|
Log-Analyse und Auswertung: Qv06 enfternt oder doch nicht?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
21.08.2013, 14:54 | #1 |
| Qv06 enfternt oder doch nicht? Wünsche einen guten Nachmittag, mir ist vor ein paar Minuten aufgefallen, dass sich die Startseite von Chrome auf diese Qv06 Seite geändert hat. Hab mir zuerst nicht viel dabei gedacht und in den Chrome Einstellungen, die Suchmaschine entfernt und meine Startseite neu eingegeben. Hat leider nichts geholfen und nach kleiner Internet Recherche, ist mir klar geworden das es ein Trojaner/Virus ist. Hab das ganze dann doch erstmal auf eigene Faust versucht und den Adwcleaner installiert und ausgeführt. Was mir etwas komisch erschienen ist, dass der Adwcleaner von Antivir als Virus/Trojaner eingestuft wird und ich ihn erst es als Ausnahme einstellen musste. Da ich mit dem LogFile nicht sehr viel Anfangen kann, bin ich auf Empfehlung eines Bekannten hier gelandet. Ich hoffe es war richtig einen neuen Thread aufzumachen, da dieses Problem anscheinend mehrere haben. Aber jeder Fall ist ja immer etwas anders. Ich wäre dankbar für jede Hilfe ob das Ding nun weg ist oder nicht. Zumindest ist es nicht mehr als Startseite. MFG |
21.08.2013, 16:20 | #2 |
/// the machine /// TB-Ausbilder | Qv06 enfternt oder doch nicht? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
21.08.2013, 16:31 | #3 |
| Qv06 enfternt oder doch nicht? Vielen Dank für die zügige Antwort.
__________________Ich hab nun beide Logdatein erstellt. Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-08-2013 Ran by Christain at 2013-08-21 17:26:55 Running from C:\Users\Christain\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 3DMark Demo (x32) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe AIR (x32 Version: 3.7.0.2090) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Android SDK Tools (x32 Version: 1.16) Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.10.1.0) Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.1.000) ASRock App Charger v1.0.5 ASRock InstantBoot v1.29 (x32) ASRock SmartConnect v1.0.6 ASRock XFast RAM v2.0.9 ASUS GPU Tweak (x32 Version: 2.2.9.9) Audiograbber 1.83 SE (x32 Version: 1.83 SE) Avira Free Antivirus (x32 Version: 13.0.0.3885) Battle.net (x32) Battlefield 3™ (x32 Version: 1.4.0.0) Battlelog Web Plugins (x32 Version: 2.1.7) BioShock 2 (x32 Version: 1.0.0005.131) Broadcom NetLink Controller (Version: 14.8.5.1) Call of Duty: Black Ops - Multiplayer (x32) Core Temp 1.0 RC3 (Version: 1.0) CPUID CPU-Z 1.60 Crysis (x32) Crysis 2 Maximum Edition (x32) D3DX10 (x32 Version: 15.4.2368.0902) Darksiders II (x32) DarksidersInstaller (x32 Version: 1.00.1000) Dead Space™ 3 (x32 Version: 1.0.0.0) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32) devolo dLAN Cockpit (x32 Version: 3.0.0.0) Diablo III (x32) dLAN Cockpit (x32 Version: 3 (23.12.2010)) dLAN Cockpit (x32 Version: 3.23.12) Dota 2 (x32) Dragon Age: Origins - Ultimate Edition (x32) Dropbox (HKCU Version: 2.0.22) Dungeon Defenders (x32) eReg (x32 Version: 1.20.138.34) ESN Sonar (x32 Version: 0.70.4) Fraps (x32) Futuremark SystemInfo (x32 Version: 4.17.0) Google Chrome (HKCU Version: 28.0.1500.95) Google Talk Plugin (x32 Version: 4.4.2.14502) Google Update Helper (x32 Version: 1.3.23.0) Guild Wars 2 (x32) Hauppauge WinTV 7 (x32 Version: v7.0.31050 (CD 2.7)) Heaven DX11 Benchmark version 3.0 (Version: 3.0) Intel(R) Control Center (x32 Version: 1.2.1.1008) Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.36354) Intel(R) Management Engine Components (x32 Version: 8.1.0.1281) Intel(R) Processor Graphics (x32 Version: 9.17.10.2932) Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149) Intel(R) Smart Connect Technology 2.0 x64 (Version: 2.0.1083.0) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220) Intel® Trusted Connect Service Client (Version: 1.24.738.1) Java 7 Update 25 (x32 Version: 7.0.250) Java 7 Update 7 (64-bit) (Version: 7.0.70) Java Auto Updater (x32 Version: 2.1.9.5) Just Cause 2 (x32) Logitech G35 (Version: 1.1.178) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mass Effect (x32 Version: 1.2.20608.0) Mass Effect 2 (x32 Version: 1.02) Mass Effect™ 3 (x32 Version: 1.05.0.0) Max Payne 3 (x32) Microsoft .NET Compact Framework 3.5 (x32 Version: 3.5.7283) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft .NET Framework 4 Extended (Version: 4.0.30320) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0) Microsoft Office 2010 Service Pack 1 (SP1) (x32) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0) Mozilla Firefox 16.0.2 (x86 de) (x32 Version: 16.0.2) Mozilla Maintenance Service (x32 Version: 16.0.2) MSVCRT (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Music Manager (HKCU) NVIDIA 3D Vision Controller-Treiber 326.80 (Version: 326.80) NVIDIA 3D Vision Treiber 326.80 (Version: 326.80) NVIDIA FaceWorks: Real-time Performance Capture Demo (x32 Version: 1.0) NVIDIA GeForce Experience 1.6 (Version: 1.6) NVIDIA Grafiktreiber 326.80 (Version: 326.80) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.133.889) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2680) NVIDIA Systemsteuerung 326.80 (Version: 326.80) NVIDIA Update 7.2.17 (Version: 7.2.17) NVIDIA Update Components (Version: 7.2.17) NVIDIA Virtual Audio 1.2.2 (Version: 1.2.2) OpenOffice.org 3.3 (x32 Version: 3.3.9567) Orcs Must Die! 2 (x32) Origin (x32 Version: 8.5.2.23) Pingzapper version 1.1.4 (x32 Version: 1.1.4) Plants vs. Zombies: Game of the Year (x32) PunkBuster Services (x32 Version: 0.986) Razer Game Booster (x32 Version: 3.7) Razer Synapse 2.0 (x32 Version: 1.12.8) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6559) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0) Resident Evil 5 (x32) RESIDENT EVIL 6 / BIOHAZARD 6 (x32) Rockstar Games Social Club (x32 Version: 1.1.0.6) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0) Skype™ 6.6 (x32 Version: 6.6.106) StarCraft II (x32) Steam (x32 Version: 1.0.0.0) Super Meat Boy (x32) Team Fortress 2 (x32) TeamSpeak 3 Client (Version: 3.0.11.1) The Elder Scrolls V: Skyrim (x32) The Witcher 2: Assassins of Kings Enhanced Edition (x32) Überwachungstool für die Intel® Turbo-Boost-Technik 2.6 (Version: 2.6.2.0) Unigine Valley Benchmark version 1.0 (x32 Version: 1.0) Unlocker 1.9.1-x64 (Version: 1.9.1) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft Office 2010 (KB2494150) (x32) Update for Microsoft Office 2010 (KB2553065) (x32) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2566458) (x32) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32) Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32) Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32) Update for Zip Opener (HKCU) us Mod Manager (Version: 0.45.5) Vimicro USB2.0 UVC PC Camera (x32 Version: 2009.03.18) VLC media player 2.0.1 (x32 Version: 2.0.1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) XFastUSB (x32 Version: 3.02.31) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {02D37614-1F20-4C59-B070-6A0DDD36375D} - System32\Tasks\{5384CA2A-4136-4B27-8AFD-CB82363E817E} => c:\program files (x86)\mozilla firefox\firefox.exe [2012-10-27] (Mozilla Corporation) Task: {1A31F339-D597-4736-82A5-9B054B46EBA9} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {2AFECC5D-4E50-455C-AAB9-F59DD02469E9} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe No File Task: {2F735289-EB67-4BC4-A2B1-5F46462D94AC} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {37F5375F-9C07-49DC-8A17-E9C44EC85268} - \DealPly No Task File Task: {3B26DA98-3C11-48FD-9198-A8CB87319298} - \DSite No Task File Task: {43646FA1-E9DE-4B8B-861D-E156FD586CDB} - System32\Tasks\{7AFC2EC2-81D3-45A3-B34B-C81CE9677F9E} => c:\program files (x86)\mozilla firefox\firefox.exe [2012-10-27] (Mozilla Corporation) Task: {43E9B62E-069C-47ED-8928-D35C511405A9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000Core => C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-11] (Google Inc.) Task: {50449C35-A964-4B47-900E-D1231477FE69} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000UA => C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-11] (Google Inc.) Task: {562B1F19-E09C-472D-B4C0-F72D90432AC9} - System32\Tasks\{A8649D11-5F02-4324-A28A-85A1BA62BC66} => c:\program files (x86)\mozilla firefox\firefox.exe [2012-10-27] (Mozilla Corporation) Task: {5AA3DFA8-1B3C-4547-8780-A66DFECB41CB} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation) Task: {66932D58-87FE-4E75-BB78-B5676F99DB72} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {6734A223-2E53-4AE5-B721-3D897C0F435B} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation) Task: {6FC62B22-FEF8-411D-B5A9-74D69D17DF13} - \DealPlyUpdate No Task File Task: {7C00BD36-73C4-4C4D-8D11-D8AB0FFE9466} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2013-06-05] () Task: {82D99EE2-CA41-4C8B-A077-04A6B00619BA} - System32\Tasks\Core Temp Autostart Christain => C:\Program Files\Core Temp\Core Temp.exe [2012-01-25] () Task: {82EF6BFE-98E8-4FDA-8509-51C92585CB65} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe No File Task: {9DE6C859-C068-4B89-BAF0-E3141CAAC346} - System32\Tasks\{8A8C1470-FB45-41B7-946F-A60850964FF7} => c:\program files (x86)\mozilla firefox\firefox.exe [2012-10-27] (Mozilla Corporation) Task: {ACCE3189-358F-4011-8D84-30BC60146A66} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe No File Task: {EBAA7E52-44A1-4495-B952-1636C0A6BA1F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated) Task: {F9626125-83D7-4D9C-AA24-6643C9DA7E83} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated) Task: {FFF01F34-CDD5-4782-B05D-EA02F0E662B7} - System32\Tasks\Open Hardware Monitor\Startup => C:\Users\Christain\PC overclock\OpenHardwareMonitor\OpenHardwareMonitor.exe [2013-02-13] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000Core.job => C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000UA.job => C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Intel(R) HD Graphics 4000 Description: Intel(R) HD Graphics 4000 Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318} Manufacturer: Intel Corporation Service: igfx Problem: : This device cannot find enough free resources that it can use. If you want to use this device, you will need to disable one of the other devices on this system. (Code12) Resolution: Two devices have been assigned the same input/output (I/O) ports, the same interrupt, or the same Direct Memory Access channel (either by the BIOS, the operating system, or a combination of the two). This error message can also appear if the BIOS did not allocate enough resources to the device (for example, if a universal serial bus (USB) controller does not get an interrupt from the BIOS because of a corrupt Multiprocessor System (MPS) table). You can use Device Manager to determine where the conflict is and disable the conflicting device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (08/21/2013 04:08:09 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Agent.exe, Version: 1.7.2.2045, Zeitstempel: 0x51e5fff2 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db9710 Ausnahmecode: 0xc0000374 Fehleroffset: 0x000ce753 ID des fehlerhaften Prozesses: 0xf24 Startzeit der fehlerhaften Anwendung: 0xAgent.exe0 Pfad der fehlerhaften Anwendung: Agent.exe1 Pfad des fehlerhaften Moduls: Agent.exe2 Berichtskennung: Agent.exe3 Error: (08/21/2013 03:27:28 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.6.0.1030, Zeitstempel: 0x5042b0f0 Name des fehlerhaften Moduls: ISDI2.dll, Version: 11.6.0.1030, Zeitstempel: 0x5042b0b6 Ausnahmecode: 0xc0000417 Fehleroffset: 0x0004d11f ID des fehlerhaften Prozesses: 0x850 Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0 Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1 Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2 Berichtskennung: IAStorDataMgrSvc.exe3 Error: (08/21/2013 03:25:25 PM) (Source: ISCT Agent) (User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 02:45:17 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.6.0.1030, Zeitstempel: 0x5042b0f0 Name des fehlerhaften Moduls: ISDI2.dll, Version: 11.6.0.1030, Zeitstempel: 0x5042b0b6 Ausnahmecode: 0xc0000417 Fehleroffset: 0x0004d11f ID des fehlerhaften Prozesses: 0xb2c Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0 Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1 Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2 Berichtskennung: IAStorDataMgrSvc.exe3 Error: (08/21/2013 02:44:29 PM) (Source: ISCT Agent) (User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 11:33:19 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.6.0.1030, Zeitstempel: 0x5042b0f0 Name des fehlerhaften Moduls: ISDI2.dll, Version: 11.6.0.1030, Zeitstempel: 0x5042b0b6 Ausnahmecode: 0xc0000417 Fehleroffset: 0x0004d11f ID des fehlerhaften Prozesses: 0xf20 Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0 Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1 Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2 Berichtskennung: IAStorDataMgrSvc.exe3 Error: (08/21/2013 11:32:10 AM) (Source: ISCT Agent) (User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 11:23:33 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.6.0.1030, Zeitstempel: 0x5042b0f0 Name des fehlerhaften Moduls: ISDI2.dll, Version: 11.6.0.1030, Zeitstempel: 0x5042b0b6 Ausnahmecode: 0xc0000417 Fehleroffset: 0x0004d11f ID des fehlerhaften Prozesses: 0x9f4 Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0 Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1 Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2 Berichtskennung: IAStorDataMgrSvc.exe3 Error: (08/21/2013 11:22:50 AM) (Source: ISCT Agent) (User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 11:15:44 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.6.0.1030, Zeitstempel: 0x5042b0f0 Name des fehlerhaften Moduls: ISDI2.dll, Version: 11.6.0.1030, Zeitstempel: 0x5042b0b6 Ausnahmecode: 0xc0000417 Fehleroffset: 0x0004d11f ID des fehlerhaften Prozesses: 0xae8 Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0 Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1 Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2 Berichtskennung: IAStorDataMgrSvc.exe3 System errors: ============= Error: (08/21/2013 03:28:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/21/2013 03:27:37 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/21/2013 03:27:19 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1053 Error: (08/21/2013 03:27:19 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1053 Error: (08/21/2013 03:27:19 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerkidentitäts-Manager" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/21/2013 03:27:19 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Peernetzwerkidentitäts-Manager erreicht. Error: (08/21/2013 03:26:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinRing0_1_2_0" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/21/2013 02:45:34 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (08/21/2013 02:44:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Wsys Service" wurde nicht richtig gestartet. Error: (08/21/2013 11:33:29 AM) (Source: Service Control Manager) (User: ) Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office Sessions: ========================= Error: (08/21/2013 04:08:09 PM) (Source: Application Error)(User: ) Description: Agent.exe1.7.2.204551e5fff2ntdll.dll6.1.7601.1820551db9710c0000374000ce753f2401ce9e77dce6299aC:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exeC:\Windows\SysWOW64\ntdll.dll1b78bab2-0a6b-11e3-a73a-bc5ff485e7d7 Error: (08/21/2013 03:27:28 PM) (Source: Application Error)(User: ) Description: IAStorDataMgrSvc.exe11.6.0.10305042b0f0ISDI2.dll11.6.0.10305042b0b6c00004170004d11f85001ce9e71fb54983dC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll6c725ded-0a65-11e3-a73a-bc5ff485e7d7 Error: (08/21/2013 03:25:25 PM) (Source: ISCT Agent)(User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 02:45:17 PM) (Source: Application Error)(User: ) Description: IAStorDataMgrSvc.exe11.6.0.10305042b0f0ISDI2.dll11.6.0.10305042b0b6c00004170004d11fb2c01ce9e6c2dafe550C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll879993a0-0a5f-11e3-862c-bc5ff485e7d7 Error: (08/21/2013 02:44:29 PM) (Source: ISCT Agent)(User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 11:33:19 AM) (Source: Application Error)(User: ) Description: IAStorDataMgrSvc.exe11.6.0.10305042b0f0ISDI2.dll11.6.0.10305042b0b6c00004170004d11ff2001ce9e515a201060C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI2.dllb6760bf0-0a44-11e3-9478-bc5ff485e7d7 Error: (08/21/2013 11:32:10 AM) (Source: ISCT Agent)(User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 11:23:33 AM) (Source: Application Error)(User: ) Description: IAStorDataMgrSvc.exe11.6.0.10305042b0f0ISDI2.dll11.6.0.10305042b0b6c00004170004d11f9f401ce9e50080201f2C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll58f9d42a-0a43-11e3-a316-bc5ff485e7d7 Error: (08/21/2013 11:22:50 AM) (Source: ISCT Agent)(User: ) Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2 Error: (08/21/2013 11:15:44 AM) (Source: Application Error)(User: ) Description: IAStorDataMgrSvc.exe11.6.0.10305042b0f0ISDI2.dll11.6.0.10305042b0b6c00004170004d11fae801ce9e4ed7e5b6dcC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll4176fb20-0a42-11e3-b6a4-bc5ff485e7d7 CodeIntegrity Errors: =================================== Date: 2012-04-22 00:42:05.990 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\ATI Technologies\Multimedia\AMDMFTDecoder_64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-04-22 00:40:28.203 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\ATI Technologies\Multimedia\AMDMFTDecoder_64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-04-11 01:37:15.541 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\CHRIST~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-04-11 01:37:15.512 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\CHRIST~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-04-11 01:37:15.283 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-04-11 01:37:15.254 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 24% Total physical RAM: 12173.73 MB Available physical RAM: 9227.16 MB Total Pagefile: 24345.64 MB Available Pagefile: 20977.58 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:596.07 GB) (Free:503.79 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:931.51 GB) (Free:552.86 GB) NTFS ==================== MBR & Partition Table ================== ==================== End Of Log ============================ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 Ran by Christain (administrator) on 21-08-2013 17:26:09 Running from C:\Users\Christain\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe () C:\Windows\SysWOW64\ASGT.exe (devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe () C:\Users\Christain\PC overclock\OpenHardwareMonitor\OpenHardwareMonitor.exe (Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Google Inc.) C:\Users\Christain\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Dropbox, Inc.) C:\Users\Christain\AppData\Roaming\Dropbox\bin\Dropbox.exe (Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe (Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Program Files (x86)\Pingzapper\PZService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.beta.2096\Agent.exe (Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.3563\Battle.net.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation) HKCU\...\Run: [Google Update] - C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-11] (Google Inc.) HKCU\...\Run: [zASRockInstantBoot] - [x] HKCU\...\Run: [MusicManager] - C:\Users\Christain\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7345664 2013-06-21] (Google Inc.) HKCU\...\Policies\system: [DisableLockWorkstation] 0 MountPoints2: E - E:\ASRSetup.exe MountPoints2: {458d0a12-6ab0-11e1-a10b-806e6f6e6963} - E:\Run.exe MountPoints2: {78590d4e-757d-11e2-9b4f-806e6f6e6963} - E:\ASRSetup.exe HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [606056 2013-07-23] (Razer Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation) HKLM-x32\...\Run: [XFastUSB] - C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-02-13] (FNet Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll [168616 2013-08-18] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-18] (NVIDIA Corporation) Startup: C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Christain\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\G35 konfigurieren.lnk ShortcutTarget: G35 konfigurieren.lnk -> C:\Program Files (x86)\Logitech\G35\G35.exe (Logitech(c)) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD6400AAKS-22A7B2_WD-WCASY903821138211&ts=1377088359 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD6400AAKS-22A7B2_WD-WCASY903821138211&ts=1377088359 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: DealPly Shopping - {9cf699ca-2174-4ed8-bec1-ba82095edce0} - C:\Program Files (x86)\DealPly\DealPlyIE.dll No File BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: DealPly Shopping - C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default\Extensions\{e53a26f5-7199-4a5b-86f5-d2e86854b979} FF Extension: jid1-qQSMEVsYTOjgYA - C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Talk Plugin) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Docs) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: (Google Drive) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0 CHR Extension: (YouTube) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (Gmail) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Christain\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () S3 DAUpdaterSvc; D:\Programme\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-04-25] (BioWare) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [137336 2013-02-17] (Futuremark Corporation) R2 HauppaugeTVServer; C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe [577536 2013-01-25] (Hauppauge Computer Works) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation) R2 PingzapperSvc; C:\Program Files (x86)\Pingzapper\PZService.exe [679424 2012-06-11] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-08-12] () S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe /svc [x] S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe /medsvc [x] ==================== Drivers (Whitelisted) ==================== R3 AmdTools64; C:\Windows\System32\DRIVERS\AmdTools64.sys [47160 2008-04-28] (AMD, Inc.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology) R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG) R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID) S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-06-09] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-02-13] (FNet Co., Ltd.) S3 gdrv; C:\Windows\gdrv.sys [25640 2013-07-06] (Windows (R) Server 2003 DDK provider) S3 gdrv; C:\Windows\gdrv.sys [25640 2013-07-06] (Windows (R) Server 2003 DDK provider) R3 HCW3x64; C:\Windows\System32\DRIVERS\HCW71364.sys [1501200 2012-01-31] (Hauppauge Computer Works, Inc.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation) R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] () R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] () R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] () S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R3 Lycosa; C:\Windows\System32\drivers\Lycosa.sys [20352 2009-09-30] (Razer USA Ltd.) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-07-18] (NVIDIA Corporation) R3 rzp1endpt; C:\Windows\System32\DRIVERS\rzp1endpt.sys [39096 2013-07-10] (Razer Inc) R3 rzvmouse; C:\Windows\System32\DRIVERS\rzvmouse.sys [30904 2013-07-10] (Razer Inc) R3 VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [199296 2010-01-12] (Vimicro Corporation) R3 vvftUVC; C:\Windows\System32\drivers\vvftUVC.sys [303616 2008-07-01] (Vimicro Corporation) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-08-21] () S3 ALSysIO; \??\C:\Users\CHRIST~1\AppData\Local\Temp\ALSysIO64.sys [x] S3 cpuz130; \??\C:\Users\CHRIST~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x] S3 OSFMount; \??\C:\Program Files\OSFMount\OSFMount.sys [x] R3 WinRing0_1_2_0; \??