|
Log-Analyse und Auswertung: Firefox öffnet verschiedene seiten in unregelmäsigen abständen.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
06.09.2013, 18:03 | #1 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen. Hallo Leute, Ich habe mal wieder ein kleineres Problem, und zwar öffnen sich in meinen Firefox Browser in Unterschiedlichen Zeit abständen Seiten die mir Programme zum Handeln an Börsen zu sehr hohen Preisen verkaufen wollen: Beispiele: es wird folgende URL aufgerufen: hxxp://7.rotxxator.wigetmedia.coxxm/servlet/ajrxxotator/319235/0/vh?ajecscp=137848xx6133410&z=wiget&dim=79059&kw=&click= ( XX als schutz vorm öffnen hinzugefügt) und dann werde ich auf solche seiten hier weitergeleitet. Binaren Pilot oder hxxp://lp.dr-diexxxter-schulz.coxxm/ac/s.html?engsec=15 ( XX als schutz vorm öffnen hinzugefügt) hoffe ihr könnt mir irgendwie helfen. Mein System: Windows 7 Ultimate x64 Virenscanner: Kaspersky Internet Security 2013 , Malewarebytes, Spybot S&D Was ich schon ohne erfolg Probiert habe ist: Virenscan, Scan mit Malewarebytes, Scan mit S&D , Combofix Scan, und scans mit verschiedenen Rootkit Scannern ( Kaspersky Anti Rootkit , Malewarebytes Anti Rootkit) Geändert von SilverDrag0n (06.09.2013 um 18:19 Uhr) |
06.09.2013, 18:15 | #2 |
/// the machine /// TB-Ausbilder | Firefox öffnet verschiedene seiten in unregelmäsigen abständen. hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
06.09.2013, 18:34 | #3 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen.FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2013 Ran by Silverdrag0n (administrator) on SILVERDRAG0N-LE on 06-09-2013 19:24:42 Running from C:\Users\Silverdrag0n\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) I:\Programme\Advanced SystemCare 6\ASCService.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Yuna Software) C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer_Service.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Safer Networking Ltd.) I:\Programme\Spybot - Search & Destroy\SDWinSec.exe (VMware, Inc.) I:\Programme\VMware\vmware-authd.exe (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () I:\Programme\VMware\vmware-hostd.exe (TeamViewer GmbH) I:\Programme\Team Viewer\tv_w32.exe (TeamViewer GmbH) I:\Programme\Team Viewer\tv_x64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (IObit) I:\Programme\Advanced SystemCare 6\ASCTray.exe (Spotify Ltd) C:\Users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (element code project) I:\Programme\Growl\Growl.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Yuna Software) C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\Messenger Plus! for Skype.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (VMware, Inc.) I:\Programme\VMware\vmware-tray.exe (Elaborate Bytes AG) I:\Programme\VirtualCloneDrive\VCDDaemon.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sysinternals - www.sysinternals.com) C:\Users\Silverdrag0n\Desktop\Process Explorer\procexp.exe (Sysinternals - www.sysinternals.com) C:\Users\SILVER~1\AppData\Local\Temp\procexp64.exe (Mozilla Corporation) I:\Programme\Mozilla Firefox\firefox.exe (The Phoenix Firestorm Project, Inc.) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe (Vivox Inc.) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\SLVoice.exe () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\SLPlugin.exe () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\SLPlugin.exe () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\SLPlugin.exe () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\SLPlugin.exe (Mozilla Corporation) I:\Programme\Mozilla Firefox\plugin-container.exe (Microsoft Corporation) C:\Windows\regedit.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-09-24] (ELAN Microelectronics Corp.) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM\...\Policies\Explorer: [NoDrives] 0 HKCU\...\Run: [Advanced SystemCare 6] - I:\Programme\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit) HKCU\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2013-04-11] () HKCU\...\Run: [Spotify Web Helper] - C:\Users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-17] (Spotify Ltd) HKCU\...\Run: [Growl] - I:\Programme\Growl\Growl.exe [3817472 2012-03-21] (element code project) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Policies\Explorer: [NoDrives] 0 HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1092688 2011-03-31] (Dritek System Inc.) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-09-04] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [vmware-tray] - I:\Programme\VMware\vmware-tray.exe [104528 2013-02-26] (VMware, Inc.) HKLM-x32\...\Run: [vmware-tray.exe] - I:\Programme\VMware\vmware-tray.exe [104528 2013-02-26] (VMware, Inc.) HKLM-x32\...\Run: [VirtualCloneDrive] - I:\Programme\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [MessengerPlusForSkypeService] - C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-05-07] (Yuna Software) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation) AppInit_DLLs: , C:\Windows\system32\nvinitx.dll [168616 2013-08-18] (NVIDIA Corporation) AppInit_DLLs-x32: m&, C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-18] (NVIDIA Corporation) SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - I:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - I:\Programme\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - I:\Programme\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - I:\Programme\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - I:\Programme\VLC\npvlc.dll (VideoLAN) FF Extension: statusbardate - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\statusbardate@webspirited.com.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{daf44bf7-a45e-4450-979c-91cf07434c3d}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF StartMenuInternet: FIREFOX.EXE - I:\Programme\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= R2 AdvancedSystemCareService6; I:\Programme\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-09-04] (Kaspersky Lab ZAO) R2 MsgPlusService; C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-05-07] (Yuna Software) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-08-23] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) R2 SBSDWSCService; I:\Programme\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) R2 TeamViewer8; I:\Programme\Team Viewer\TeamViewer_Service.exe [5071712 2013-09-02] (TeamViewer GmbH) R2 VMAuthdService; I:\Programme\VMware\vmware-authd.exe [87120 2013-02-26] (VMware, Inc.) R2 VMwareHostd; I:\Programme\VMware\vmware-hostd.exe [13242960 2013-02-26] () R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-20] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-04] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.) R2 WinRing0_1_2_0; C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.sys [14544 2013-09-03] (OpenLibSys.org) S3 catchme; No ImagePath U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-04] (Kaspersky Lab ZAO) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 Tortilla; system32\DRIVERS\tortilla.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 XFDriver64; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-06 19:23 - 2013-09-06 19:23 - 01948360 _____ (Farbar) C:\Users\Silverdrag0n\Desktop\FRST64.exe 2013-09-06 14:43 - 2013-09-06 14:43 - 00016517 _____ C:\Users\Silverdrag0n\Desktop\firefox.exe.txt 2013-09-06 14:21 - 2013-09-06 14:22 - 00000388 _____ C:\Windows\LkmdfCoInst.log 2013-09-06 14:16 - 2013-09-06 14:22 - 00000202 _____ C:\Windows\setupact.log 2013-09-06 14:16 - 2013-09-06 14:16 - 00000000 _____ C:\Windows\setuperr.log 2013-09-05 23:20 - 2012-04-09 16:27 - 00190480 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll 2013-09-05 23:20 - 2012-04-09 16:27 - 00141328 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll 2013-09-05 23:11 - 2013-09-05 23:13 - 26788960 _____ C:\Users\Silverdrag0n\Downloads\WualaSetup.exe 2013-09-05 21:32 - 2013-09-05 21:32 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Silverdrag0n\Downloads\KillBox.exe 2013-09-05 01:59 - 2013-09-03 21:57 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130905-015938.backup 2013-09-05 01:55 - 2013-09-03 21:57 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130905-015555.backup 2013-09-05 01:39 - 2013-09-05 01:39 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-05 01:37 - 2013-09-05 01:38 - 23003252 _____ C:\Users\Silverdrag0n\Downloads\vlc-2.0.8-win32.exe 2013-09-05 01:36 - 2013-09-05 01:36 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim(1).exe 2013-09-05 00:02 - 2013-09-05 21:44 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\hijackthis 2013-09-04 22:15 - 2013-09-04 22:16 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim.exe 2013-09-04 10:58 - 2013-09-06 18:36 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Windows\ELAMBKUP 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-04 10:58 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll 2013-09-04 10:57 - 2013-09-04 11:20 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-09-04 10:57 - 2013-09-04 11:20 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-09-04 10:50 - 2013-09-04 10:53 - 00427934 _____ C:\Users\Silverdrag0n\Downloads\kavremvr 2013-09-04 10-50-36 (pid 5304).log 2013-09-04 10:50 - 2013-09-04 10:50 - 04894912 _____ (Kaspersky Lab ZAO) C:\Users\Silverdrag0n\Downloads\kavremover.exe 2013-09-04 00:30 - 2013-09-04 00:56 - 176212264 _____ (Kaspersky Lab) C:\Users\Silverdrag0n\Downloads\kis13.0.1.4190de-de.exe 2013-09-04 00:30 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-09-04 00:30 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-09-04 00:23 - 2013-09-04 00:23 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\system32\NV 2013-09-04 00:18 - 2013-09-04 00:18 - 00001360 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-04 00:18 - 2013-09-04 