2013-07-03 08:47 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar 2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar 2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar 2013-07-03 08:09 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar 2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar 2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar 2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar 2013-07-03 08:08 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar 2013-07-03 08:08 - 2013-07-03 08:55 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar 2013-07-03 07:57 - 2013-07-03 08:07 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar 2013-07-03 06:43 - 2013-07-13 19:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-03 06:38 - 2013-07-03 07:00 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar 2013-07-02 22:19 - 2013-07-02 22:41 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar 2013-07-02 21:09 - 2013-07-02 21:31 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar 2013-07-02 19:36 - 2013-07-02 19:58 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar 2013-07-02 18:19 - 2013-07-02 18:42 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar 2013-07-02 17:14 - 2013-07-02 17:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar 2013-07-02 13:57 - 2013-07-02 14:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar 2013-07-02 09:01 - 2013-07-02 09:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar 2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk 2013-07-02 08:04 - 2013-07-03 10:25 - 00000000 ____D C:\Users\Thomas\Documents\My Games 2013-07-02 08:03 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2013-07-02 08:03 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2013-07-02 08:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2013-07-02 08:03 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2013-07-02 08:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2013-07-02 08:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2013-07-02 08:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2013-07-02 08:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2013-07-02 08:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2013-07-02 08:03 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2013-07-02 08:03 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2013-07-02 08:03 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2013-07-02 08:03 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2013-07-02 08:03 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2013-07-02 08:03 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2013-07-02 08:03 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2013-07-02 08:03 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2013-07-02 08:03 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2013-07-02 08:03 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2013-07-02 08:03 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2013-07-02 08:03 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2013-07-02 08:03 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2013-07-02 08:03 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2013-07-02 08:03 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2013-07-02 08:03 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2013-07-02 08:03 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2013-07-02 08:03 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2013-07-02 08:03 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2013-07-02 08:03 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2013-07-02 08:03 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2013-07-02 08:03 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2013-07-02 08:03 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2013-07-02 08:03 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2013-07-02 08:03 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2013-07-02 08:03 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2013-07-02 08:03 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2013-07-02 08:03 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2013-07-02 08:03 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2013-07-02 08:03 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2013-07-02 08:03 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2013-07-02 08:03 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2013-07-02 08:02 - 2013-07-02 08:03 - 00010047 _____ C:\Windows\DirectX.log |
17.07.2013, 12:13 | #13 |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? und denk an meine Frage
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.07.2013, 12:21 | #14 |
| w32 zero access entfernen ? FRST log 2/2 Code:
ATTFilter 000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2013-07-02 08:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2013-07-02 08:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2013-07-02 08:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2013-07-02 08:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2013-07-02 08:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2013-07-02 08:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2013-07-02 08:02 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2013-07-02 08:02 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2013-07-02 08:02 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2013-07-02 08:02 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2013-07-02 08:02 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2013-07-02 08:02 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2013-07-02 08:02 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2013-07-02 08:02 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2013-07-02 08:02 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2013-07-02 08:02 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2013-07-02 08:02 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2013-07-02 08:02 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2013-07-02 08:02 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2013-07-02 08:02 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2013-07-02 08:02 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2013-07-02 08:02 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2013-07-02 08:02 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2013-07-02 08:02 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2013-07-02 08:02 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2013-07-02 08:02 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2013-07-02 08:02 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2013-07-02 08:02 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2013-07-02 08:02 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2013-07-02 08:02 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2013-07-02 08:02 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2013-07-02 08:02 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2013-07-02 08:02 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2013-07-02 08:02 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2013-07-02 