\C:\Users\Christain\AppData\Local\Temp\tmp60D4.tmp [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\FRST 2013-08-21 16:15 - 2013-08-21 16:15 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (2).txt 2013-08-21 15:54 - 2013-08-21 15:54 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (1).txt 2013-08-21 15:50 - 2013-08-21 15:50 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0].txt 2013-08-21 15:26 - 2013-08-21 15:26 - 00012707 _____ C:\Users\Christain\Desktop\AdwCleaner[S0].txt 2013-08-21 15:25 - 2013-08-21 15:25 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-08-21 15:25 - 2013-08-21 15:25 - 00000150 _____ C:\autoupdate.log 2013-08-21 15:25 - 2013-08-21 15:25 - 00000056 _____ C:\Windows\setupact.log 2013-08-21 15:25 - 2013-08-21 15:25 - 00000000 _____ C:\Windows\setuperr.log 2013-08-21 15:24 - 2013-08-21 15:24 - 00000334 _____ C:\Windows\PFRO.log 2013-08-21 15:22 - 2013-08-21 15:22 - 00975858 _____ C:\Users\Christain\Desktop\adwcleaner.exe 2013-08-21 15:13 - 2013-08-21 15:24 - 00000000 ____D C:\AdwCleaner 2013-08-21 14:47 - 2013-08-21 14:49 - 00000000 ____D C:\Program Files\ASRock 2013-08-21 14:46 - 2013-08-21 14:46 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (2).exe 2013-08-21 14:35 - 2013-08-21 14:35 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (1).exe 2013-08-21 14:32 - 2013-08-21 16:37 - 00000912 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-21 14:32 - 2013-08-21 15:25 - 00000908 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job 2013-08-21 14:32 - 2013-08-21 14:32 - 00003908 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-21 14:32 - 2013-08-21 14:32 - 00003656 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore 2013-08-21 11:28 - 2013-08-21 11:28 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-08-21 11:26 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-21 11:26 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-21 11:26 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-21 11:21 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-21 11:21 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00458528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00388384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-21 11:21 - 2013-07-18 19:15 - 00039712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-08-21 11:21 - 2013-07-18 19:15 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-08-21 11:21 - 2013-07-18 19:15 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-08-21 11:21 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2013-08-21 11:21 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2013-08-21 11:21 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2013-08-19 12:54 - 2013-08-19 12:54 - 04429440 _____ (Piriform Ltd) C:\Users\Christain\Downloads\ccsetup404.exe 2013-08-18 14:58 - 2013-08-18 14:58 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-08-17 21:25 - 2013-08-17 21:25 - 00000000 ____D C:\Users\Christain\Neuer Ordner 2013-08-15 16:21 - 2013-08-15 16:28 - 100751136 _____ C:\Users\Christain\Downloads\gapps-jb-20130812-signed.zip 2013-08-15 10:03 - 2013-08-15 10:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzp1endpt_01009.Wdf 2013-08-14 20:41 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 20:41 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 20:41 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 20:41 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 20:41 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 20:41 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 20:41 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 20:41 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 20:41 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 20:41 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 20:41 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 20:41 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 20:37 - 2013-08-14 20:38 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 17:58 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 17:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 17:57 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 17:57 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 17:57 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 17:57 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 17:57 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 17:57 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 17:57 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 17:57 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 17:57 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 17:57 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 17:57 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 17:57 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 17:57 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 17:57 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 17:57 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 17:57 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 17:57 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 17:57 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 17:57 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-08 09:34 - 2013-08-08 09:34 - 00000000 ____D C:\NvidiaLogging 2013-07-29 09:44 - 2013-08-21 17:23 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Battle.net 2013-07-29 09:44 - 2013-08-13 20:41 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Blizzard Entertainment 2013-07-29 09:43 - 2013-07-29 09:43 - 04826568 _____ (Blizzard Entertainment) C:\Users\Christain\Downloads\Battle.net-Beta-Setup-deDE.exe 2013-07-28 15:22 - 2013-07-28 15:22 - 00000000 ____D C:\Users\Christain\Downloads\skse_1_06_16 2013-07-28 15:21 - 2013-07-28 15:21 - 00471625 _____ C:\Users\Christain\Downloads\skse_1_06_16.7z 2013-07-28 13:00 - 2013-07-28 13:00 - 00000000 ____D C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g 2013-07-28 12:55 - 2013-07-28 12:55 - 01779361 _____ C:\Users\Christain\Downloads\enbseries_skyrim_v13713.zip 2013-07-28 12:53 - 2013-07-28 12:53 - 00662474 _____ C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g.7z 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\Christain\Documents\Nexus Mod Manager 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Black_Tree_Gaming 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2013-07-28 12:44 - 2013-07-28 12:44 - 04120736 _____ (Black Tree Gaming ) C:\Users\Christain\Downloads\Nexus Mod Manager-0.45.5.exe 2013-07-27 14:43 - 2013-07-27 14:44 - 00000000 ____D C:\Users\Christain\Downloads\winmd5free 2013-07-27 14:37 - 2013-07-27 14:37 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2013-07-27 14:35 - 2013-07-27 14:40 - 00000000 ____D C:\Users\Christain\.android 2013-07-27 14:32 - 2013-07-27 14:32 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2013-07-27 14:31 - 2013-07-27 14:37 - 00000000 ____D C:\Program Files (x86)\Android SDK 2013-07-27 14:29 - 2013-07-27 14:30 - 93502726 _____ (Google Inc.) C:\Users\Christain\Downloads\installer_r22.0.4-windows.exe 2013-07-27 14:28 - 2013-07-27 14:28 - 00268376 _____ C:\Users\Christain\Downloads\winmd5free.zip 2013-07-27 14:27 - 2013-07-27 14:31 - 372285128 _____ C:\Users\Christain\Downloads\occam-jwr66v-factory-08d2b697.tgz 2013-07-26 22:20 - 2013-07-26 22:20 - 00000000 ____D C:\Users\Christain\Documents\Square Enix 2013-07-25 05:38 - 2013-07-25 05:38 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\Christain\Documents\Robot Entertainment 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Robot Entertainment ==================== One Month Modified Files and Folders ======= 2013-08-21 17:25 - 2013-08-21 17:25 - 01576164 _____ (Farbar) C:\Users\Christain\Desktop\FRST64.exe 2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\FRST 2013-08-21 17:23 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Battle.net 2013-08-21 16:50 - 2012-11-11 01:14 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000UA.job 2013-08-21 16:40 - 2012-10-12 22:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-21 16:37 - 2013-08-21 14:32 - 00000912 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-21 16:15 - 2013-08-21 16:15 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (2).txt 2013-08-21 16:08 - 2013-02-13 04:38 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\CrashDumps 2013-08-21 15:54 - 2013-08-21 15:54 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (1).txt 2013-08-21 15:50 - 2013-08-21 15:50 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0].txt 2013-08-21 15:33 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-21 15:33 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-21 15:26 - 2013-08-21 15:26 - 00012707 _____ C:\Users\Christain\Desktop\AdwCleaner[S0].txt 2013-08-21 15:25 - 2013-08-21 15:25 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-08-21 15:25 - 2013-08-21 15:25 - 00000150 _____ C:\autoupdate.log 2013-08-21 15:25 - 2013-08-21 15:25 - 00000056 _____ C:\Windows\setupact.log 2013-08-21 15:25 - 2013-08-21 15:25 - 00000000 _____ C:\Windows\setuperr.log 2013-08-21 15:25 - 2013-08-21 14:32 - 00000908 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job 2013-08-21 15:25 - 2013-03-29 23:08 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys 2013-08-21 15:25 - 2013-02-13 03:59 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2013-08-21 15:25 - 2012-09-01 16:52 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Dropbox 2013-08-21 15:25 - 2012-04-09 17:44 - 00000000 ____D C:\ProgramData\NVIDIA 2013-08-21 15:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-21 15:24 - 2013-08-21 15:24 - 00000334 _____ C:\Windows\PFRO.log 2013-08-21 15:24 - 2013-08-21 15:13 - 00000000 ____D C:\AdwCleaner 2013-08-21 15:24 - 2012-11-11 01:14 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-08-21 15:24 - 2012-03-10 15:06 - 00001003 _____ C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-21 15:24 - 2012-03-10 14:57 - 01164415 _____ C:\Windows\WindowsUpdate.log 2013-08-21 15:22 - 2013-08-21 15:22 - 00975858 _____ C:\Users\Christain\Desktop\adwcleaner.exe 2013-08-21 14:50 - 2012-03-10 16:21 - 00000000 ____D C:\Users\Christain\Desktop Icons 2013-08-21 14:49 - 2013-08-21 14:47 - 00000000 ____D C:\Program Files\ASRock 2013-08-21 14:46 - 2013-08-21 14:46 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (2).exe 2013-08-21 14:35 - 2013-08-21 14:35 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (1).exe 2013-08-21 14:32 - 2013-08-21 14:32 - 00003908 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-21 14:32 - 2013-08-21 14:32 - 00003656 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore 2013-08-21 12:42 - 2013-02-13 03:59 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2013-08-21 11:40 - 2012-10-12 22:20 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-21 11:40 - 2012-10-12 22:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-21 11:40 - 2012-03-10 15:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-21 11:28 - 2013-08-21 11:28 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-08-21 11:28 - 2012-03-16 19:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-08-21 11:26 - 2012-10-04 16:49 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-08-21 11:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-08-21 11:25 - 2013-05-29 20:04 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-08-21 02:05 - 2012-03-10 15:06 - 00000000 ____D C:\Users\Christain 2013-08-21 00:50 - 2012-11-11 01:14 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000Core.job 2013-08-20 20:29 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-19 12:57 - 2012-03-10 16:46 - 00000000 ____D C:\Users\Christain\AppData\Roaming\TS3Client 2013-08-19 12:56 - 2012-04-07 22:19 - 00000000 ____D C:\Windows\Minidump 2013-08-19 12:56 - 2012-03-10 14:53 - 00000000 ____D C:\Windows\Panther 2013-08-19 12:54 - 2013-08-19 12:54 - 04429440 _____ (Piriform Ltd) C:\Users\Christain\Downloads\ccsetup404.exe 2013-08-19 00:00 - 2012-03-10 15:59 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Skype 2013-08-18 23:02 - 2013-08-21 11:21 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-18 23:02 - 2013-08-21 11:21 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00458528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00388384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-18 21:34 - 2013-08-21 11:26 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-18 21:34 - 2013-08-21 11:26 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-18 14:58 - 2013-08-18 14:58 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-08-17 21:25 - 2013-08-17 21:25 - 00000000 ____D C:\Users\Christain\Neuer Ordner 2013-08-17 07:30 - 2013-08-21 11:26 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-15 16:28 - 2013-08-15 16:21 - 100751136 _____ C:\Users\Christain\Downloads\gapps-jb-20130812-signed.zip 2013-08-15 16:14 - 2009-07-14 19:58 - 02903248 _____ C:\Windows\system32\perfh007.dat 2013-08-15 16:14 - 2009-07-14 19:58 - 00859220 _____ C:\Windows\system32\perfc007.dat 2013-08-15 16:14 - 2009-07-14 07:13 - 00006280 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-15 14:28 - 2012-03-10 16:46 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2013-08-15 11:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-15 10:05 - 2012-07-17 17:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-08-15 10:03 - 2013-08-15 10:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzp1endpt_01009.Wdf 2013-08-15 10:02 - 2012-07-17 17:01 - 00000000 ____D C:\ProgramData\Razer 2013-08-14 20:38 - 2013-08-14 20:37 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 20:37 - 2012-03-14 18:30 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 20:41 - 2013-07-29 09:44 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-08-08 09:34 - 2013-08-08 09:34 - 00000000 ____D C:\NvidiaLogging 2013-08-07 20:50 - 2012-03-10 15:18 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Mozilla 2013-07-30 20:35 - 2012-03-10 16:08 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Origin 2013-07-30 20:35 - 2012-03-10 16:08 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Origin 2013-07-29 13:01 - 2013-07-16 22:03 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Skyrim 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Blizzard Entertainment 2013-07-29 09:43 - 2013-07-29 09:43 - 04826568 _____ (Blizzard Entertainment) C:\Users\Christain\Downloads\Battle.net-Beta-Setup-deDE.exe 2013-07-28 17:36 - 2012-11-11 01:14 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Google 2013-07-28 15:22 - 2013-07-28 15:22 - 00000000 ____D C:\Users\Christain\Downloads\skse_1_06_16 2013-07-28 15:21 - 2013-07-28 15:21 - 00471625 _____ C:\Users\Christain\Downloads\skse_1_06_16.7z 2013-07-28 13:00 - 2013-07-28 13:00 - 00000000 ____D C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g 2013-07-28 12:55 - 2013-07-28 12:55 - 01779361 _____ C:\Users\Christain\Downloads\enbseries_skyrim_v13713.zip 2013-07-28 12:53 - 2013-07-28 12:53 - 00662474 _____ C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g.7z 2013-07-28 12:47 - 2013-01-06 19:24 - 00000000 ____D C:\Users\Christain\Documents\Witcher 2 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\Christain\Documents\Nexus Mod Manager 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Black_Tree_Gaming 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2013-07-28 12:44 - 2013-07-28 12:44 - 04120736 _____ (Black Tree Gaming ) C:\Users\Christain\Downloads\Nexus Mod Manager-0.45.5.exe 2013-07-27 20:23 - 2012-04-22 00:28 - 00000000 ____D C:\Users\Christain\Handy 2013-07-27 14:44 - 2013-07-27 14:43 - 00000000 ____D C:\Users\Christain\Downloads\winmd5free 2013-07-27 14:40 - 2013-07-27 14:35 - 00000000 ____D C:\Users\Christain\.android 2013-07-27 14:37 - 2013-07-27 14:37 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2013-07-27 14:37 - 2013-07-27 14:31 - 00000000 ____D C:\Program Files (x86)\Android SDK 2013-07-27 14:32 - 2013-07-27 14:32 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2013-07-27 14:31 - 2013-07-27 14:27 - 372285128 _____ C:\Users\Christain\Downloads\occam-jwr66v-factory-08d2b697.tgz 2013-07-27 14:30 - 2013-07-27 14:29 - 93502726 _____ (Google Inc.) C:\Users\Christain\Downloads\installer_r22.0.4-windows.exe 2013-07-27 14:28 - 2013-07-27 14:28 - 00268376 _____ C:\Users\Christain\Downloads\winmd5free.zip 2013-07-26 22:20 - 2013-07-26 22:20 - 00000000 ____D C:\Users\Christain\Documents\Square Enix 2013-07-26 20:34 - 2012-03-10 15:06 - 00000000 ___RD C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-26 07:13 - 2013-08-14 20:41 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-26 07:13 - 2013-08-14 20:41 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-26 07:13 - 2013-08-14 20:41 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-26 07:12 - 2013-08-14 20:41 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-26 05:35 - 2013-08-14 20:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-26 05:13 - 2013-08-14 20:41 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-26 05:13 - 2013-08-14 20:41 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-26 05:11 - 2013-08-14 20:41 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-26 05:11 - 2013-08-14 20:41 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-26 04:49 - 2013-08-14 20:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-26 04:39 - 2013-08-14 20:41 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-26 03:59 - 2013-08-14 20:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-25 21:02 - 2013-07-16 20:40 - 00000000 ____D C:\Users\Christain\Documents\Shiner 2013-07-25 11:25 - 2013-08-14 17:57 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-25 10:57 - 2013-08-14 17:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-25 05:38 - 2013-07-25 05:38 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\Christain\Documents\Robot Entertainment 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Robot Entertainment ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-14 12:14 ==================== End Of Log ============================ --- --- --- MFG |
21.08.2013, 18:16 | #4 |
/// the machine /// TB-Ausbilder | Qv06 enfternt oder doch nicht? Da ist noch Arbeit Downloade Dir bitte Malwarebytes Anti-Malware
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.08.2013, 19:44 | #5 | |
| Qv06 enfternt oder doch nicht? So habe grad Malwarebytes installiert und führe grad ein komplett Scan aus. Das wird denk ich ne weile dauern. Zumindest dauert ein Avira ducrhlauf teilweise 1,5h bei mir xD Zitat:
... ahje hab jetzt schon 5 Treffer So hab jetzt beide loggs. Nach einen Komplett Scan hatte Malwarebytes insgesamt 9 Funde. Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.21.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Christain :: KARTOFFELBAUER [limitiert] 21.08.2013 19:20:37 mbam-log-2013-08-21 (19-20-37).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 561058 Laufzeit: 1 Stunde(n), 4 Minute(n), 7 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 2 HKLM\SYSTEM\CurrentControlSet\Services\dealplylive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\dealplylivem (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 7 C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPly\DealPlyIE.dll.vir (PUP.DealPly) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPly\DealPlyUpdate.exe.vir (PUP.Optional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPly\DealPlyUpdateRun.exe.vir (PUP.Optional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPly\DealPlyUpdateVer.exe.vir (PUP.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Users\Christain\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe.vir (PUP.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Installer\2494e1.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.2 (08.20.2013:1) OS: Windows 7 Home Premium x64 Ran by Christain on 21.08.2013 at 20:32:31,47 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\dealplylive.exe Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dealplylive Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\powerpack Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\lyrixeeker Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dealplylive Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\pricegong_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\pricegong_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9cf699ca-2174-4ed8-bec1-ba82095edce0} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9cf699ca-2174-4ed8-bec1-ba82095edce0} ~~~ Files Successfully deleted: [File] "C:\Users\Christain\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com" ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Christain\appdata\local\{6128C922-20BB-4416-AB27-653CBB2D25E2} Successfully deleted: [Empty Folder] C:\Users\Christain\appdata\local\{BC9E7236-A27E-4D65-8683-03916F228EB2} ~~~ FireFox Emptied folder: C:\Users\Christain\AppData\Roaming\mozilla\firefox\profiles\kgchiz5g.default\minidumps [38 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 21.08.2013 at 20:35:08,62 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 Ran by Christain (administrator) on 21-08-2013 20:43:13 Running from C:\Users\Christain\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe () C:\Windows\SysWOW64\ASGT.exe (devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Users\Christain\PC overclock\OpenHardwareMonitor\OpenHardwareMonitor.exe () C:\Program Files (x86)\Pingzapper\PZService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Google Inc.) C:\Users\Christain\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Dropbox, Inc.) C:\Users\Christain\AppData\Roaming\Dropbox\bin\Dropbox.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation) HKCU\...\Run: [Google Update] - C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-11] (Google Inc.) HKCU\...\Run: [zASRockInstantBoot] - [x] HKCU\...\Run: [MusicManager] - C:\Users\Christain\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7345664 2013-06-21] (Google Inc.) HKCU\...\Policies\system: [DisableLockWorkstation] 0 MountPoints2: E - E:\ASRSetup.exe MountPoints2: {458d0a12-6ab0-11e1-a10b-806e6f6e6963} - E:\Run.exe MountPoints2: {78590d4e-757d-11e2-9b4f-806e6f6e6963} - E:\ASRSetup.exe HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [606056 2013-07-23] (Razer Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation) HKLM-x32\...\Run: [XFastUSB] - C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-02-13] (FNet Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll [168616 2013-08-18] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-18] (NVIDIA Corporation) Startup: C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Christain\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\G35 konfigurieren.lnk ShortcutTarget: G35 konfigurieren.lnk -> C:\Program Files (x86)\Logitech\G35\G35.exe (Logitech(c)) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD6400AAKS-22A7B2_WD-WCASY903821138211&ts=1377088359 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD6400AAKS-22A7B2_WD-WCASY903821138211&ts=1377088359 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: DealPly Shopping - C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default\Extensions\{e53a26f5-7199-4a5b-86f5-d2e86854b979} FF Extension: jid1-qQSMEVsYTOjgYA - C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Talk Plugin) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Docs) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Christain\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () S3 DAUpdaterSvc; D:\Programme\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-04-25] (BioWare) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [137336 2013-02-17] (Futuremark Corporation) R2 HauppaugeTVServer; C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe [577536 2013-01-25] (Hauppauge Computer Works) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation) R2 PingzapperSvc; C:\Program Files (x86)\Pingzapper\PZService.exe [679424 2012-06-11] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-08-12] () ==================== Drivers (Whitelisted) ==================== R3 AmdTools64; C:\Windows\System32\DRIVERS\AmdTools64.sys [47160 2008-04-28] (AMD, Inc.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology) R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG) R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID) S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-06-09] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-02-13] (FNet Co., Ltd.) S3 gdrv; C:\Windows\gdrv.sys [25640 2013-07-06] (Windows (R) Server 2003 DDK provider) S3 gdrv; C:\Windows\gdrv.sys [25640 2013-07-06] (Windows (R) Server 2003 DDK provider) R3 HCW3x64; C:\Windows\System32\DRIVERS\HCW71364.sys [1501200 2012-01-31] (Hauppauge Computer Works, Inc.