00:18 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-04 00:17 - 2013-09-04 00:22 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-04 00:17 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 01041696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-09-04 00:17 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-09-04 00:17 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-09-04 00:16 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-09-04 00:16 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2013-09-04 00:16 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-09-03 23:30 - 2013-09-03 23:30 - 00165054 _____ C:\Users\Silverdrag0n\Downloads\IntelCoreSeries.zip 2013-09-03 23:30 - 2013-09-03 23:30 - 00086061 _____ C:\Users\Silverdrag0n\Downloads\PowerStatusGadget.zip 2013-09-03 23:29 - 2013-09-04 00:02 - 239467888 _____ (NVIDIA Corporation) C:\Users\Silverdrag0n\Downloads\326.80-notebook-win8-win7-64bit-international-beta.exe 2013-09-03 23:29 - 2013-09-03 23:29 - 00106523 _____ C:\Users\Silverdrag0n\Downloads\GPUObserver.zip 2013-09-03 20:00 - 2013-09-05 21:43 - 00000057 _____ C:\Users\Silverdrag0n\Desktop\marionette.log 2013-09-03 19:59 - 2013-09-03 20:00 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Mozilla 2013-09-03 19:59 - 2013-09-03 19:59 - 00000767 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-03 19:59 - 2013-09-03 19:59 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-03 19:04 - 2013-09-03 19:04 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Process Explorer 2013-09-03 13:34 - 2013-09-03 13:34 - 00002938 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2013-09-03 13:27 - 2013-09-06 14:21 - 00242317 _____ C:\Windows\WindowsUpdate.log 2013-09-02 23:21 - 2013-09-02 23:21 - 04454952 _____ (Piriform Ltd) C:\Users\Silverdrag0n\Downloads\ccsetup405.exe 2013-09-02 22:33 - 2013-09-02 22:44 - 56514904 _____ (Logitech Inc.) C:\Users\Silverdrag0n\Downloads\LGS_8.50.281_x64_Logitech.exe 2013-09-02 21:50 - 2013-09-03 19:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-08-30 18:05 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll 2013-08-30 12:20 - 2013-08-30 12:20 - 00243651 _____ C:\Users\Silverdrag0n\Downloads\Bestellung_bei_ESPRIT.zip 2013-08-26 12:03 - 2013-08-26 12:03 - 00001496 _____ C:\Users\Silverdrag0n\Desktop\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe.lnk 2013-08-25 23:56 - 2013-08-28 22:30 - 00007184 _____ C:\Users\Silverdrag0n\Desktop\BuildFirestorm_new_deutsch.txt 2013-08-24 00:14 - 2013-08-24 00:37 - 98688206 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part3.rar 2013-08-23 23:39 - 2013-08-24 00:10 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part2.rar 2013-08-23 22:58 - 2013-08-23 23:38 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part1.rar 2013-08-22 00:06 - 2013-08-22 20:41 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\ebooks 2013-08-21 17:53 - 2008-10-06 14:55 - 07696384 _____ (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll 2013-08-21 17:26 - 2013-08-21 17:29 - 21591617 _____ C:\Users\Silverdrag0n\Downloads\HPX-3090M_USB-Driver_XP_VISTA_WIN7(1).zip 2013-08-21 12:46 - 2013-08-21 12:47 - 10356589 _____ C:\Users\Silverdrag0n\Downloads\cmake-2.8.11.2-win32-x86.exe 2013-08-20 15:39 - 2013-08-20 15:39 - 00057376 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00644968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00028008 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 13030912 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 10811904 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 05905904 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 05358016 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 03511296 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 01040384 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00931840 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00575488 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00542720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00515568 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00442352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00399856 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 00330752 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00254960 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00223664 _____ C:\Windows\system32\Gfxres.th-TH.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00210106 _____ C:\Windows\system32\Gfxres.el-GR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00194245 _____ C:\Windows\system32\Gfxres.ru-RU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00175104 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00172016 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00166170 _____ C:\Windows\system32\Gfxres.ar-SA.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00163421 _____ C:\Windows\system32\Gfxres.ja-JP.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00159008 _____ C:\Windows\system32\Gfxres.he-IL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00149682 _____ C:\Windows\system32\Gfxres.it-IT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00148042 _____ C:\Windows\system32\Gfxres.ko-KR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147393 _____ C:\Windows\system32\Gfxres.de-DE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147288 _____ C:\Windows\system32\Gfxres.es-ES.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00146004 _____ C:\Windows\system32\Gfxres.ro-RO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00145491 _____ C:\Windows\system32\Gfxres.fr-FR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144645 _____ C:\Windows\system32\Gfxres.tr-TR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144260 _____ C:\Windows\system32\Gfxres.pt-BR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144020 _____ C:\Windows\system32\Gfxres.nl-NL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00143932 _____ C:\Windows\system32\Gfxres.hu-HU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142882 _____ C:\Windows\system32\Gfxres.sv-SE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142877 _____ C:\Windows\system32\Gfxres.pt-PT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142717 _____ C:\Windows\system32\Gfxres.pl-PL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00142289 _____ C:\Windows\system32\Gfxres.cs-CZ.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142008 _____ C:\Windows\system32\Gfxres.fi-FI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141838 _____ C:\Windows\system32\Gfxres.sk-SK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141049 _____ C:\Windows\system32\Gfxres.hr-HR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137889 _____ C:\Windows\system32\Gfxres.sl-SI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137784 _____ C:\Windows\system32\Gfxres.nb-NO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137141 _____ C:\Windows\system32\Gfxres.da-DK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2013-08-20 15:24 - 2013-08-20 15:24 - 00126300 _____ C:\Windows\system32\Gfxres.zh-TW.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00124650 _____ C:\Windows\system32\Gfxres.zh-CN.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3062.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00080384 _____ C:\Windows\system32\igdde64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00017078 _____ C:\Windows\system32\iglhxs64.vp 2013-08-20 15:24 - 2013-08-20 15:24 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2013-08-20 13:52 - 2013-08-20 13:52 - 86949888 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 05005312 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00065536 _____ C:\Windows\system32\config\SAM.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit 2013-08-20 11:46 - 2013-08-20 11:46 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mirc732.exe 2013-08-20 11:44 - 2013-08-20 11:44 - 01105460 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mIRC.exe 2013-08-20 10:59 - 2013-08-20 16:05 - 00001223 _____ C:\Users\Silverdrag0n\Desktop\SilverScriptV.1.0.1.lnk 2013-08-19 23:28 - 2013-08-19 23:28 - 04539462 _____ C:\Users\Silverdrag0n\Downloads\slvoice-4.5.0009.17865-windows-20130214.tar.bz2 2013-08-19 20:30 - 2013-08-19 23:12 - 1391998657 _____ (Acresso Software Inc.) C:\Users\Silverdrag0n\Downloads\TS3_1.55.4.0220xx_update.exe 2013-08-19 14:41 - 2013-08-19 14:41 - 00000000 ____D C:\ProgramData\EA Core 2013-08-19 14:25 - 2013-08-19 14:21 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll 2013-08-19 14:24 - 2013-08-19 14:24 - 00001182 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk 2013-08-18 21:43 - 2013-08-18 21:43 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Electronic Arts 2013-08-16 21:31 - 2013-08-16 21:31 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal Prelude 1.1.5 2013-08-15 20:22 - 2013-08-16 21:55 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Origin 2013-08-15 20:22 - 2013-08-15 20:38 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Origin 2013-08-15 20:03 - 2013-08-18 22:27 - 00000000 ____D C:\ProgramData\Origin 2013-08-15 20:03 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-08-14 12:59 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 12:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 12:59 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 12:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 12:59 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 12:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 12:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 12:59 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 12:59 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 12:58 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 12:58 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 12:58 