08:02 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2013-07-02 08:02 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2013-07-02 08:02 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2013-07-02 08:02 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2013-07-02 08:02 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2013-07-02 08:02 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2013-07-02 08:02 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2013-07-02 08:02 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2013-07-02 08:02 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2013-07-02 08:02 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2013-07-02 08:02 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2013-07-02 08:02 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2013-07-02 08:02 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2013-07-02 08:02 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2013-07-02 08:02 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2013-07-02 08:02 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2013-07-02 08:02 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2013-07-02 08:02 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2013-07-02 08:00 - 2013-07-02 08:02 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-07-02 07:59 - 2013-07-02 08:03 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-07-02 07:20 - 2013-07-08 11:46 - 00000000 ____D C:\Spiele 2013-07-02 06:28 - 2013-07-02 07:02 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar 2013-07-01 21:15 - 2013-07-01 21:49 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar 2013-07-01 19:30 - 2013-07-02 21:42 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2013-07-01 19:30 - 2013-07-02 21:40 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-01 17:40 - 2013-07-01 21:05 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar 2013-07-01 17:39 - 2013-07-01 20:06 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar 2013-07-01 17:31 - 2013-07-02 21:41 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool 2013-07-01 17:31 - 2013-04-11 16:12 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe 2013-07-01 17:31 - 2012-12-10 11:04 - 00356352 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll 2013-07-01 17:31 - 2012-12-10 11:04 - 00081920 _____ (eSellerate Inc.) C:\Windows\eSellerateControl350.dll 2013-07-01 17:31 - 2009-07-23 18:32 - 01122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll 2013-07-01 17:31 - 2009-07-23 18:32 - 00274432 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll 2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile 2013-07-01 15:56 - 2013-07-02 08:54 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller 2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper 2013-07-01 15:35 - 2013-07-01 15:39 - 00000000 ____D C:\Program Files (x86)\Alawar 2013-07-01 14:44 - 2013-07-01 15:06 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar 2013-07-01 13:53 - 2013-07-01 15:40 - 00000000 ____D C:\Program Files (x86)\data 2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe 2013-07-01 13:41 - 2013-06-30 22:30 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk 2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus 2013-07-01 13:15 - 2013-07-08 08:18 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection 2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner 2013-07-01 13:12 - 2013-07-01 17:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus 2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe 2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys 2013-07-01 12:13 - 2013-07-01 12:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-07-01 12:12 - 2013-07-01 12:30 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-07-01 12:12 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat 2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-07-01 11:57 - 2013-07-01 12:28 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-07-01 10:54 - 2013-07-14 19:00 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini 2013-07-01 10:31 - 2013-07-01 10:43 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller 2013-07-01 07:36 - 2013-07-01 07:38 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale 2013-07-01 07:36 - 2013-07-01 07:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4 2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox 2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Program Files (x86)\CasualGameBox 2013-07-01 06:55 - 2013-07-01 12:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser 2013-07-01 06:55 - 2013-07-01 11:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser 2013-06-30 22:30 - 2013-07-01 13:44 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2 2013-06-30 21:57 - 2013-07-01 15:15 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2013-06-30 21:44 - 2013-06-30 21:52 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3 (CRACKED) (DIRECT PLAY) [blaze69] 2013-06-30 21:11 - 2013-07-01 15:36 - 00000000 ____D C:\ProgramData\AlawarWrapper 2013-06-30 21:11 - 2013-07-01 09:38 - 00000000 ____D C:\Program Files (x86)\Alawar.de 2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper 2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient 2013-06-30 20:25 - 2013-06-30 23:06 - 00000000 ____D C:\BigFishGamesCache 2013-06-30 19:56 - 2013-07-01 09:17 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com 2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip 2013-06-29 20:13 - 2008-08-29 09:12 - 00932864 _____ C:\Users\Thomas\Desktop\Xpadder.exe 2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster 2013-06-29 19:53 - 2007-04-16 10:56 - 00043520 _____ (Thrustmaster) C:\Windows\system32\tmffbdrv.dll 2013-06-29 19:53 - 2007-04-16 10:55 - 00156160 _____ (Thrustmaster) C:\Windows\system32\tmffbcpl.dll 2013-06-29 19:53 - 2007-04-16 10:55 - 00135168 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbcpl.dll 2013-06-29 19:53 - 2007-04-16 10:55 - 00034304 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbdrv.dll 2013-06-29 19:53 - 2007-01-20 04:44 - 00208304 _____ (Macrovision Corporation) C:\Windows\system32\isrt.dll 2013-06-29 19:53 - 2006-05-16 15:07 - 00099840 _____ (Macrovision Corporation) C:\Windows\system32\_IsRes.dll 2013-06-29 19:53 - 2005-09-09 11:16 - 00135168 _____ (Guillemot Corporation) C:\Windows\system32\GUStrLib.dll 2013-06-29 19:53 - 2005-01-28 12:49 - 00106496 _____ (Guillemot Corporation) C:\Windows\SysWOW64\GUStrLib.dll 2013-06-29 19:53 - 2003-02-21 05:42 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield 2013-06-29 19:41 - 2013-06-30 22:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar 2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium 2013-06-29 19:40 - 2013-07-01 09:14 - 00000000 ____D C:\Program Files (x86)\OXXOGames 2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com 2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat 2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker 2013-06-29 17:07 - 2013-06-29 19:09 - 00000000 ____D C:\ProgramData\WildTangent 2013-06-29 14:37 - 2013-06-29 14:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper 2013-06-29 14:25 - 2013-07-01 09:07 - 00000000 ____D C:\Program Files (x86)\WinZipper 2013-06-29 14:25 - 2013-06-29 18:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper 2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel 2013-06-27 09:51 - 2013-06-27 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk 2013-06-26 17:25 - 2013-06-26 17:26 - 00000000 ____D C:\Program Files (x86)\MPU 2012 2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects 2013-06-26 15:29 - 2013-06-30 18:08 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate 2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common 2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC 2013-06-26 14:31 - 2013-05-16 14:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll 2013-06-26 14:31 - 2013-05-16 14:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2013-06-22 17:51 - 2013-06-22 17:52 - 00000000 ____D C:\Users\Thomas\.dia 2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia 2013-06-20 11:43 - 2013-07-08 20:23 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt ==================== One Month Modified Files and Folders ======= 2013-07-17 12:44 - 2013-07-17 12:45 - 00891022 _____ C:\Users\Thomas\Desktop\SecurityCheck.exe 2013-07-17 12:44 - 2013-07-17 12:44 - 00891022 _____ C:\Users\Thomas\Downloads\SecurityCheck.exe 2013-07-17 11:56 - 2013-04-17 22:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-17 11:43 - 2013-07-17 11:43 - 02347384 _____ (ESET) C:\Users\Thomas\Downloads\esetsmartinstaller_enu.exe 2013-07-17 11:33 - 2013-07-08 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner 2013-07-17 11:27 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-17 11:27 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-17 11:23 - 2013-04-17 15:23 - 01667706 _____ C:\Windows\WindowsUpdate.log 2013-07-17 11:20 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-17 11:20 - 2009-07-14 06:51 - 00094498 _____ C:\Windows\setupact.log 2013-07-17 09:22 - 2013-07-17 09:21 - 00000000 ____D C:\Users\Thomas\AppData\Local\adawarebp 2013-07-17 09:16 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-17 09:16 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-17 08:56 - 2013-07-16 13:35 - 00027809 _____ C:\Users\Thomas\Desktop\FRST.zip 2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt 2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT 2013-07-17 08:46 - 2013-07-17 08:47 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe 2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe 2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt 2013-07-17 08:34 - 2013-04-17 15:34 - 00000997 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-07-17 08:32 - 2013-07-17 08:33 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe 2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe 2013-07-17 06:54 - 2013-07-15 18:04 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater 2013-07-17 06:54 - 2013-07-15 18:04 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt 2013-07-16 16:02 - 2013-07-16 15:39 - 00000000 ____D C:\Qoobox 2013-07-16 16:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-07-16 16:01 - 2013-07-16 15:38 - 00000000 ____D C:\Windows\erdnt 2013-07-16 15:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-07-16 15:57 - 2013-04-17 15:56 - 01151256 _____ C:\Windows\PFRO.log 2013-07-16 15:46 - 2013-07-16 15:41 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3) 2013-07-16 15:36 - 2013-07-16 12:59 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2) 2013-07-16 15:35 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet 2013-07-16 15:35 - 2013-07-03 12:28 - 00000000 ____D C:\ProgramData\ManiaPlanet 2013-07-16 15:35 - 2013-05-30 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\mucke 2013-07-16 15:32 - 2013-07-16 13:02 - 00000000 ____D C:\FRST 2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP 2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp 2013-07-16 15:26 - 2013-04-19 08:14 - 00000000 ____D C:\Windows\Minidump 2013-07-16 15:24 - 2013-07-16 15:29 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe 2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe 2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt 2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe 2013-07-16 12:59 - 2013-07-16 12:58 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe 2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip 2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log 2013-07-16 10:58 - 2013-07-16 10:59 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe 2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe 2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan 2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe 2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe 2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache 2013-07-16 10:29 - 2013-04-30 17:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps 2013-07-16 10:25 - 2013-07-15 18:18 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint 2013-07-16 08:06 - 2013-07-08 07:45 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE 2013-07-16 07:58 - 2013-05-14 16:06 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe 2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg 2013-07-15 19:57 - 2013-04-17 15:32 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-15 19:43 - 2013-07-08 12:11 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP 2013-07-15 19:40 - 2013-07-08 20:56 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip 2013-07-15 18:16 - 2013-04-19 20:32 - 00003583 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog 2013-07-15 18:14 - 2013-06-01 15:13 - 00000000 ____D C:\Program Files (x86)\Epson Software 2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache 2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities 2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe 2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft 2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft 2013-07-15 17:53 - 2013-04-17 15:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-07-14 19:00 - 2013-07-01 10:54 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini 2013-07-14 18:42 - 2013-07-14 18:25 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile 2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller 2013-07-13 19:49 - 2013-07-03 06:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache 2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip 2013-07-12 03:25 - 2009-07-14 06:45 - 00273288 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-12 03:07 - 2009-07-14 19:58 - 00696878 _____ C:\Windows\system32\perfh007.dat 2013-07-12 03:07 - 2009-07-14 19:58 - 00148174 _____ C:\Windows\system32\perfc007.dat 2013-07-12 03:07 - 2009-07-14 07:13 - 01634596 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-12 03:01 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-11 13:54 - 2013-06-14 10:35 - 00001470 _____ C:\Users\Thomas\Desktop\strom.txt 2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754 2013-07-09 17:14 - 2013-07-09 17:13 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360 2013-07-09 17:08 - 2013-07-08 10:50 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration 2013-07-09 17:08 - 2013-07-08 10:49 - 00000000 ____D C:\Windows\system32\Drivers\N360x64 2013-07-09 13:11 - 2013-07-08 10:50 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2013-07-09 13:11 - 2013-07-08 10:50 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2013-07-08 20:23 - 2013-06-20 11:43 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt 2013-07-08 11:46 - 2013-07-02 07:20 - 00000000 ____D C:\Spiele 2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec 2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360 2013-07-08 10:49 - 2013-04-17 15:51 - 00000000 ____D C:\ProgramData\Norton 2013-07-08 10:43 - 2013-07-08 10:39 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe 2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe 2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe 2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe 2013-07-08 10:22 - 2013-07-05 18:24 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log 2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe 2013-07-08 08:18 - 2013-07-01 13:15 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus 2013-07-08 08:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-07-08 07:57 - 2009-07-14 01:19 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe 2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine 2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe 2013-07-08 07:19 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas 2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos 2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos 2013-07-07 21:32 - 2013-07-07 21:31 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe 2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP 2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP 2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT 2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk 2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby 2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar 2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-07-05 15:55 - 2013-07-03 14:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2013-07-05 15:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-07-05 15:14 - 2013-07-05 14:35 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar 2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends 2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2) 2013-07-05 11:11 - 2013-04-19 20:37 - 01590498 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar 2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar 2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar 2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar 2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar 2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar 2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar 2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar 2013-07-05 08:28 - 2013-07-04 22:26 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar 2013-07-05 08:28 - 2013-07-04 22:25 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar 2013-07-05 08:27 - 2013-07-04 22:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar 2013-07-05 08:27 - 2013-07-04 22:26 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar 2013-07-05 08:27 - 2013-07-04 22:26 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar 2013-07-05 08:27 - 2013-07-04 22:26 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar 2013-07-05 08:27 - 2013-07-04 22:25 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar 2013-07-05 08:26 - 2013-07-04 23:14 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar 2013-07-05 00:54 - 2013-07-04 22:27 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar 2013-07-05 00:04 - 2013-07-04 23:19 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar 2013-07-04 21:55 - 2013-07-04 10:52 - 00000036 _____ C:\Windows\mafosav.INI 2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar 2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar 2013-07-04 19:53 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar 2013-07-04 19:53 - 2013-07-04 19:14 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar 2013-07-04 19:52 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar 2013-07-04 19:51 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar 2013-07-04 19:51 - 2013-07-04 19:13 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar 2013-07-04 19:49 - 2013-07-04 19:15 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar 2013-07-04 19:48 - 2013-07-04 19:13 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar 2013-07-04 19:46 - 2013-07-04 19:13 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar 2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar 2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar 2013-07-04 16:53 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar 2013-07-04 16:04 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar 2013-07-04 16:04 - 2013-07-04 15:30 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar 2013-07-04 16:03 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar 2013-07-04 16:02 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar 2013-07-04 16:02 - 2013-07-04 15:29 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar 2013-07-04 15:53 - 2013-07-04 15:31 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar 2013-07-04 15:51 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar 2013-07-04 15:51 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar 2013-07-04 15:50 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar 2013-07-04 15:47 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar 2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar 2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar 2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar 2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar 2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar 2013-07-04 15:20 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar 2013-07-04 15:19 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar 2013-07-04 15:19 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar 2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar 2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar 2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar 2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar 2013-07-04 15:18 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar 2013-07-04 15:16 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar 2013-07-04 15:15 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar 2013-07-04 15:15 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar 2013-07-04 15:14 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar 2013-07-04 15:14 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar 2013-07-04 15:14 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar 2013-07-04 15:13 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar 2013-07-04 15:13 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar 2013-07-04 13:27 - 2013-07-03 16:56 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d 2013-07-04 12:58 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar 2013-07-04 