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation) R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] () R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] () R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] () S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R3 Lycosa; C:\Windows\System32\drivers\Lycosa.sys [20352 2009-09-30] (Razer USA Ltd.) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-07-18] (NVIDIA Corporation) R3 rzp1endpt; C:\Windows\System32\DRIVERS\rzp1endpt.sys [39096 2013-07-10] (Razer Inc) R3 rzvmouse; C:\Windows\System32\DRIVERS\rzvmouse.sys [30904 2013-07-10] (Razer Inc) R3 VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [199296 2010-01-12] (Vimicro Corporation) R3 vvftUVC; C:\Windows\System32\drivers\vvftUVC.sys [303616 2008-07-01] (Vimicro Corporation) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-08-21] () S3 ALSysIO; \??\C:\Users\CHRIST~1\AppData\Local\Temp\ALSysIO64.sys [x] S3 cpuz130; \??\C:\Users\CHRIST~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x] S3 OSFMount; \??\C:\Program Files\OSFMount\OSFMount.sys [x] R3 WinRing0_1_2_0; \??\C:\Users\Christain\AppData\Local\Temp\tmpDB8F.tmp [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-21 20:36 - 2013-08-21 20:36 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-08-21 20:35 - 2013-08-21 20:35 - 00002904 _____ C:\Users\Christain\Desktop\JRT.txt 2013-08-21 20:32 - 2013-08-21 20:32 - 00000000 ____D C:\Windows\ERUNT 2013-08-21 20:30 - 2013-08-21 20:30 - 01018947 _____ (Thisisu) C:\Users\Christain\Desktop\JRT.exe 2013-08-21 19:20 - 2013-08-21 19:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-21 19:20 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-21 19:19 - 2013-08-21 19:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christain\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-21 17:26 - 2013-08-21 17:26 - 00030187 _____ C:\Users\Christain\Desktop\Addition.txt 2013-08-21 17:25 - 2013-08-21 17:25 - 01576164 _____ (Farbar) C:\Users\Christain\Desktop\FRST64.exe 2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\FRST 2013-08-21 16:15 - 2013-08-21 16:15 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (2).txt 2013-08-21 15:54 - 2013-08-21 15:54 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (1).txt 2013-08-21 15:50 - 2013-08-21 15:50 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0].txt 2013-08-21 15:26 - 2013-08-21 15:26 - 00012707 _____ C:\Users\Christain\Desktop\AdwCleaner[S0].txt 2013-08-21 15:25 - 2013-08-21 20:36 - 00000450 _____ C:\autoupdate.log 2013-08-21 15:25 - 2013-08-21 20:36 - 00000168 _____ C:\Windows\setupact.log 2013-08-21 15:25 - 2013-08-21 15:25 - 00000000 _____ C:\Windows\setuperr.log 2013-08-21 15:24 - 2013-08-21 20:36 - 00002968 _____ C:\Windows\PFRO.log 2013-08-21 15:22 - 2013-08-21 15:22 - 00975858 _____ C:\Users\Christain\Desktop\adwcleaner.exe 2013-08-21 15:13 - 2013-08-21 15:24 - 00000000 ____D C:\AdwCleaner 2013-08-21 14:47 - 2013-08-21 14:49 - 00000000 ____D C:\Program Files\ASRock 2013-08-21 14:46 - 2013-08-21 14:46 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (2).exe 2013-08-21 14:35 - 2013-08-21 14:35 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (1).exe 2013-08-21 14:32 - 2013-08-21 20:37 - 00000912 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-21 14:32 - 2013-08-21 14:32 - 00003908 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-21 11:28 - 2013-08-21 11:28 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-08-21 11:26 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-21 11:26 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-21 11:26 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-21 11:21 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-21 11:21 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00458528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00388384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-21 11:21 - 2013-07-18 19:15 - 00039712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-08-21 11:21 - 2013-07-18 19:15 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-08-21 11:21 - 2013-07-18 19:15 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-08-21 11:21 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2013-08-21 11:21 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2013-08-21 11:21 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2013-08-19 12:54 - 2013-08-19 12:54 - 04429440 _____ (Piriform Ltd) C:\Users\Christain\Downloads\ccsetup404.exe 2013-08-18 14:58 - 2013-08-18 14:58 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-08-17 21:25 - 2013-08-17 21:25 - 00000000 ____D C:\Users\Christain\Neuer Ordner 2013-08-15 16:21 - 2013-08-15 16:28 - 100751136 _____ C:\Users\Christain\Downloads\gapps-jb-20130812-signed.zip 2013-08-15 10:03 - 2013-08-15 10:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzp1endpt_01009.Wdf 2013-08-14 20:41 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 20:41 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 20:41 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 20:41 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 20:41 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 20:41 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 20:41 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 20:41 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 20:41 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 20:41 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 20:41 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 20:41 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 20:37 - 2013-08-14 20:38 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 17:58 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 17:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 17:57 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 17:57 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 17:57 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 17:57 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 17:57 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 17:57 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 17:57 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 17:57 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 17:57 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 17:57 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 17:57 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 17:57 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 17:57 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 17:57 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 17:57 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 17:57 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 17:57 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 17:57 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 17:57 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-08 09:34 - 2013-08-08 09:34 - 00000000 ____D C:\NvidiaLogging 2013-07-29 09:44 - 2013-08-21 19:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Battle.net 2013-07-29 09:44 - 2013-08-13 20:41 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Blizzard Entertainment 2013-07-29 09:43 - 2013-07-29 09:43 - 04826568 _____ (Blizzard Entertainment) C:\Users\Christain\Downloads\Battle.net-Beta-Setup-deDE.exe 2013-07-28 15:22 - 2013-07-28 15:22 - 00000000 ____D C:\Users\Christain\Downloads\skse_1_06_16 2013-07-28 15:21 - 2013-07-28 15:21 - 00471625 _____ C:\Users\Christain\Downloads\skse_1_06_16.7z 2013-07-28 13:00 - 2013-07-28 13:00 - 00000000 ____D C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g 2013-07-28 12:55 - 2013-07-28 12:55 - 01779361 _____ C:\Users\Christain\Downloads\enbseries_skyrim_v13713.zip 2013-07-28 12:53 - 2013-07-28 12:53 - 00662474 _____ C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g.7z 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\Christain\Documents\Nexus Mod Manager 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Black_Tree_Gaming 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2013-07-28 12:44 - 2013-07-28 12:44 - 04120736 _____ (Black Tree Gaming ) C:\Users\Christain\Downloads\Nexus Mod Manager-0.45.5.exe 2013-07-27 14:43 - 2013-07-27 14:44 - 00000000 ____D C:\Users\Christain\Downloads\winmd5free 2013-07-27 14:37 - 2013-07-27 14:37 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2013-07-27 14:35 - 2013-07-27 14:40 - 00000000 ____D C:\Users\Christain\.android 2013-07-27 14:32 - 2013-07-27 14:32 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2013-07-27 14:31 - 2013-07-27 14:37 - 00000000 ____D C:\Program Files (x86)\Android SDK 2013-07-27 14:29 - 2013-07-27 14:30 - 93502726 _____ (Google Inc.) C:\Users\Christain\Downloads\installer_r22.0.4-windows.exe 2013-07-27 14:28 - 2013-07-27 14:28 - 00268376 _____ C:\Users\Christain\Downloads\winmd5free.zip 2013-07-27 14:27 - 2013-07-27 14:31 - 372285128 _____ C:\Users\Christain\Downloads\occam-jwr66v-factory-08d2b697.tgz 2013-07-26 22:20 - 2013-07-26 22:20 - 00000000 ____D C:\Users\Christain\Documents\Square Enix 2013-07-25 05:38 - 2013-07-25 05:38 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\Christain\Documents\Robot Entertainment 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Robot Entertainment ==================== One Month Modified Files and Folders ======= 2013-08-21 20:40 - 2012-10-12 22:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-21 20:38 - 2012-09-01 16:52 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Dropbox 2013-08-21 20:37 - 2013-08-21 14:32 - 00000912 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-21 20:36 - 2013-08-21 20:36 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-08-21 20:36 - 2013-08-21 15:25 - 00000450 _____ C:\autoupdate.log 2013-08-21 20:36 - 2013-08-21 15:25 - 00000168 _____ C:\Windows\setupact.log 2013-08-21 20:36 - 2013-08-21 15:24 - 00002968 _____ C:\Windows\PFRO.log 2013-08-21 20:36 - 2013-03-29 23:08 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys 2013-08-21 20:36 - 2013-02-13 03:59 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2013-08-21 20:36 - 2012-04-09 17:44 - 00000000 ____D C:\ProgramData\NVIDIA 2013-08-21 20:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-21 20:35 - 2013-08-21 20:35 - 00002904 _____ C:\Users\Christain\Desktop\JRT.txt 2013-08-21 20:35 - 2012-03-10 14:57 - 01214889 _____ C:\Windows\WindowsUpdate.log 2013-08-21 20:35 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-21 20:35 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-21 20:32 - 2013-08-21 20:32 - 00000000 ____D C:\Windows\ERUNT 2013-08-21 20:30 - 2013-08-21 20:30 - 01018947 _____ (Thisisu) C:\Users\Christain\Desktop\JRT.exe 2013-08-21 19:50 - 2012-11-11 01:14 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000UA.job 2013-08-21 19:45 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Battle.net 2013-08-21 19:20 - 2013-08-21 19:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-21 19:19 - 2013-08-21 19:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christain\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-21 17:26 - 2013-08-21 17:26 - 00030187 _____ C:\Users\Christain\Desktop\Addition.txt 2013-08-21 17:25 - 2013-08-21 17:25 - 01576164 _____ (Farbar) C:\Users\Christain\Desktop\FRST64.exe 2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\FRST 2013-08-21 16:15 - 2013-08-21 16:15 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (2).txt 2013-08-21 16:08 - 2013-02-13 04:38 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\CrashDumps 2013-08-21 15:54 - 2013-08-21 15:54 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (1).txt 2013-08-21 15:50 - 2013-08-21 15:50 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0].txt 2013-08-21 15:26 - 2013-08-21 15:26 - 00012707 _____ C:\Users\Christain\Desktop\AdwCleaner[S0].txt 2013-08-21 15:25 - 2013-08-21 15:25 - 00000000 _____ C:\Windows\setuperr.log 2013-08-21 15:24 - 2013-08-21 15:13 - 00000000 ____D C:\AdwCleaner 2013-08-21 15:24 - 2012-11-11 01:14 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-08-21 15:24 - 2012-03-10 15:06 - 00001003 _____ C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-21 15:22 - 2013-08-21 15:22 - 00975858 _____ C:\Users\Christain\Desktop\adwcleaner.exe 2013-08-21 14:50 - 2012-03-10 16:21 - 00000000 ____D