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 12:58 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 12:58 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 12:37 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 12:37 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 12:36 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 12:36 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 12:36 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 12:36 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 12:36 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 12:36 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 12:36 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 12:36 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 12:36 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 12:36 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 12:36 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 12:36 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 12:36 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 12:36 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 12:36 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 12:36 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 12:36 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 12:35 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 12:35 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-13 00:14 - 2013-08-13 00:14 - 00009728 _____ C:\Windows\SysWOW64\BASSMOD.dll 2013-08-12 12:18 - 2013-08-12 12:18 - 00194885 _____ C:\Users\Silverdrag0n\Downloads\hjsplit.zip 2013-08-09 18:46 - 2013-08-09 18:46 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2013-08-08 21:42 - 2013-08-08 22:21 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\BIT.TRIP RUNNER 2013-08-08 21:41 - 2013-08-09 18:47 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-08-08 21:41 - 2013-08-08 21:41 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00000000 ____D C:\Program Files (x86)\OpenAL 2013-08-07 20:21 - 2013-08-07 20:24 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Beat Hazard ==================== One Month Modified Files and Folders ======= 2013-09-06 19:24 - 2013-09-06 19:24 - 00000000 ____D C:\FRST 2013-09-06 19:23 - 2013-09-06 19:23 - 01948360 _____ (Farbar) C:\Users\Silverdrag0n\Desktop\FRST64.exe 2013-09-06 19:21 - 2013-07-18 19:27 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\FirestormOS 2013-09-06 18:36 - 2013-09-04 10:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-06 14:43 - 2013-09-06 14:43 - 00016517 _____ C:\Users\Silverdrag0n\Desktop\firefox.exe.txt 2013-09-06 14:24 - 2009-07-14 06:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-06 14:24 - 2009-07-14 06:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-06 14:22 - 2013-09-06 14:21 - 00000388 _____ C:\Windows\LkmdfCoInst.log 2013-09-06 14:22 - 2013-09-06 14:16 - 00000202 _____ C:\Windows\setupact.log 2013-09-06 14:21 - 2013-09-03 13:27 - 00242317 _____ C:\Windows\WindowsUpdate.log 2013-09-06 14:21 - 2013-04-05 14:30 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-09-06 14:17 - 2013-04-15 00:20 - 00000000 ____D C:\ProgramData\VMware 2013-09-06 14:16 - 2013-09-06 14:16 - 00000000 _____ C:\Windows\setuperr.log 2013-09-06 14:16 - 2013-04-05 13:49 - 00000000 ____D C:\Program Files (x86)\Wuala OverlayIcons 2013-09-06 14:16 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-06 14:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-05 23:20 - 2013-04-05 13:00 - 00000905 _____ C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk 2013-09-05 23:13 - 2013-09-05 23:11 - 26788960 _____ C:\Users\Silverdrag0n\Downloads\WualaSetup.exe 2013-09-05 23:10 - 2013-04-05 13:00 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Wuala 2013-09-05 23:04 - 2013-04-07 12:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-09-05 22:35 - 2013-04-23 11:40 - 00000695 _____ C:\Windows\ULead32.ini 2013-09-05 21:44 - 2013-09-05 00:02 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\hijackthis 2013-09-05 21:43 - 2013-09-03 20:00 - 00000057 _____ C:\Users\Silverdrag0n\Desktop\marionette.log 2013-09-05 21:32 - 2013-09-05 21:32 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Silverdrag0n\Downloads\KillBox.exe 2013-09-05 03:22 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Visual Studio 2010 2013-09-05 03:02 - 2013-04-15 09:16 - 00000638 __RSH C:\Users\Silverdrag0n\ntuser.pol 2013-09-05 03:02 - 2013-04-05 10:29 - 00000000 ____D C:\Users\Silverdrag0n 2013-09-05 02:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources 2013-09-05 01:42 - 2013-04-05 12:47 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Notepad++ 2013-09-05 01:39 - 2013-09-05 01:39 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-05 01:38 - 2013-09-05 01:37 - 23003252 _____ C:\Users\Silverdrag0n\Downloads\vlc-2.0.8-win32.exe 2013-09-05 01:37 - 2013-05-28 23:52 - 00000000 ___RD C:\Users\Silverdrag0n\Desktop\Tools 2013-09-05 01:36 - 2013-09-05 01:36 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim(1).exe 2013-09-04 23:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2013-09-04 22:16 - 2013-09-04 22:15 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim.exe 2013-09-04 20:53 - 2013-04-05 22:24 - 00700816 _____ C:\Windows\system32\perfh007.dat 2013-09-04 20:53 - 2013-04-05 22:24 - 00150104 _____ C:\Windows\system32\perfc007.dat 2013-09-04 20:53 - 2009-07-14 07:13 - 01624996 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-04 11:20 - 2013-09-04 10:57 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-09-04 11:20 - 2013-09-04 10:57 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-09-04 11:20 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2013-09-04 11:20 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Windows\ELAMBKUP 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-04 10:53 - 2013-09-04 10:50 - 00427934 _____ C:\Users\Silverdrag0n\Downloads\kavremvr 2013-09-04 10-50-36 (pid 5304).log 2013-09-04 10:50 - 2013-09-04 10:50 - 04894912 _____ (Kaspersky Lab ZAO) C:\Users\Silverdrag0n\Downloads\kavremover.exe 2013-09-04 10:26 - 2013-04-05 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-09-04 01:15 - 2013-04-05 11:06 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Mozilla 2013-09-04 00:56 - 2013-09-04 00:30 - 176212264 _____ (Kaspersky Lab) C:\Users\Silverdrag0n\Downloads\kis13.0.1.4190de-de.exe 2013-09-04 00:31 - 2013-04-05 11:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-09-04 00:23 - 2013-09-04 00:23 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-04 00:22 - 2013-09-04 00:17 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-04 00:22 - 2013-07-17 10:16 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\NVIDIA 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\system32\NV 2013-09-04 00:20 - 2013-05-19 18:15 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-04 00:18 - 2013-09-04 00:18 - 00001360 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-04 00:18 - 2013-09-04 00:18 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-04 00:18 - 2013-04-05 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-09-04 00:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-09-04 00:02 - 2013-09-03 23:29 - 239467888 _____ (NVIDIA Corporation) C:\Users\Silverdrag0n\Downloads\326.80-notebook-win8-win7-64bit-international-beta.exe 2013-09-03 23:30 - 2013-09-03 23:30 - 00165054 _____ C:\Users\Silverdrag0n\Downloads\IntelCoreSeries.zip 2013-09-03 23:30 - 2013-09-03 23:30 - 00086061 _____ C:\Users\Silverdrag0n\Downloads\PowerStatusGadget.zip 2013-09-03 23:29 - 2013-09-03 23:29 - 00106523 _____ C:\Users\Silverdrag0n\Downloads\GPUObserver.zip 2013-09-03 23:24 - 2013-04-15 00:24 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\VMware 2013-09-03 23:24 - 2013-04-15 00:24 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\VMware 2013-09-03 23:16 - 2013-04-05 10:48 - 00000184 _____ C:\Windows\LMv4.UNI 2013-09-03 23:16 - 2013-04-05 10:48 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-09-03 22:27 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-09-03 22:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-09-03 21:57 - 2013-09-05 01:59 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130905-015938.backup 2013-09-03 21:57 - 2013-09-05 01:55 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.20130905-015555.backup 2013-09-03 21:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-09-03 20:00 - 2013-09-03 19:59 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Mozilla 2013-09-03 19:59 - 2013-09-03 19:59 - 00000767 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-03 19:59 - 2013-09-03 19:59 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-03 19:53 - 2013-09-02 21:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-09-03 19:45 - 2013-04-19 19:50 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Spotify 2013-09-03 19:04 - 2013-09-03 19:04 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Process Explorer 2013-09-03 15:17 - 2013-04-07 11:24 - 00000688 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-03 13:34 - 2013-09-03 13:34 - 00002938 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2013-09-02 23:21 - 2013-09-02 23:21 - 04454952 _____ (Piriform Ltd) C:\Users\Silverdrag0n\Downloads\ccsetup405.exe 2013-09-02 23:21 - 2013-04-05 12:14 - 00000673 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-02 22:53 - 2013-04-05 14:23 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2013-09-02 22:51 - 2013-04-05 14:03 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Logishrd 2013-09-02 22:44 - 2013-09-02 22:33 - 56514904 _____ (Logitech Inc.) C:\Users\Silverdrag0n\Downloads\LGS_8.50.281_x64_Logitech.exe 2013-08-31 12:25 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Winamp 2013-08-30 13:52 - 2013-04-05 19:47 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Last.fm 2013-08-30 