12:56 - 2013-07-04 12:54 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar 2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe 2013-07-04 10:57 - 2013-07-04 07:36 - 00000000 ____D C:\SMBX 2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk 2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever 2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe 2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate 2013-07-04 09:16 - 2013-07-03 16:55 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare 2013-07-04 08:27 - 2013-01-07 12:00 - 00535008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110.dll 2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip 2013-07-04 08:26 - 2013-05-24 10:11 - 00875472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110.dll 2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip 2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar 2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED 2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk 2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe 2013-07-03 22:57 - 2013-07-03 22:24 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar 2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar 2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar 2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar 2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar 2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar 2013-07-03 22:54 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar 2013-07-03 22:52 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar 2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar 2013-07-03 20:32 - 2013-07-03 19:08 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar 2013-07-03 19:50 - 2013-04-02 11:27 - 00105808 _____ (Valve Corporation) C:\Windows\SysWOW64\steam_api.dll 2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe 2013-07-03 19:43 - 2013-07-03 19:20 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar 2013-07-03 19:43 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar 2013-07-03 19:42 - 2013-07-03 19:46 - 00062976 _____ C:\Windows\system32\steam_api.dll 2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll 2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar 2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar 2013-07-03 19:41 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar 2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip 2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk 2013-07-03 19:22 - 2013-07-03 19:20 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar 2013-07-03 19:17 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar 2013-07-03 19:15 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar 2013-07-03 19:06 - 2013-07-03 18:07 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar 2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco 2013-07-03 18:59 - 2013-07-03 18:58 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar 2013-07-03 18:59 - 2013-07-03 18:53 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar 2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM 2013-07-03 17:35 - 2013-04-17 15:56 - 00060432 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT 2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk 2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP 2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom 2013-07-03 16:31 - 2013-07-03 12:28 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet 2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar 2013-07-03 15:53 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar 2013-07-03 15:47 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar 2013-07-03 15:47 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar 2013-07-03 15:45 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar 2013-07-03 15:43 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar 2013-07-03 15:42 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar 2013-07-03 15:42 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar 2013-07-03 15:41 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar 2013-07-03 15:41 - 2013-07-03 14:34 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar 2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader 2013-07-03 14:46 - 2013-07-03 14:36 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar 2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk 2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive 2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos 2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe 2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip 2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe 2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe 2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar 2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar 2013-07-03 13:14 - 2013-07-03 13:06 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar 2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-07-03 12:29 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore 2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking 2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi 2013-07-03 10:33 - 2013-04-17 15:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-03 10:29 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar 2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar 2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar 2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar 2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar 2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar 2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar 2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar 2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar 2013-07-03 10:26 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar 2013-07-03 10:25 - 2013-07-02 08:04 - 00000000 ____D C:\Users\Thomas\Documents\My Games 2013-07-03 10:23 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar 2013-07-03 10:21 - 2013-07-03 09:57 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar 2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk 2013-07-03 09:51 - 2013-07-03 09:44 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar 2013-07-03 09:48 - 2013-07-03 09:44 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar 2013-07-03 08:59 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar 2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar 2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar 2013-07-03 08:59 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar 2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar 2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar 2013-07-03 08:57 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar 2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar 2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar 2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar 2013-07-03 08:55 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar 2013-07-03 08:47 - 2013-07-03 08:10 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar 2013-07-03 08:07 - 2013-07-03 