C:\Users\Christain\Desktop Icons 2013-08-21 14:49 - 2013-08-21 14:47 - 00000000 ____D C:\Program Files\ASRock 2013-08-21 14:46 - 2013-08-21 14:46 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (2).exe 2013-08-21 14:35 - 2013-08-21 14:35 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (1).exe 2013-08-21 14:32 - 2013-08-21 14:32 - 00003908 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-21 12:42 - 2013-02-13 03:59 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2013-08-21 11:40 - 2012-10-12 22:20 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-21 11:40 - 2012-10-12 22:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-21 11:40 - 2012-03-10 15:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-21 11:28 - 2013-08-21 11:28 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-08-21 11:28 - 2012-03-16 19:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-08-21 11:26 - 2012-10-04 16:49 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-08-21 11:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-08-21 11:25 - 2013-05-29 20:04 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-08-21 02:05 - 2012-03-10 15:06 - 00000000 ____D C:\Users\Christain 2013-08-21 00:50 - 2012-11-11 01:14 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000Core.job 2013-08-20 20:29 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-19 12:57 - 2012-03-10 16:46 - 00000000 ____D C:\Users\Christain\AppData\Roaming\TS3Client 2013-08-19 12:56 - 2012-04-07 22:19 - 00000000 ____D C:\Windows\Minidump 2013-08-19 12:56 - 2012-03-10 14:53 - 00000000 ____D C:\Windows\Panther 2013-08-19 12:54 - 2013-08-19 12:54 - 04429440 _____ (Piriform Ltd) C:\Users\Christain\Downloads\ccsetup404.exe 2013-08-19 00:00 - 2012-03-10 15:59 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Skype 2013-08-18 23:02 - 2013-08-21 11:21 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-18 23:02 - 2013-08-21 11:21 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00458528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00388384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-18 21:34 - 2013-08-21 11:26 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-18 21:34 - 2013-08-21 11:26 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-18 14:58 - 2013-08-18 14:58 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-08-17 21:25 - 2013-08-17 21:25 - 00000000 ____D C:\Users\Christain\Neuer Ordner 2013-08-17 07:30 - 2013-08-21 11:26 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-15 16:28 - 2013-08-15 16:21 - 100751136 _____ C:\Users\Christain\Downloads\gapps-jb-20130812-signed.zip 2013-08-15 16:14 - 2009-07-14 19:58 - 02903248 _____ C:\Windows\system32\perfh007.dat 2013-08-15 16:14 - 2009-07-14 19:58 - 00859220 _____ C:\Windows\system32\perfc007.dat 2013-08-15 16:14 - 2009-07-14 07:13 - 00006280 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-15 14:28 - 2012-03-10 16:46 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2013-08-15 11:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-15 10:05 - 2012-07-17 17:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-08-15 10:03 - 2013-08-15 10:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzp1endpt_01009.Wdf 2013-08-15 10:02 - 2012-07-17 17:01 - 00000000 ____D C:\ProgramData\Razer 2013-08-14 20:38 - 2013-08-14 20:37 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 20:37 - 2012-03-14 18:30 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 20:41 - 2013-07-29 09:44 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-08-08 09:34 - 2013-08-08 09:34 - 00000000 ____D C:\NvidiaLogging 2013-08-07 20:50 - 2012-03-10 15:18 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Mozilla 2013-07-30 20:35 - 2012-03-10 16:08 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Origin 2013-07-30 20:35 - 2012-03-10 16:08 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Origin 2013-07-29 13:01 - 2013-07-16 22:03 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Skyrim 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Blizzard Entertainment 2013-07-29 09:43 - 2013-07-29 09:43 - 04826568 _____ (Blizzard Entertainment) C:\Users\Christain\Downloads\Battle.net-Beta-Setup-deDE.exe 2013-07-28 17:36 - 2012-11-11 01:14 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Google 2013-07-28 15:22 - 2013-07-28 15:22 - 00000000 ____D C:\Users\Christain\Downloads\skse_1_06_16 2013-07-28 15:21 - 2013-07-28 15:21 - 00471625 _____ C:\Users\Christain\Downloads\skse_1_06_16.7z 2013-07-28 13:00 - 2013-07-28 13:00 - 00000000 ____D C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g 2013-07-28 12:55 - 2013-07-28 12:55 - 01779361 _____ C:\Users\Christain\Downloads\enbseries_skyrim_v13713.zip 2013-07-28 12:53 - 2013-07-28 12:53 - 00662474 _____ C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g.7z 2013-07-28 12:47 - 2013-01-06 19:24 - 00000000 ____D C:\Users\Christain\Documents\Witcher 2 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\Christain\Documents\Nexus Mod Manager 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Black_Tree_Gaming 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2013-07-28 12:44 - 2013-07-28 12:44 - 04120736 _____ (Black Tree Gaming ) C:\Users\Christain\Downloads\Nexus Mod Manager-0.45.5.exe 2013-07-27 20:23 - 2012-04-22 00:28 - 00000000 ____D C:\Users\Christain\Handy 2013-07-27 14:44 - 2013-07-27 14:43 - 00000000 ____D C:\Users\Christain\Downloads\winmd5free 2013-07-27 14:40 - 2013-07-27 14:35 - 00000000 ____D C:\Users\Christain\.android 2013-07-27 14:37 - 2013-07-27 14:37 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2013-07-27 14:37 - 2013-07-27 14:31 - 00000000 ____D C:\Program Files (x86)\Android SDK 2013-07-27 14:32 - 2013-07-27 14:32 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2013-07-27 14:31 - 2013-07-27 14:27 - 372285128 _____ C:\Users\Christain\Downloads\occam-jwr66v-factory-08d2b697.tgz 2013-07-27 14:30 - 2013-07-27 14:29 - 93502726 _____ (Google Inc.) C:\Users\Christain\Downloads\installer_r22.0.4-windows.exe 2013-07-27 14:28 - 2013-07-27 14:28 - 00268376 _____ C:\Users\Christain\Downloads\winmd5free.zip 2013-07-26 22:20 - 2013-07-26 22:20 - 00000000 ____D C:\Users\Christain\Documents\Square Enix 2013-07-26 20:34 - 2012-03-10 15:06 - 00000000 ___RD C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-26 07:13 - 2013-08-14 20:41 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-26 07:13 - 2013-08-14 20:41 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-26 07:13 - 2013-08-14 20:41 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-26 07:12 - 2013-08-14 20:41 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-26 05:35 - 2013-08-14 20:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-26 05:13 - 2013-08-14 20:41 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-26 05:13 - 2013-08-14 20:41 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-26 05:11 - 2013-08-14 20:41 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-26 05:11 - 2013-08-14 20:41 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-26 04:49 - 2013-08-14 20:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-26 04:39 - 2013-08-14 20:41 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-26 03:59 - 2013-08-14 20:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-25 21:02 - 2013-07-16 20:40 - 00000000 ____D C:\Users\Christain\Documents\Shiner 2013-07-25 11:25 - 2013-08-14 17:57 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-25 10:57 - 2013-08-14 17:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-25 05:38 - 2013-07-25 05:38 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\Christain\Documents\Robot Entertainment 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Robot Entertainment ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-14 12:14 ==================== End Of Log ============================ --- --- --- --- --- --- Schonmal Viele Dank bis hierhin, echt super Hilfe die du hier leistest. MFG |
22.08.2013, 08:14 | #6 |
/// the machine /// TB-Ausbilder | Qv06 enfternt oder doch nicht?Lesestoff: Warum wir Avira nicht mehr empfehlen Avira liefert seit einiger Zeit mit der Standardinstallation die Ask Toolbar mit aus. Diese Toolbar ist Voraussetzung dafür, dass der Webguard zuverlässig funktioniert. Die Ask Toolbar ist dafür bekannt, dass sie das Surfverhalten des Benutzers ausspioniert, um damit in letzter Konsequenz Geld zu verdienen. Daher wird von uns auf diesem Board als "schädlich" eingestuft. Mehr Informationen. Eine Sicherheitsfirma, die dem Benutzer praktisch ungefragt schädliche Software "unterjubelt", scheidet für uns daher aus. Wir empfehlen daher allen Nutzern von Avira aufgrund dieser Geschäftspraktik, der teilweise äußerst schlechten Erkennungsrate und der überaus nervtötenden Werbung Avira zu deinstallieren und auf ein alternatives Produkt auszuweichen. Solltest du dich zu einem Wechsel entscheiden, empfehlen wir dir nach der Deinstallation mit dem Avira-Cleaner alle Reste zu entfernen. ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Qv06 enfternt oder doch nicht? |
22.08.2013, 09:54 | #7 |
| Qv06 enfternt oder doch nicht? Hab 2 USB Sticks und Handy angeschlossen und nachfolgend die Scans gemacht. ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=8f815639d82800468d93302f70eb25da # engine=14857 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-08-22 08:42:20 # local_time=2013-08-22 10:42:20 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 96 5207 242580630 0 0 # compatibility_mode=5893 16776573 100 94 51299 128790790 0 0 # scanned=307836 # found=0 # cleaned=0 # scan_time=3907 Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 25 Adobe Flash Player 11.8.800.94 Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox 16.0.2 Firefox out of Date! Google Chrome 28.0.1500.72 Google Chrome 28.0.1500.95 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02 Ran by Christain (administrator) on 22-08-2013 10:47:34 Running from C:\Users\Christain\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe () C:\Windows\SysWOW64\ASGT.exe (devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe () C:\Program Files (x86)\Pingzapper\PZService.exe () C:\Users\Christain\PC overclock\OpenHardwareMonitor\OpenHardwareMonitor.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Google Inc.) C:\Users\Christain\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Dropbox, Inc.) C:\Users\Christain\AppData\Roaming\Dropbox\bin\Dropbox.exe (Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Christain\AppData\Local\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\avcenter.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation) HKCU\...\Run: [Google Update] - C:\Users\Christain\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-11] (Google Inc.) HKCU\...\Run: [zASRockInstantBoot] - [x] HKCU\...\Run: [MusicManager] - C:\Users\Christain\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7345664 2013-06-21] (Google Inc.) HKCU\...\Policies\system: [DisableLockWorkstation] 0 MountPoints2: E - E:\ASRSetup.exe MountPoints2: {458d0a12-6ab0-11e1-a10b-806e6f6e6963} - E:\Run.exe MountPoints2: {78590d4e-757d-11e2-9b4f-806e6f6e6963} - E:\ASRSetup.exe HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [606056 2013-07-23] (Razer Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation) HKLM-x32\...\Run: [XFastUSB] - C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-02-13] (FNet Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll [168616 2013-08-18] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-18] (NVIDIA Corporation) Startup: C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Christain\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\G35 konfigurieren.lnk ShortcutTarget: G35 konfigurieren.lnk -> C:\Program Files (x86)\Logitech\G35\G35.exe (Logitech(c)) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD6400AAKS-22A7B2_WD-WCASY903821138211&ts=1377088359 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD6400AAKS-22A7B2_WD-WCASY903821138211&ts=1377088359 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: DealPly Shopping - C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default\Extensions\{e53a26f5-7199-4a5b-86f5-d2e86854b979} FF Extension: jid1-qQSMEVsYTOjgYA - C:\Users\Christain\AppData\Roaming\Mozilla\Firefox\Profiles\kgchiz5g.