12:20 - 2013-08-30 12:20 - 00243651 _____ C:\Users\Silverdrag0n\Downloads\Bestellung_bei_ESPRIT.zip 2013-08-30 11:31 - 2013-06-17 00:11 - 00000752 _____ C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-08-30 11:30 - 2013-07-05 20:55 - 00000788 _____ C:\Users\Public\Desktop\Uninstaller.lnk 2013-08-30 11:30 - 2013-06-17 00:11 - 00000759 _____ C:\Users\Public\Desktop\Advanced SystemCare 6.lnk 2013-08-28 22:30 - 2013-08-25 23:56 - 00007184 _____ C:\Users\Silverdrag0n\Desktop\BuildFirestorm_new_deutsch.txt 2013-08-27 14:49 - 2013-07-07 19:19 - 00000094 _____ C:\Users\Silverdrag0n\Desktop\PoenixG.Doc_pw.txt 2013-08-27 13:48 - 2013-04-19 19:52 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Spotify 2013-08-27 00:02 - 2013-04-25 00:50 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Xfire 2013-08-26 23:41 - 2013-06-17 00:49 - 00007605 _____ C:\Users\SILVER~1\AppData\Local\Resmon.ResmonCfg 2013-08-26 23:33 - 2013-04-11 22:13 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\vlc 2013-08-26 12:03 - 2013-08-26 12:03 - 00001496 _____ C:\Users\Silverdrag0n\Desktop\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe.lnk 2013-08-24 00:37 - 2013-08-24 00:14 - 98688206 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part3.rar 2013-08-24 00:10 - 2013-08-23 23:39 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part2.rar 2013-08-23 23:38 - 2013-08-23 22:58 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part1.rar 2013-08-22 20:41 - 2013-08-22 00:06 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\ebooks 2013-08-21 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system 2013-08-21 17:29 - 2013-08-21 17:26 - 21591617 _____ C:\Users\Silverdrag0n\Downloads\HPX-3090M_USB-Driver_XP_VISTA_WIN7(1).zip 2013-08-21 16:27 - 2013-04-07 11:54 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\TeamViewer 2013-08-21 12:48 - 2013-04-07 10:47 - 00000000 ____D C:\Program Files (x86)\CMake 2.8 2013-08-21 12:47 - 2013-08-21 12:46 - 10356589 _____ C:\Users\Silverdrag0n\Downloads\cmake-2.8.11.2-win32-x86.exe 2013-08-20 17:18 - 2013-04-12 20:29 - 00123344 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-08-20 16:05 - 2013-08-20 10:59 - 00001223 _____ C:\Users\Silverdrag0n\Desktop\SilverScriptV.1.0.1.lnk 2013-08-20 15:39 - 2013-08-20 15:39 - 00057376 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00644968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00028008 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2013-08-20 15:33 - 2013-09-04 00:30 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-08-20 15:32 - 2013-09-04 00:30 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-08-20 15:32 - 2013-09-04 00:16 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 13030912 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 10811904 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 05905904 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 05358016 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 03511296 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 01040384 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00931840 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00575488 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00542720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00515568 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00442352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00399856 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 00330752 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00254960 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00223664 _____ C:\Windows\system32\Gfxres.th-TH.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00210106 _____ C:\Windows\system32\Gfxres.el-GR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00194245 _____ C:\Windows\system32\Gfxres.ru-RU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00175104 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00172016 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00166170 _____ C:\Windows\system32\Gfxres.ar-SA.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00163421 _____ C:\Windows\system32\Gfxres.ja-JP.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00159008 _____ C:\Windows\system32\Gfxres.he-IL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00149682 _____ C:\Windows\system32\Gfxres.it-IT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00148042 _____ C:\Windows\system32\Gfxres.ko-KR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147393 _____ C:\Windows\system32\Gfxres.de-DE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147288 _____ C:\Windows\system32\Gfxres.es-ES.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00146004 _____ C:\Windows\system32\Gfxres.ro-RO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00145491 _____ C:\Windows\system32\Gfxres.fr-FR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144645 _____ C:\Windows\system32\Gfxres.tr-TR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144260 _____ C:\Windows\system32\Gfxres.pt-BR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144020 _____ C:\Windows\system32\Gfxres.nl-NL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00143932 _____ C:\Windows\system32\Gfxres.hu-HU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142882 _____ C:\Windows\system32\Gfxres.sv-SE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142877 _____ C:\Windows\system32\Gfxres.pt-PT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142717 _____ C:\Windows\system32\Gfxres.pl-PL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00142289 _____ C:\Windows\system32\Gfxres.cs-CZ.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142008 _____ C:\Windows\system32\Gfxres.fi-FI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141838 _____ C:\Windows\system32\Gfxres.sk-SK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141049 _____ C:\Windows\system32\Gfxres.hr-HR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137889 _____ C:\Windows\system32\Gfxres.sl-SI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137784 _____ C:\Windows\system32\Gfxres.nb-NO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137141 _____ C:\Windows\system32\Gfxres.da-DK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2013-08-20 15:24 - 2013-08-20 15:24 - 00126300 _____ C:\Windows\system32\Gfxres.zh-TW.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00124650 _____ C:\Windows\system32\Gfxres.zh-CN.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3062.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00080384 _____ C:\Windows\system32\igdde64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00017078 _____ C:\Windows\system32\iglhxs64.vp 2013-08-20 15:24 - 2013-08-20 15:24 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2013-08-20 15:24 - 2012-03-19 16:31 - 12615680 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll 2013-08-20 15:24 - 2012-03-19 16:26 - 11049472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll 2013-08-20 15:24 - 2012-03-19 16:22 - 12858368 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll 2013-08-20 15:24 - 2012-03-19 16:11 - 11175424 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00442880 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00064000 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2013-08-20 14:16 - 2013-07-19 22:36 - 00003196 _____ C:\Windows\System32\Tasks\Driver Booster Update 2013-08-20 13:52 - 2013-08-20 13:52 - 86949888 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 05005312 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00065536 _____ C:\Windows\system32\config\SAM.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit 2013-08-20 12:52 - 2013-04-05 10:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-20 11:46 - 2013-08-20 11:46 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mirc732.exe 2013-08-20 11:44 - 2013-08-20 11:44 - 01105460 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mIRC.exe 2013-08-19 23:28 - 2013-08-19 23:28 - 04539462 _____ C:\Users\Silverdrag0n\Downloads\slvoice-4.5.0009.17865-windows-20130214.tar.bz2 2013-08-19 23:12 - 2013-08-19 20:30 - 1391998657 _____ (Acresso Software Inc.) C:\Users\Silverdrag0n\Downloads\TS3_1.55.4.0220xx_update.exe 2013-08-19 14:41 - 2013-08-19 14:41 - 00000000 ____D C:\ProgramData\EA Core 2013-08-19 14:24 - 2013-08-19 14:24 - 00001182 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk 2013-08-19 14:21 - 2013-08-19 14:25 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-18 23:02 - 2013-09-04 00:16 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2013-08-18 23:02 - 2013-09-04 00:16 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-18 22:27 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Origin 2013-08-18 21:43 - 2013-08-18 21:43 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Electronic Arts 2013-08-18 21:34 - 2013-09-04 00:17 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 01041696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-18 21:34 - 2013-09-04 00:17 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-17 07:30 - 2013-09-04 00:17 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-16 21:55 - 2013-08-15 20:22 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Origin 2013-08-16 21:31 - 2013-08-16 21:31 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal Prelude 1.1.5 2013-08-16 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-16 18:36 - 2013-04-05 20:23 - 00000000 ____D C:\Windows\Panther 2013-08-15 20:38 - 2013-08-15 20:22 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Origin 2013-08-15 20:03 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-08-15 20:03 - 2013-04-11 22:10 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Spiele 2013-08-14 12:55 - 2013-04-05 13:42 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 00:14 - 2013-08-13 00:14 - 00009728 _____ C:\Windows\SysWOW64\BASSMOD.dll 2013-08-12 12:18 - 2013-08-12 12:18 - 00194885 _____ C:\Users\Silverdrag0n\Downloads\hjsplit.zip 2013-08-11 19:18 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\Documents\My Games 2013-08-09 18:47 - 2013-08-08 21:41 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-08-09 18:46 - 2013-08-09 18:46 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2013-08-08 22:21 - 2013-08-08 21:42 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\BIT.TRIP RUNNER 2013-08-08 21:41 - 2013-08-08 21:41 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2013-08-08 21:41 - 2013-08-08 21:41 - 00000000 ____D C:\Program Files (x86)\OpenAL 2013-08-07 20:24 - 2013-08-07 20:21 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Beat Hazard Files to move or delete: ==================== C:\Users\SILVER~1\AppData\Local\Temp\procexp64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2013-05-19 18:24] - [2011-02-25 08:19] - 2388992 ____A (Microsoft Corporation) 3510644520B93226E7033B7618FCAFF0 C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-04 21:16 ==================== End Of Log ============================ |