07:57 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar 2013-07-03 07:00 - 2013-07-03 06:38 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar 2013-07-02 22:41 - 2013-07-02 22:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar 2013-07-02 21:42 - 2013-07-01 19:30 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2013-07-02 21:41 - 2013-07-01 17:31 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool 2013-07-02 21:40 - 2013-07-01 19:30 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware 2013-07-02 21:31 - 2013-07-02 21:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar 2013-07-02 19:58 - 2013-07-02 19:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar 2013-07-02 18:42 - 2013-07-02 18:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar 2013-07-02 17:36 - 2013-07-02 17:14 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar 2013-07-02 14:19 - 2013-07-02 13:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar 2013-07-02 09:23 - 2013-07-02 09:01 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar 2013-07-02 08:54 - 2013-07-01 15:56 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller 2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk 2013-07-02 08:03 - 2013-07-02 08:02 - 00010047 _____ C:\Windows\DirectX.log 2013-07-02 08:03 - 2013-07-02 07:59 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-07-02 08:02 - 2013-07-02 08:00 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-07-02 07:02 - 2013-07-02 06:28 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar 2013-07-01 21:49 - 2013-07-01 21:15 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar 2013-07-01 21:05 - 2013-07-01 17:40 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar 2013-07-01 20:06 - 2013-07-01 17:39 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes 2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-01 17:09 - 2013-07-01 13:12 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus 2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile 2013-07-01 15:40 - 2013-07-01 13:53 - 00000000 ____D C:\Program Files (x86)\data 2013-07-01 15:39 - 2013-07-01 15:35 - 00000000 ____D C:\Program Files (x86)\Alawar 2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper 2013-07-01 15:36 - 2013-06-30 21:11 - 00000000 ____D C:\ProgramData\AlawarWrapper 2013-07-01 15:15 - 2013-06-30 21:57 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2013-07-01 15:06 - 2013-07-01 14:44 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar 2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe 2013-07-01 13:44 - 2013-06-30 22:30 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2 2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics 2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations 2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection 2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner 2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe 2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys 2013-07-01 12:30 - 2013-07-01 12:12 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-07-01 12:30 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser 2013-07-01 12:29 - 2013-07-01 12:13 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-07-01 12:28 - 2013-07-01 11:57 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-07-01 12:28 - 2013-05-01 21:55 - 00000000 ____D C:\Windows\system32\appmgmt 2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat 2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-07-01 11:43 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser 2013-07-01 10:43 - 2013-07-01 10:31 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller 2013-07-01 09:38 - 2013-06-30 21:11 - 00000000 ____D C:\Program Files (x86)\Alawar.de 2013-07-01 09:17 - 2013-06-30 19:56 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com 2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox 2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Program Files (x86)\CasualGameBox 2013-07-01 09:14 - 2013-06-29 19:40 - 00000000 ____D C:\Program Files (x86)\OXXOGames 2013-07-01 09:07 - 2013-06-29 14:25 - 00000000 ____D C:\Program Files (x86)\WinZipper 2013-07-01 09:07 - 2013-04-19 20:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\player 2013-07-01 07:38 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale 2013-07-01 07:37 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4 2013-06-30 23:06 - 2013-06-30 20:25 - 00000000 ____D C:\BigFishGamesCache 2013-06-30 22:30 - 2013-07-01 13:41 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk 2013-06-30 22:15 - 2013-06-29 19:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar 2013-06-30 21:52 - 2013-06-30 21:44 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3 (CRACKED) (DIRECT PLAY) [blaze69] 2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de 2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper 2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient 2013-06-30 18:08 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC 2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip 2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster 2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield 2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium 2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com 2013-06-29 19:09 - 2013-06-29 17:07 - 00000000 ____D C:\ProgramData\WildTangent 2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat 2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker 2013-06-29 18:09 - 2013-06-29 14:25 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper 2013-06-29 14:43 - 2013-06-29 14:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper 2013-06-29 14:25 - 2011-02-19 23:03 - 00421032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll 2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel 2013-06-28 10:22 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-27 11:01 - 2013-06-27 09:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk 2013-06-26 17:26 - 2013-06-26 17:25 - 00000000 ____D C:\Program Files (x86)\MPU 2012 2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck 2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate 2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common 2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC 2013-06-24 19:01 - 2013-04-19 20:36 - 00001088 _____ C:\Windows\KB893803v2.log 2013-06-24 18:53 - 2011-02-19 00:40 - 00773712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll 2013-06-22 17:52 - 2013-06-22 17:51 - 00000000 ____D C:\Users\Thomas\.dia 2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-13 22:12 ==================== End Of Log ============================ hey , keine Probs mehr im Moment ist es geschafft ?? |
17.07.2013, 12:23 | #15 |
/// the machine /// TB-Ausbilder | w32 zero access entfernen ? jup Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu w32 zero access entfernen ? |
anderen, angeblich, bluescreen, computer, comuter, direkt, entfernen, explorer, firefox, infiziert., kaspersky, logfile, neu, nichts, norton, norton power eraser, power, programme, remover, scan, scannen, scanner, sophos, startet, w32, windows, windows explorer, öffnen |