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Christain\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Talk Plugin) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Christain\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Users\Christain\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Docs) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\CHRIST~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Christain\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () S3 DAUpdaterSvc; D:\Programme\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-04-25] (BioWare) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [137336 2013-02-17] (Futuremark Corporation) R2 HauppaugeTVServer; C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe [577536 2013-01-25] (Hauppauge Computer Works) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation) R2 PingzapperSvc; C:\Program Files (x86)\Pingzapper\PZService.exe [679424 2012-06-11] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-08-12] () ==================== Drivers (Whitelisted) ==================== R3 AmdTools64; C:\Windows\System32\DRIVERS\AmdTools64.sys [47160 2008-04-28] (AMD, Inc.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology) R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG) R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID) R3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-06-09] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-02-13] (FNet Co., Ltd.) S3 gdrv; C:\Windows\gdrv.sys [25640 2013-07-06] (Windows (R) Server 2003 DDK provider) S3 gdrv; C:\Windows\gdrv.sys [25640 2013-07-06] (Windows (R) Server 2003 DDK provider) R3 HCW3x64; C:\Windows\System32\DRIVERS\HCW71364.sys [1501200 2012-01-31] (Hauppauge Computer Works, Inc.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation) R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] () R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] () R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] () S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R3 Lycosa; C:\Windows\System32\drivers\Lycosa.sys [20352 2009-09-30] (Razer USA Ltd.) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-07-18] (NVIDIA Corporation) R3 rzp1endpt; C:\Windows\System32\DRIVERS\rzp1endpt.sys [39096 2013-07-10] (Razer Inc) R3 rzvmouse; C:\Windows\System32\DRIVERS\rzvmouse.sys [30904 2013-07-10] (Razer Inc) R3 VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [199296 2010-01-12] (Vimicro Corporation) R3 vvftUVC; C:\Windows\System32\drivers\vvftUVC.sys [303616 2008-07-01] (Vimicro Corporation) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-08-22] () S3 ALSysIO; \??\C:\Users\CHRIST~1\AppData\Local\Temp\ALSysIO64.sys [x] S3 cpuz130; \??\C:\Users\CHRIST~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x] S3 OSFMount; \??\C:\Program Files\OSFMount\OSFMount.sys [x] R3 WinRing0_1_2_0; \??\C:\Users\Christain\AppData\Local\Temp\tmp77CD.tmp [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-22 10:46 - 2013-08-22 10:46 - 00000975 _____ C:\Users\Christain\Desktop\checkup.txt 2013-08-22 10:44 - 2013-08-22 10:44 - 00891115 _____ C:\Users\Christain\Desktop\SecurityCheck.exe 2013-08-22 09:35 - 2013-08-22 09:35 - 00000000 ____D C:\Program Files (x86)\ESET 2013-08-22 09:32 - 2013-08-22 09:32 - 02347384 _____ (ESET) C:\Users\Christain\Desktop\esetsmartinstaller_enu.exe 2013-08-22 09:22 - 2013-08-22 09:22 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-08-21 20:35 - 2013-08-21 20:35 - 00002904 _____ C:\Users\Christain\Desktop\JRT.txt 2013-08-21 20:32 - 2013-08-21 20:32 - 00000000 ____D C:\Windows\ERUNT 2013-08-21 20:30 - 2013-08-21 20:30 - 01018947 _____ (Thisisu) C:\Users\Christain\Desktop\JRT.exe 2013-08-21 19:20 - 2013-08-21 19:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-21 19:20 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-21 19:19 - 2013-08-21 19:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christain\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-21 17:26 - 2013-08-21 17:26 - 00030187 _____ C:\Users\Christain\Desktop\Addition.txt 2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\FRST 2013-08-21 16:15 - 2013-08-21 16:15 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (2).txt 2013-08-21 15:54 - 2013-08-21 15:54 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (1).txt 2013-08-21 15:50 - 2013-08-21 15:50 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0].txt 2013-08-21 15:26 - 2013-08-21 15:26 - 00012707 _____ C:\Users\Christain\Desktop\AdwCleaner[S0].txt 2013-08-21 15:25 - 2013-08-22 09:22 - 00000750 _____ C:\autoupdate.log 2013-08-21 15:25 - 2013-08-22 09:22 - 00000280 _____ C:\Windows\setupact.log 2013-08-21 15:25 - 2013-08-21 15:25 - 00000000 _____ C:\Windows\setuperr.log 2013-08-21 15:24 - 2013-08-22 09:22 - 00003884 _____ C:\Windows\PFRO.log 2013-08-21 15:22 - 2013-08-21 15:22 - 00975858 _____ C:\Users\Christain\Desktop\adwcleaner.exe 2013-08-21 15:13 - 2013-08-21 15:24 - 00000000 ____D C:\AdwCleaner 2013-08-21 14:47 - 2013-08-21 14:49 - 00000000 ____D C:\Program Files\ASRock 2013-08-21 14:46 - 2013-08-21 14:46 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (2).exe 2013-08-21 14:35 - 2013-08-21 14:35 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (1).exe 2013-08-21 14:32 - 2013-08-22 10:37 - 00000912 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-21 14:32 - 2013-08-21 14:32 - 00003908 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-21 11:28 - 2013-08-21 11:28 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-08-21 11:26 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-21 11:26 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-21 11:26 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-21 11:26 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-21 11:21 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-21 11:21 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00458528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00388384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-21 11:21 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-21 11:21 - 2013-07-18 19:15 - 00039712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-08-21 11:21 - 2013-07-18 19:15 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-08-21 11:21 - 2013-07-18 19:15 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-08-21 11:21 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2013-08-21 11:21 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2013-08-21 11:21 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2013-08-19 12:54 - 2013-08-19 12:54 - 04429440 _____ (Piriform Ltd) C:\Users\Christain\Downloads\ccsetup404.exe 2013-08-18 14:58 - 2013-08-18 14:58 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-08-17 21:25 - 2013-08-17 21:25 - 00000000 ____D C:\Users\Christain\Neuer Ordner 2013-08-15 16:21 - 2013-08-15 16:28 - 100751136 _____ C:\Users\Christain\Downloads\gapps-jb-20130812-signed.zip 2013-08-15 10:03 - 2013-08-15 10:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzp1endpt_01009.Wdf 2013-08-14 20:41 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 20:41 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 20:41 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 20:41 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 20:41 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 20:41 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 20:41 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 20:41 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 20:41 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 20:41 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 20:41 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 20:41 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 20:41 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 20:41 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 20:37 - 2013-08-14 20:38 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 17:58 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 17:58 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 17:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 17:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 17:57 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 17:57 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 17:57 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 17:57 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 17:57 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 17:57 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 17:57 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 17:57 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 17:57 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 17:57 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 17:57 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 17:57 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 17:57 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 17:57 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 17:57 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 17:57 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 17:57 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 17:57 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 17:57 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-08 09:34 - 2013-08-08 09:34 - 00000000 ____D C:\NvidiaLogging 2013-07-29 09:44 - 2013-08-21 23:07 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Battle.net 2013-07-29 09:44 - 2013-08-13 20:41 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Blizzard Entertainment 2013-07-29 09:43 - 2013-07-29 09:43 - 04826568 _____ (Blizzard Entertainment) C:\Users\Christain\Downloads\Battle.net-Beta-Setup-deDE.exe 2013-07-28 15:22 - 2013-07-28 15:22 - 00000000 ____D C:\Users\Christain\Downloads\skse_1_06_16 2013-07-28 15:21 - 2013-07-28 15:21 - 00471625 _____ C:\Users\Christain\Downloads\skse_1_06_16.7z 2013-07-28 13:00 - 2013-07-28 13:00 - 00000000 ____D C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g 2013-07-28 12:55 - 2013-07-28 12:55 - 01779361 _____ C:\Users\Christain\Downloads\enbseries_skyrim_v13713.zip 2013-07-28 12:53 - 2013-07-28 12:53 - 00662474 _____ C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g.7z 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\Christain\Documents\Nexus Mod Manager 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Black_Tree_Gaming 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2013-07-28 12:44 - 2013-07-28 12:44 - 04120736 _____ (Black Tree Gaming ) C:\Users\Christain\Downloads\Nexus Mod Manager-0.45.5.exe 2013-07-27 14:43 - 2013-07-27 14:44 - 00000000 ____D C:\Users\Christain\Downloads\winmd5free 2013-07-27 14:37 - 2013-07-27 14:37 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2013-07-27 14:35 - 2013-07-27 14:40 - 00000000 ____D C:\Users\Christain\.android 2013-07-27 14:32 - 2013-07-27 14:32 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2013-07-27 14:31 - 2013-07-27 14:37 - 00000000 ____D C:\Program Files (x86)\Android SDK 2013-07-27 14:29 - 2013-07-27 14:30 - 93502726 _____ (Google Inc.) C:\Users\Christain\Downloads\installer_r22.0.4-windows.exe 2013-07-27 14:28 - 2013-07-27 14:28 - 00268376 _____ C:\Users\Christain\Downloads\winmd5free.zip 2013-07-27 14:27 - 2013-07-27 14:31 - 372285128 _____ C:\Users\Christain\Downloads\occam-jwr66v-factory-08d2b697.tgz 2013-07-26 22:20 - 2013-07-26 22:20 - 00000000 ____D C:\Users\Christain\Documents\Square Enix 2013-07-25 05:38 - 2013-07-25 05:38 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\Christain\Documents\Robot Entertainment 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Robot Entertainment ==================== One Month Modified Files and Folders ======= 2013-08-22 10:46 - 2013-08-22 10:46 - 00000975 _____ C:\Users\Christain\Desktop\checkup.txt 2013-08-22 10:44 - 2013-08-22 10:44 - 00891115 _____ C:\Users\Christain\Desktop\SecurityCheck.exe 2013-08-22 10:40 - 2012-10-12 22:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-22 10:37 - 2013-08-21 14:32 - 00000912 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-22 09:50 - 2012-11-11 01:14 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000UA.job 2013-08-22 09:35 - 2013-08-22 