06.09.2013, 18:35 | #4 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen.Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-09-2013 Ran by Silverdrag0n at 2013-09-06 19:25:16 Running from C:\Users\Silverdrag0n\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Acer Crystal Eye Webcam (x32 Version: 1.5.3501.00) Acer ePower Management (x32 Version: 6.00.3010) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133) Advanced SystemCare 6 (x32 Version: 6.4) Alan Wake (x32) Alan Wake's American Nightmare (x32) Apple Application Support (x32 Version: 2.3) Apple Software Update (x32 Version: 2.1.3.127) BatteryBar (remove only) Beat Hazard (x32) Better Clothes Beta 1.4 (x32) BIT.TRIP RUNNER (x32) Boss Rally (x32) Broadcom Card Reader Driver Installer (Version: 14.8.2.2) CamStudio version 2.7 (x32 Version: 2.7) CCleaner (Version: 4.05) ClassicPro© v2.01 (x32 Version: 2.01) CMake 2.8, a cross-platform, open-source build system (x32 Version: 2.8.11.2) CPUID HWMonitor 1.22 Crossfire 1.9 (HKCU Version: 1.90.00.00) D3DX10 (x32 Version: 15.4.2368.0902) Dead Island (x32) Dead Island Riptide (x32) Die Sims™ 3 (x32 Version: 1.55.4) Die Sims™ 3 Late Night (x32 Version: 6.5.1) Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.13.1) Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86) Die Sims™ 3 Traumkarrieren (x32 Version: 4.10.1) dows Driver Package - Broadcom (k57nd60a) Net (10/15/2012 15.6.0.2) (Version: 10/15/2012 15.6.0.2) Drive Icon Changer 1.0 (x32) Driver Booster (x32 Version: v0.3.1) ETDWare PS/2-X64 11.14.1.3_WHQL (Version: 11.14.1.3) Fotogalerie (x32 Version: 16.4.3508.0205) Foxit Reader (x32 Version: 6.0.6.722) Fraps (remove only) (x32) Freelancer (x32) FTL version 1.03.3 (x32 Version: 1.03.3) GeForce Experience NvStream Client Components (Version: 0.1.87) Growl for Windows (x32 Version: 2.0.9001) HashCalc 2.02 (x32) HijackThis 1.99.1 (x32 Version: 1.99.1) Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2565057) (x32 Version: 1) Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (x32 Version: 1) ImgBurn (x32 Version: 2.5.7.0) Intel PROSet Wireless Intel(R) Management Engine Components (x32 Version: 8.1.0.1281) Intel(R) OpenCL CPU Runtime (x32) Intel(R) Processor Graphics (x32 Version: 9.17.10.2932) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398) Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0) Intel® PROSet/Wireless WiFi Software (Version: 15.03.1000.1637) Intel® Trusted Connect Service Client (Version: 1.24.738.1) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190) Last.fm Scrobbler 2.1.35 (x32) Launch Manager (x32 Version: 5.1.5) LIMBO (x32) Logitech Gaming Software (Version: 8.45.88) Logitech Gaming Software 8.50 (Version: 8.50.281) Lyrics Plugin for Winamp (x32 Version: 0.4) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mercurial 2.6.1 (64-bit) Messenger Plus! for Skype (x32 Version: 1.8.0.125) Metro 2033 (x32) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000) Microsoft DirectX SDK (June 2010) (x32 Version: 9.29.1962.0) Microsoft Game Studios Common Redistributables Pack 1 (x32 Version: 1.0.0) Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Help Viewer 1.0 (Version: 1.0.30319) Microsoft Help Viewer 1.1 (Version: 1.1.40219) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0) Microsoft Visual C++ Compilers 2010 Standard - enu - x86 (x32 Version: 10.0.40219) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.40219) Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.40219) Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Windows SDK .NET Framework Tools (30514) (Version: 7.1.30514) Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools (Version: 7.1.30514) Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.30514) Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.7600.0.30514) Microsoft Windows SDK for Windows 7 Common Utilities (30514) (Version: 7.1.30514) Microsoft Windows SDK for Windows 7 Headers and Libraries (30514) (Version: 7.1.30514) Microsoft Windows SDK for Windows 7 Samples (30514) (Version: 7.1.30514) Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514) (Version: 7.1.30514) Microsoft Windows SDK Intellisense and Reference Assemblies (30514) (Version: 7.1.30514) Microsoft Windows SDK MSHelp (30514) (Version: 7.1.30514) Microsoft Windows SDK Net Fx Interop Headers And Libraries (30514) (Version: 7.1.30514) Microsoft XML Parser (x32 Version: 8.20.8730.4) Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0) mIRC (x32 Version: 7.32) Morrowind (x32) Movie Maker (x32 Version: 16.4.3508.0205) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0) Mozilla Thunderbird 24.0 (x86 de) (x32 Version: 24.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) Nexus Mod Manager (Version: 0.45.5) Notepad++ (x32 Version: 6.4.5) NVIDIA GeForce Experience 1.6.1 (Version: 1.6.1) NVIDIA Grafiktreiber 326.80 (Version: 326.80) NVIDIA Install Application (Version: 2.1002.133.902) NVIDIA Optimus 8.3.14 (Version: 8.3.14) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA Systemsteuerung 326.80 (Version: 326.80) NVIDIA Update 8.3.14 (Version: 8.3.14) NVIDIA Update Components (Version: 8.3.14) NVIDIA Virtual Audio 1.2.5 (Version: 1.2.5) OpenAL (x32) Origin (x32 Version: 9.3.1.4482) Photo Common (x32 Version: 16.4.3508.0205) Photo Gallery (x32 Version: 16.4.3508.0205) Project 64 version 2.1.0.1 (x32 Version: 2.1.0.1) Project64 1.6 (x32 Version: 1.6) Python 2.7.3 (64-bit) (Version: 2.7.3150) QuickTime (x32 Version: 7.74.80.86) Real Alternative 2.0.2 (x32 Version: 2.0.2) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6873) Red Faction: Armageddon (x32) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.28.0) Saints Row: The Third (x32) SAMSUNG USB Driver for Mobile Phones (Version: 1.3.450.0) SHIELD Streaming (Version: 1.05.28) Skype™ 6.6 (x32 Version: 6.6.106) Smart Defrag 2 (x32 Version: 2.8) Spotify (HKCU Version: 0.9.1.57.ge7405149) Spybot - Search & Destroy (x32 Version: 1.6.2) Steam (x32 Version: 1.0.0.0) swMSM (x32 Version: 12.0.0.1) Team Fortress 2 (x32) TeamViewer 8 (x32 Version: 8.0.20768) tools-freebsd (x32 Version: 9.2.3.1031769) tools-linux (x32 Version: 9.2.3.1031769) tools-netware (x32 Version: 9.2.3.1031769) tools-solaris (x32 Version: 9.2.3.1031769) tools-windows (x32 Version: 9.2.3.1031769) tools-winPre2k (x32 Version: 9.2.3.1031769) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) VirtualCloneDrive (x32) Vista Shortcut Manager x64 (Version: 2.0) VLC media player 2.0.8 (x32 Version: 2.0.8) VMware Workstation (Version: 9.0.2) VMware Workstation (x32 Version: 9.0.2) Winamp (x32 Version: 5.64 ) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1) Windows 7 Logon Background Changer (x32 Version: 1.5.2) Windows 7 USB/DVD Download Tool (x32 Version: 1.0.30) Windows Live Communications Platform (x32 Version: 16.4.3508.0205) Windows Live Essentials (x32 Version: 16.4.3508.0205) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3508.0205) Windows Live Photo Common (x32 Version: 16.4.3508.0205) Windows Live PIMT Platform (x32 Version: 16.4.3508.0205) Windows Live SOXE (x32 Version: 16.4.3508.0205) Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205) Windows Live UX Platform (x32 Version: 16.4.3508.0205) Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205) Windows Mobile-Gerätecenter (Version: 6.1.6965.0) Windows SDK IntellisenseNFX (x32 Version: 7.1.30514) WinRAR 4.20 (64-Bit) (Version: 4.20.0) Wuala (HKCU Version: 1.0.444.0) Wuala CBFS (x32 Version: 3.2.107.0) Wuala OverlayIcons (x32 Version: 1.0.0.2) Xfire (x32) ==================== Restore Points ========================= 03-09-2013 11:19:45 Gerätetreiber-Paketinstallation: NVIDIA Grafikkarte 03-09-2013 11:33:41 Gerätetreiber-Paketinstallation: Elaborate Bytes AG Speichercontroller 03-09-2013 15:51:44 Windows Update 03-09-2013 22:16:43 Gerätetreiber-Paketinstallation: NVIDIA Grafikkarte 04-09-2013 23:15:18 Removed Adblock Plus for IE (32-bit and 64-bit) ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-09-05 01:59 - 00449839 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {49355572-6F6E-444B-ADBB-D4EC6E6631A4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {4CC341EC-092B-4C14-904E-9D927FE0C5E0} - System32\Tasks\CCleanerSkipUAC => I:\Programme\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {513D5508-FE1D-4842-8BAC-DE0A54A6B1B8} - System32\Tasks\elbyExecuteWithUAC => I:\Programme\VirtualCloneDrive\ExecuteWithUAC.exe [2013-03-22] () Task: {79296033-F3A9-4CC4-973D-A017D4B13F9E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2154251894-3936538858-3618834447-1000 Task: {BE35B01C-7272-46C0-9FAE-87953CD6692D} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {DC1ABB6A-FD38-42D1-BE2D-E7189288E19C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {E13B8ABE-9639-4A09-9D7A-FD80578BF389} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {E49C278C-EAAB-4567-98A9-3099F1E9979A} - System32\Tasks\SmartDefragUpdate => C:\Program Files (x86)\IObit\Smart Defrag 2\AutoUpdate.exe [2013-05-22] (IObit) Task: {F0FCC6F8-FD4B-4CC9-BDD8-CFB8FAEACF67} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {F8F40113-5341-44A0-A15B-45A15D07854A} - System32\Tasks\Driver Booster Update => I:\Programme\Driver Booster\AutoUpdate.exe [2013-08-02] (IObit) ==================== Loaded Modules (whitelisted) ============= 2013-04-05 10:48 - 2012-02-07 17:53 - 00271232 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\SysHook.dll 2012-05-02 14:10 - 2012-05-02 14:10 - 01721856 _____ (LaCie AG) C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll 2013-09-05 23:20 - 2012-04-09 16:27 - 00190480 _____ (EldoS Corporation) C:\Windows\System32\CbFsMntNtf3.dll 2013-06-08 09:48 - 2013-06-08 09:48 - 00033280 _____ (Osiris Development) C:\Program Files\BatteryBar\BatteryBar.dll 2013-06-08 09:48 - 2013-06-08 09:48 - 00624640 _____ (Osiris Development) C:\Program Files\BatteryBar\BatteryBar.Utilities.dll 2013-09-05 23:20 - 2012-04-09 16:27 - 00141328 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc 2013-08-01 21:42 - 2012-06-09 19:20 - 00196096 _____ (Alexander Roshal) I:\Programme\WinRAR\rarext.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 04740384 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvUI.dll 2013-09-04 00:18 - 2013-08-27 23:16 - 04864800 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll 2013-09-04 00:18 - 2013-08-27 23:16 - 01190688 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\easyDaemonAPIU64.DLL 2013-09-04 00:18 - 2013-08-27 23:16 - 01662240 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NVUPDTR.DLL 2013-05-31 23:40 - 2012-09-24 08:22 - 02277776 _____ (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDFavorite.dll 2013-05-31 23:40 - 2012-09-24 08:22 - 02303888 _____ (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDApix.dll 2013-05-31 23:40 - 2012-09-24 08:22 - 02384272 _____ (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCmds.dll 2013-04-05 10:48 - 2012-02-07 17:53 - 00218000 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\BrightnessControl.dll 2013-04-05 10:48 - 2012-02-07 17:53 - 00216472 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\PowerSettingControl.dll 2013-04-05 10:48 - 2012-02-07 17:53 - 00215944 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\CommonControl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 03276288 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtCore4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 12168192 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtGui4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 00539136 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtXml4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 01085952 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtNetwork4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 01990144 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtScript4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 00750080 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtHelp4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 00897024 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtSql4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 01807360 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtCLucene4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 00841728 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\QtOpenGL4.dll 2013-08-01 21:41 - 2013-08-01 21:41 - 00173568 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files\Logitech Gaming Software\imageformats\qjpeg4.dll 2013-05-01 11:12 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-05-01 11:12 - 2013-03-26 15:40 - 03693128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-05-15 18:49 - 2013-04-13 07:49 - 00308736 _____ (Microsoft Corporation) C:\Windows\AppPatch\AppPatch64\AcGenral.DLL 2012-03-19 15:09 - 2012-03-19 15:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2009-07-14 01:58 - 2009-07-14 03:38 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-04-05 11:58 - 2013-04-05 11:58 - 00020480 _____ (Jonathan Abbott) C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\networktraffic.gadget\netlib.dll 2013-09-03 23:36 - 2013-09-03 23:36 - 00039424 _____ (Orbmu2k) C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\IntelDTSReader.dll 2013-09-03 23:36 - 2013-09-03 23:36 - 00060416 _____ (Orbmu2k) C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\GPUObserver37.gadget\GPUStatusReader.dll 2013-09-03 23:36 - 2013-09-03 23:36 - 00061440 _____ (OpenLibSys.org) C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.dll 2012-03-23 17:33 - 2011-03-31 20:38 - 00777808 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00322592 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvd3d9wrap.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00226296 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvdxgiwrap.dll 2011-03-14 19:44 - 2011-03-14 19:44 - 00075856 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\NTKCUtl.dll 2013-04-07 11:24 - 2013-09-02 16:29 - 00362336 _____ (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer_Resource_de.dll 2013-04-07 11:24 - 2013-09-02 16:29 - 03031904 _____ (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer_StaticRes.dll 2013-04-07 11:24 - 2013-09-02 16:20 - 00095584 _____ (TeamViewer GmbH) I:\Programme\Team Viewer\tv_w32.dll 2013-06-17 00:11 - 2013-01-15 18:48 - 01101632 _____ (Embarcadero Technologies, Inc.) I:\Programme\Advanced SystemCare 6\rtl120.bpl 2013-06-17 00:11 - 2013-01-15 18:48 - 00348992 _____ () I:\Programme\Advanced SystemCare 6\madExcept_.bpl 2013-06-17 00:11 - 2013-01-15 18:48 - 00183616 _____ () I:\Programme\Advanced SystemCare 6\madBasic_.bpl 2013-06-17 00:11 - 2013-01-15 18:48 - 02002240 _____ (Embarcadero Technologies, Inc.) I:\Programme\Advanced SystemCare 6\vcl120.bpl 2013-06-17 00:11 - 2013-01-15 18:48 - 00051008 _____ () I:\Programme\Advanced SystemCare 6\madDisAsm_.bpl 2013-06-17 00:11 - 2013-01-15 18:47 - 00066368 _____ (IObit) I:\Programme\Advanced SystemCare 6\datastate.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00028672 _____ (element code project) I:\Programme\Growl\Growl.CoreLibrary.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00032768 _____ (element code project) I:\Programme\Growl\Growl.Destinations.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00061440 _____ (element code project) I:\Programme\Growl\Growl.Connector.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00053248 _____ (element code project) I:\Programme\Growl\Growl.DisplayStyle.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00102400 _____ (element code project) I:\Programme\Growl\Growl.Daemon.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00028672 _____ (element code project) I:\Programme\Growl\Growl.Displays.Standard.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00077824 _____ (element code project) I:\Programme\Growl\Growl.Displays.Smokestack.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00077824 _____ (element code project) I:\Programme\Growl\Growl.Displays.Plain.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00024576 _____ (element code project) I:\Programme\Growl\Growl.Displays.Toast.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00028672 _____ (element code project) I:\Programme\Growl\Growl.Displays.Visor.dll 2013-04-14 16:29 - 2010-10-08 20:20 - 00031744 _____ () C:\Users\Silverdrag0n\AppData\Local\Growl\2.0.0.0\Displays\Translucent Dark\Growl.Displays.Wpf.dll 2013-04-14 16:29 - 2010-10-08 21:06 - 00051712 _____ (FrozenCow) C:\Users\Silverdrag0n\AppData\Local\Growl\2.0.0.0\Displays\Translucent Dark\Growl.Displays.TranslucentDark.dll 2010-05-28 10:10 - 2010-05-28 10:10 - 00014336 _____ (Novell, Inc.) I:\Programme\Growl\Mono.Zeroconf.dll 2010-05-28 10:10 - 2010-05-28 10:10 - 00023040 _____ (Novell, Inc.) I:\Programme\Growl\Mono.Zeroconf.Providers.Bonjour.dll 2012-03-21 16:07 - 2012-03-21 16:07 - 00032768 _____ (element code project) I:\Programme\Growl\Growl.UDPLegacy.dll 2013-04-05 13:49 - 2012-04-09 16:27 - 00158224 ____N (EldoS Corporation) C:\Windows\SysWow64\CbFsMntNtf3.dll 2013-04-05 18:47 - 2012-03-18 12:07 - 02347520 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\QtCore4.dll 2013-04-05 18:47 - 2012-03-18 12:10 - 08499712 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\QtGui4.dll 2013-04-05 18:47 - 2012-01-15 17:50 - 00370688 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\libsndfile.dll 2013-04-05 18:47 - 2012-01-15 17:50 - 00390656 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\lame_enc.dll 2013-04-05 18:47 - 2012-08-27 17:12 - 00204800 _____ (Softanics) C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\f_in_box.dll 2013-04-05 18:47 - 2012-03-18 12:07 - 00863744 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\QtNetwork4.dll 2013-04-05 18:47 - 2012-03-18 12:07 - 00026624 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\imageformats\qgif4.dll 2013-04-05 18:47 - 2012-03-18 12:07 - 00200704 _____ () C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\imageformats\qjpeg4.dll 2013-05-21 09:31 - 2012-03-14 11:16 - 01113088 _____ (e2eSoft) C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\VCamFilter.ax 2013-07-11 19:45 - 2013-07-11 19:45 - 16230792 ____R (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_94.ocx 2012-03-08 15:01 - 2009-07-20 15:12 - 00137736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\ComFnUtl.dll 2009-07-14 14:53 - 2009-07-14 14:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\CDRomUtl.dll 2009-07-27 12:42 - 2009-07-27 12:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MixerUtl.dll 2009-07-27 12:47 - 2009-07-27 12:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\Wnd2File.dll 2009-07-27 18:43 - 2009-07-27 18:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\PowerUtl.dll 2012-02-22 17:30 - 2009-12-30 17:13 - 00326736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\OSDUtl2.dll 2009-07-27 12:38 - 2009-07-27 12:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\SzUPFUtl.dll 2012-03-22 09:44 - 2011-01-13 20:52 - 00438352 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\RadioWndUtl.dll 2012-03-23 17:33 - 2011-03-31 20:38 - 00394320 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\aipflib.dll 2012-03-06 15:09 - 2010-11-03 17:00 - 00092240 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LmSmbKel.dll 2009-07-03 16:29 - 2009-07-03 16:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\VistaVol.DLL 2012-08-17 21:40 - 2013-09-04 11:02 - 00083648 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ushata.