09:35 - 00000000 ____D C:\Program Files (x86)\ESET 2013-08-22 09:33 - 2012-03-10 14:57 - 01265624 _____ C:\Windows\WindowsUpdate.log 2013-08-22 09:32 - 2013-08-22 09:32 - 02347384 _____ (ESET) C:\Users\Christain\Desktop\esetsmartinstaller_enu.exe 2013-08-22 09:32 - 2009-07-14 19:58 - 02917790 _____ C:\Windows\system32\perfh007.dat 2013-08-22 09:32 - 2009-07-14 19:58 - 00863738 _____ C:\Windows\system32\perfc007.dat 2013-08-22 09:32 - 2009-07-14 07:13 - 00006280 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-22 09:31 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-22 09:31 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-22 09:24 - 2012-09-01 16:52 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Dropbox 2013-08-22 09:22 - 2013-08-22 09:22 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-08-22 09:22 - 2013-08-21 15:25 - 00000750 _____ C:\autoupdate.log 2013-08-22 09:22 - 2013-08-21 15:25 - 00000280 _____ C:\Windows\setupact.log 2013-08-22 09:22 - 2013-08-21 15:24 - 00003884 _____ C:\Windows\PFRO.log 2013-08-22 09:22 - 2013-03-29 23:08 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys 2013-08-22 09:22 - 2013-02-13 03:59 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2013-08-22 09:22 - 2012-04-09 17:44 - 00000000 ____D C:\ProgramData\NVIDIA 2013-08-22 09:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-21 23:07 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Battle.net 2013-08-21 20:35 - 2013-08-21 20:35 - 00002904 _____ C:\Users\Christain\Desktop\JRT.txt 2013-08-21 20:32 - 2013-08-21 20:32 - 00000000 ____D C:\Windows\ERUNT 2013-08-21 20:30 - 2013-08-21 20:30 - 01018947 _____ (Thisisu) C:\Users\Christain\Desktop\JRT.exe 2013-08-21 19:20 - 2013-08-21 19:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-21 19:19 - 2013-08-21 19:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christain\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-21 17:26 - 2013-08-21 17:26 - 00030187 _____ C:\Users\Christain\Desktop\Addition.txt 2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\FRST 2013-08-21 16:15 - 2013-08-21 16:15 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (2).txt 2013-08-21 16:08 - 2013-02-13 04:38 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\CrashDumps 2013-08-21 15:54 - 2013-08-21 15:54 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0] (1).txt 2013-08-21 15:50 - 2013-08-21 15:50 - 00012707 _____ C:\Users\Christain\Downloads\AdwCleaner[S0].txt 2013-08-21 15:26 - 2013-08-21 15:26 - 00012707 _____ C:\Users\Christain\Desktop\AdwCleaner[S0].txt 2013-08-21 15:25 - 2013-08-21 15:25 - 00000000 _____ C:\Windows\setuperr.log 2013-08-21 15:24 - 2013-08-21 15:13 - 00000000 ____D C:\AdwCleaner 2013-08-21 15:24 - 2012-11-11 01:14 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-08-21 15:24 - 2012-03-10 15:06 - 00001003 _____ C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-21 15:22 - 2013-08-21 15:22 - 00975858 _____ C:\Users\Christain\Desktop\adwcleaner.exe 2013-08-21 14:50 - 2012-03-10 16:21 - 00000000 ____D C:\Users\Christain\Desktop Icons 2013-08-21 14:49 - 2013-08-21 14:47 - 00000000 ____D C:\Program Files\ASRock 2013-08-21 14:46 - 2013-08-21 14:46 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (2).exe 2013-08-21 14:35 - 2013-08-21 14:35 - 04820216 _____ C:\Users\Christain\Downloads\cfosspeed-v904 (1).exe 2013-08-21 14:32 - 2013-08-21 14:32 - 00003908 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-21 12:42 - 2013-02-13 03:59 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2013-08-21 11:40 - 2012-10-12 22:20 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-21 11:40 - 2012-10-12 22:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-21 11:40 - 2012-03-10 15:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-21 11:28 - 2013-08-21 11:28 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-08-21 11:28 - 2012-03-16 19:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-08-21 11:26 - 2012-10-04 16:49 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-08-21 11:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-08-21 11:25 - 2013-05-29 20:04 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-08-21 02:05 - 2012-03-10 15:06 - 00000000 ____D C:\Users\Christain 2013-08-21 00:50 - 2012-11-11 01:14 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1094274934-3104664694-3043791998-1000Core.job 2013-08-20 20:29 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-19 12:57 - 2012-03-10 16:46 - 00000000 ____D C:\Users\Christain\AppData\Roaming\TS3Client 2013-08-19 12:56 - 2012-04-07 22:19 - 00000000 ____D C:\Windows\Minidump 2013-08-19 12:56 - 2012-03-10 14:53 - 00000000 ____D C:\Windows\Panther 2013-08-19 12:54 - 2013-08-19 12:54 - 04429440 _____ (Piriform Ltd) C:\Users\Christain\Downloads\ccsetup404.exe 2013-08-19 00:00 - 2012-03-10 15:59 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Skype 2013-08-18 23:02 - 2013-08-21 11:21 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-18 23:02 - 2013-08-21 11:21 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00458528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00388384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-18 23:02 - 2013-08-21 11:21 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-18 21:34 - 2013-08-21 11:26 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-18 21:34 - 2013-08-21 11:26 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-18 21:34 - 2013-08-21 11:26 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-18 14:58 - 2013-08-18 14:58 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-08-17 21:25 - 2013-08-17 21:25 - 00000000 ____D C:\Users\Christain\Neuer Ordner 2013-08-17 07:30 - 2013-08-21 11:26 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-15 16:28 - 2013-08-15 16:21 - 100751136 _____ C:\Users\Christain\Downloads\gapps-jb-20130812-signed.zip 2013-08-15 14:28 - 2012-03-10 16:46 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2013-08-15 11:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-15 10:05 - 2012-07-17 17:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-08-15 10:03 - 2013-08-15 10:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzp1endpt_01009.Wdf 2013-08-15 10:02 - 2012-07-17 17:01 - 00000000 ____D C:\ProgramData\Razer 2013-08-14 20:38 - 2013-08-14 20:37 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 20:37 - 2012-03-14 18:30 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 20:41 - 2013-07-29 09:44 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-08-08 09:34 - 2013-08-08 09:34 - 00000000 ____D C:\NvidiaLogging 2013-08-07 20:50 - 2012-03-10 15:18 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Mozilla 2013-07-30 20:35 - 2012-03-10 16:08 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Origin 2013-07-30 20:35 - 2012-03-10 16:08 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Origin 2013-07-29 13:01 - 2013-07-16 22:03 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Skyrim 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Battle.net 2013-07-29 09:44 - 2013-07-29 09:44 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Blizzard Entertainment 2013-07-29 09:43 - 2013-07-29 09:43 - 04826568 _____ (Blizzard Entertainment) C:\Users\Christain\Downloads\Battle.net-Beta-Setup-deDE.exe 2013-07-28 17:36 - 2012-11-11 01:14 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Google 2013-07-28 15:22 - 2013-07-28 15:22 - 00000000 ____D C:\Users\Christain\Downloads\skse_1_06_16 2013-07-28 15:21 - 2013-07-28 15:21 - 00471625 _____ C:\Users\Christain\Downloads\skse_1_06_16.7z 2013-07-28 13:00 - 2013-07-28 13:00 - 00000000 ____D C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g 2013-07-28 12:55 - 2013-07-28 12:55 - 01779361 _____ C:\Users\Christain\Downloads\enbseries_skyrim_v13713.zip 2013-07-28 12:53 - 2013-07-28 12:53 - 00662474 _____ C:\Users\Christain\Downloads\Option A FULL - V1_4g - for ENBSeries 13_7_13-30936-1-4g.7z 2013-07-28 12:47 - 2013-01-06 19:24 - 00000000 ____D C:\Users\Christain\Documents\Witcher 2 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\Christain\Documents\Nexus Mod Manager 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Black_Tree_Gaming 2013-07-28 12:45 - 2013-07-28 12:45 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2013-07-28 12:44 - 2013-07-28 12:44 - 04120736 _____ (Black Tree Gaming ) C:\Users\Christain\Downloads\Nexus Mod Manager-0.45.5.exe 2013-07-27 20:23 - 2012-04-22 00:28 - 00000000 ____D C:\Users\Christain\Handy 2013-07-27 14:44 - 2013-07-27 14:43 - 00000000 ____D C:\Users\Christain\Downloads\winmd5free 2013-07-27 14:40 - 2013-07-27 14:35 - 00000000 ____D C:\Users\Christain\.android 2013-07-27 14:37 - 2013-07-27 14:37 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll 2013-07-27 14:37 - 2013-07-27 14:31 - 00000000 ____D C:\Program Files (x86)\Android SDK 2013-07-27 14:32 - 2013-07-27 14:32 - 00000000 ____D C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2013-07-27 14:31 - 2013-07-27 14:27 - 372285128 _____ C:\Users\Christain\Downloads\occam-jwr66v-factory-08d2b697.tgz 2013-07-27 14:30 - 2013-07-27 14:29 - 93502726 _____ (Google Inc.) C:\Users\Christain\Downloads\installer_r22.0.4-windows.exe 2013-07-27 14:28 - 2013-07-27 14:28 - 00268376 _____ C:\Users\Christain\Downloads\winmd5free.zip 2013-07-26 22:20 - 2013-07-26 22:20 - 00000000 ____D C:\Users\Christain\Documents\Square Enix 2013-07-26 20:34 - 2012-03-10 15:06 - 00000000 ___RD C:\Users\Christain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-26 07:13 - 2013-08-14 20:41 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-26 07:13 - 2013-08-14 20:41 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-26 07:13 - 2013-08-14 20:41 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-26 07:12 - 2013-08-14 20:41 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-26 07:12 - 2013-08-14 20:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-26 05:35 - 2013-08-14 20:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-26 05:13 - 2013-08-14 20:41 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-26 05:13 - 2013-08-14 20:41 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-26 05:12 - 2013-08-14 20:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-26 05:11 - 2013-08-14 20:41 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-26 05:11 - 2013-08-14 20:41 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-26 04:49 - 2013-08-14 20:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-26 04:39 - 2013-08-14 20:41 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-26 03:59 - 2013-08-14 20:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-25 21:02 - 2013-07-16 20:40 - 00000000 ____D C:\Users\Christain\Documents\Shiner 2013-07-25 11:25 - 2013-08-14 17:57 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-25 10:57 - 2013-08-14 17:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-25 05:38 - 2013-07-25 05:38 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\Christain\Documents\Robot Entertainment 2013-07-24 20:40 - 2013-07-24 20:40 - 00000000 ____D C:\Users\CHRIST~1\AppData\Local\Robot Entertainment ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-14 12:14 ==================== End Of Log ============================ --- --- --- Hoffe nun das alles Sauber ist^^ Welches Antivirus Programm empfehlt ihr denn? Kenn neber Antivir als Kostenfreie Sofware nur noch Avast. Und nochmal Danke für deine Hilfe |
22.08.2013, 11:51 | #8 |
/// the machine /// TB-Ausbilder | Qv06 enfternt oder doch nicht? Adobe und Firefox updaten. Avast geht in Ordnung. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
22.08.2013, 13:05 | #9 |
| Qv06 enfternt oder doch nicht? Super vielen Dank für deine sehr ausführliche Hilfe. Und die Tipps sind schon teilweise umgesetzt Wünsch dir noch einen schönen Nachmittag und viel Erfolg bei deinem Studium. MFG |
22.08.2013, 13:29 | #10 |
/// the machine /// TB-Ausbilder | Qv06 enfternt oder doch nicht? Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Qv06 enfternt oder doch nicht? |
antivir, empfehlung, entfernt, geändert, guten, interne, internet, logfile, minute, neu, neue, nicht mehr, nichts, pup.dealply, pup.dealply.a, pup.optional.dealply, pup.optional.dealply.a, pup.optional.sweetim, richtig, seite, suchmaschine, thread, trojaner/virus |