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00013240 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpinit.dll 2012-10-25 12:42 - 2013-09-04 11:02 - 00828096 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpmain.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00097720 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fssync.DLL 2012-08-17 21:39 - 2012-08-17 21:39 - 00147896 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00611768 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\service.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00159672 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.DLL 2012-08-17 21:39 - 2012-08-17 21:39 - 00369080 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prloader.dll 2012-08-17 21:41 - 2012-08-17 21:41 - 00110008 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\nfio.ppl 2012-08-17 21:41 - 2012-08-17 21:41 - 00021432 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fsdrvplg.ppl 2012-08-17 21:41 - 2012-08-17 21:41 - 00038840 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\winreg.ppl 2012-08-17 21:41 - 2013-09-04 11:03 - 00045576 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\pxstub.ppl 2012-08-17 21:41 - 2013-09-04 11:03 - 01329008 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\params.ppl 2012-08-17 21:38 - 2012-08-17 21:38 - 01108408 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\app_core_legacy.dll 2012-08-17 21:39 - 2013-09-04 11:02 - 00609288 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\key_value_storage.DLL 2012-08-17 21:39 - 2012-08-17 21:39 - 00254392 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\eka_meta.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 00253368 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\updater_meta.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00126904 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\content_filtering_meta.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00256440 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\am_meta.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00434616 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ac_meta.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00362936 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\app_core_meta.dll 2012-08-17 21:39 - 2013-09-04 11:02 - 00825784 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\product_metainfo.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00208824 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\plugins_meta.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00297400 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksn_meta.dll 2012-08-17 21:40 - 2013-09-04 11:02 - 00238272 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ucp_meta.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00183224 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klifpp_meta.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00097720 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\instrumental_meta.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 00395192 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\storage.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00036280 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpservice.dll 2012-10-25 12:42 - 2013-09-04 11:02 - 04885872 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpgui.ppl 2012-08-17 21:39 - 2012-08-17 21:39 - 02321336 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtCore4.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 02289080 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtDeclarative4.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 01296824 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtScript4.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00182200 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtSql4.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 07269816 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtGui4.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 02051512 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtNetwork4.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00963000 _____ (IBM Corporation and others) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icuuc40.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 02962360 _____ (IBM Corporation and others) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icudt40.dll 2012-10-25 12:42 - 2013-09-04 11:02 - 02162616 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\basegui.ppl 2012-08-17 21:41 - 2013-09-04 11:03 - 00041328 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\thpimpl.ppl 2012-08-17 21:39 - 2012-08-17 21:39 - 00085944 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\memmon.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00657336 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\localization_manager.dll 2012-08-17 21:39 - 2013-09-04 11:02 - 00288696 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\parental_control_gui.dll 2012-08-17 21:41 - 2012-08-17 21:41 - 00018360 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\hashmd5.ppl 2012-08-17 21:40 - 2012-08-17 21:40 - 00034232 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imageformats\qgif4.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 00036792 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imageformats\qico4.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 00189368 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imageformats\qjpeg4.dll 2012-08-17 21:41 - 2012-08-17 21:41 - 00088504 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\propmap.ppl 2011-09-16 14:39 - 2011-09-16 14:39 - 00098664 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll 2013-09-04 01:15 - 2013-09-04 01:15 - 03280792 _____ () I:\Programme\Mozilla Firefox\mozjs.dll 2012-08-17 21:40 - 2012-08-17 21:40 - 00299960 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com\components\anti_banner_native_proxy.dll 2012-08-17 21:39 - 2012-08-17 21:39 - 00159672 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 02536960 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\libcollada14dom22.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00380928 _____ (hxxp://hunspell.sourceforge.net/) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\libhunspell.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 01260032 _____ (Firelight Technologies) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\fmodex.dll 2013-09-05 09:31 - 2013-09-05 03:27 - 00078336 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\WINMM.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00181760 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\glod.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00018944 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\growl++.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00030208 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\growl.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 06963256 _____ (Vivox Inc.) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\vivoxsdk.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00320056 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\ortp.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00331320 _____ (Vivox) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\libsndfile-1.dll 2013-09-05 09:33 - 2013-09-02 23:42 - 00310840 _____ (Vivox) I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\vivoxoal.dll 2013-09-05 09:31 - 2013-09-02 23:42 - 00065080 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\zlib1.dll 2013-09-05 09:31 - 2013-09-05 03:27 - 00745472 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\media_plugin_webkit.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 11009536 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\QtWebKit4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 08281600 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\QtGui4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 02294784 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\QtCore4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00923648 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\QtNetwork4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00140800 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\codecs\qcncodecs4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00167424 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\codecs\qjpcodecs4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00077312 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\codecs\qkrcodecs4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00155136 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\codecs\qtwcodecs4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00026112 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\imageformats\qgif4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00028160 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\imageformats\qico4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00199680 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\imageformats\qjpeg4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00222208 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\imageformats\qmng4.dll 2013-09-05 09:31 - 2012-02-28 16:57 - 00288256 _____ () I:\Programme\Phoenix Firestorm-Nogardrevlis-LGPL\llplugin\imageformats\qtiff4.dll 2013-07-11 19:41 - 2013-07-11 19:41 - 16166280 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= Name: 1.3M HD WebCam Description: USB-Videogerät Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Microsoft Service: usbvideo Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/05/2013 09:39:58 PM) (Source: NvStreamSvc) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (09/05/2013 09:39:58 PM) (Source: NvStreamSvc) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (09/05/2013 09:39:58 PM) (Source: NvStreamSvc) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] System errors: ============= Error: (09/06/2013 02:19:42 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/06/2013 02:18:08 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 09:42:30 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 09:41:02 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 09:35:44 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 08:26:01 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 08:24:37 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 08:24:36 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 09:27:43 AM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Error: (09/05/2013 09:26:18 AM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80070422 Microsoft Office Sessions: ========================= Error: (09/05/2013 09:39:58 PM) (Source: NvStreamSvc)(User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (09/05/2013 09:39:58 PM) (Source: NvStreamSvc)(User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (09/05/2013 09:39:58 PM) (Source: NvStreamSvc)(User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] CodeIntegrity Errors: =================================== Date: 2013-09-06 16:05:39.309 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-06 16:05:39.308 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-06 16:05:39.305 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-06 16:05:39.279 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-06 16:05:39.278 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-06 16:05:39.275 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-05 02:14:21.828 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-05 02:14:21.826 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-05 02:14:21.824 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-05 02:14:21.821 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 46% Total physical RAM: 8043.86 MB Available physical RAM: 4290.82 MB Total Pagefile: 24277.9 MB Available Pagefile: 17587.84 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Windows 7) (Fixed) (Total:200.19 GB) (Free:110.76 GB) NTFS Drive f: (FL_v1) (CDROM) (Total:0.59 GB) (Free:0 GB) CDFS Drive h: (Morrowind) (CDROM) (Total:7.47 GB) (Free:0 GB) UDF Drive i: (Daten) (Fixed) (Total:498.35 GB) (Free:168.98 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 839C38E4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=498 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
07.09.2013, 07:35 | #5 | |
/// the machine /// TB-Ausbilder | Firefox öffnet verschiedene seiten in unregelmäsigen abständen.Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
07.09.2013, 18:45 | #6 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen.Code:
ATTFilter ComboFix 13-09-06.01 - Silverdrag0n 07.09.2013 18:49:56.2.8 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1033.18.8044.5643 [GMT 2:00] ausgeführt von:: c:\users\Silverdrag0n\Desktop\ComboFix.exe AV: Kaspersky Internet Security *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} FW: Kaspersky Internet Security *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} SP: Kaspersky Internet Security *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\ntuser.dat c:\users\SILVER~1\AppData\Local\Temp\nsg4E04.tmp c:\users\SILVER~1\AppData\Local\Temp\nsg4E06.tmp c:\users\Silverdrag0n\AppData\Local\Temp\nsg4E04.tmp c:\users\Silverdrag0n\AppData\Local\Temp\nsg4E06.tmp . . ((((((((((((((((((((((( Dateien erstellt von 2013-08-07 bis 2013-09-07 )))))))))))))))))))))))))))))) . . 2013-09-07 16:55 . 2013-09-07 16:55 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-09-06 20:08 . 2013-08-06 08:58 9515512 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{AAFCA70D-F5DB-4AB9-8751-F34357AE7E98}\mpengine.dll 2013-09-06 17:24 . 2013-09-06 17:24 -------- d-----w- C:\FRST 2013-09-05 21:20 . 2012-04-09 14:27 190480 ----a-w- c:\windows\system32\CbFsMntNtf3.dll 2013-09-05 21:20 . 2012-04-09 14:27 141328 ----a-w- c:\windows\system32\CbFsNetRdr3.dll 2013-09-04 23:18 . 2013-09-04 23:18 -------- d-----w- c:\users\Silverdrag0n\AppData\Local\Programs 2013-09-04 08:58 . 2012-07-11 15:09 64856 ----a-w- c:\windows\system32\klfphc.dll 2013-09-04 08:58 . 2013-09-04 08:58 -------- d-----w- c:\windows\ELAMBKUP 2013-09-04 08:58 . 2013-09-07 16:56 -------- d-----w- c:\programdata\Kaspersky Lab 2013-09-04 08:58 . 2013-09-04 08:58 -------- d-----w- c:\program files (x86)\Kaspersky Lab 2013-09-04 08:57 . 2013-09-04 09:20 620128 ----a-w- c:\windows\system32\drivers\klif.sys 2013-09-04 08:57 . 2013-09-04 09:20 90208 ----a-w- c:\windows\system32\drivers\klflt.sys 2013-09-03 22:30 . 2013-08-20 13:33 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2013-09-03 22:30 . 2013-08-20 13:32 28448 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2013-09-03 22:23 . 2013-09-03 22:23 -------- d-----w- c:\users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-03 22:20 . 2013-09-03 22:20 -------- d-----w- c:\windows\SysWow64\NV 2013-09-03 22:20 . 2013-09-03 22:20 -------- d-----w- c:\windows\system32\NV 2013-09-03 22:18 . 2013-09-04 23:34 -------- d-----w- c:\users\UpdatusUser 2013-09-03 22:17 . 2013-08-18 19:34 6599968 ----a-w- c:\windows\system32\nvcpl.dll 2013-09-03 22:17 . 2013-08-18 19:34 3452192 ----a-w- c:\windows\system32\nvsvc64.dll 2013-09-03 22:17 . 2013-08-18 19:34 920864 ----a-w- c:\windows\system32\nvvsvc.exe 2013-09-03 22:17 . 2013-08-18 19:34 63776 ----a-w- c:\windows\system32\nvshext.dll 2013-09-03 22:17 . 2013-08-18 19:34 2559776 ----a-w- c:\windows\system32\nvsvcr.dll 2013-09-03 22:17 . 2013-08-18 19:34 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll 2013-09-03 22:17 . 2013-08-18 19:34 219424 ----a-w- c:\windows\system32\nvmctray.dll 2013-09-03 22:17 . 2013-08-18 19:34 1041696 ----a-w- c:\windows\system32\nv3dappshext.dll 2013-09-03 22:17 . 2013-08-17 05:30 3319709 ----a-w- c:\windows\system32\nvcoproc.bin 2013-09-03 22:17 . 2013-09-03 22:22 -------- d-----w- c:\programdata\NVIDIA Corporation 2013-09-02 19:50 . 2013-09-03 17:53 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable) 2013-08-30 16:05 . 2013-06-09 19:59 216064 ----a-w- c:\windows\SysWow64\gcapi_dll.dll 2013-08-21 15:53 . 2008-10-06 12:55 7696384 ----a-w- c:\windows\SysWow64\CM108.dll 2013-08-20 13:39 . 2013-08-20 13:39 57376 ----a-w- c:\windows\system32\drivers\HECIx64.sys 2013-08-20 13:34 . 2013-08-20 13:34 644968 ----a-w- c:\windows\system32\drivers\iaStorA.sys 2013-08-20 13:34 . 2013-08-20 13:34 28008 ----a-w- c:\windows\system32\drivers\iaStorF.sys 2013-08-19 12:41 . 2013-08-19 12:41 -------- d-----w- c:\programdata\EA Core 2013-08-19 12:25 . 2013-08-19 12:21 447752 ----a-w- c:\windows\SysWow64\vp6vfw.dll 2013-08-15 18:22 . 2013-08-16 19:55 -------- d-----w- c:\users\Silverdrag0n\AppData\Roaming\Origin 2013-08-15 18:22 . 2013-08-15 18:38 -------- d-----w- c:\users\Silverdrag0n\AppData\Local\Origin 2013-08-15 18:03 . 2013-08-18 20:27 -------- d-----w- c:\programdata\Origin 2013-08-15 18:03 . 2013-08-15 18:03 -------- d-----w- c:\programdata\Electronic Arts 2013-08-14 10:58 . 2013-07-26 05:13 2241024 ----a-w- c:\windows\system32\wininet.dll 2013-08-14 10:58 . 2013-07-26 05:13 1084928 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-08-14 10:58 . 2013-07-26 05:12 53760 ----a-w- c:\windows\system32\jsproxy.dll 2013-08-14 10:58 . 2013-07-26 03:13 1767936 ----a-w- c:\windows\SysWow64\wininet.dll 2013-08-14 10:58 . 2013-07-26 03:13 817664 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-08-14 10:58 . 2013-07-26 03:12 108032 ----a-w- c:\program files (x86)\Internet Explorer\jsdebuggeride.dll 2013-08-14 10:58 . 2013-07-26 05:12 15405056 ----a-w- c:\windows\system32\ieframe.dll 2013-08-14 10:58 . 2013-07-26 05:12 19239424 ----a-w- c:\windows\system32\mshtml.dll 2013-08-14 10:37 . 2013-07-09 05:46 1472512 ----a-w- c:\windows\system32\crypt32.dll 2013-08-14 10:37 . 2013-07-09 04:46 1166848 ----a-w- c:\windows\SysWow64\crypt32.dll 2013-08-14 10:37 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll 2013-08-14 10:37 . 2013-07-09 05:46 184320 ----a-w- c:\windows\system32\cryptsvc.dll 2013-08-14 10:37 . 2013-07-09 05:46 139776 ----a-w- c:\windows\system32\cryptnet.dll 2013-08-14 10:37 . 2013-07-09 04:52 175104 ----a-w- c:\windows\SysWow64\wintrust.dll 2013-08-14 10:37 . 2013-07-09 04:46 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2013-08-14 10:37 . 2013-07-09 04:46 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll 2013-08-14 10:35 . 2013-07-06 06:03 1910208 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-08-14 10:35 . 2013-06-15 04:32 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys 2013-08-09 16:46 . 2013-08-09 16:46 -------- d-----w- c:\program files (x86)\Microsoft XNA 2013-08-08 19:42 . 2013-08-08 20:21 -------- d-----w- c:\users\Silverdrag0n\AppData\Local\BIT.TRIP RUNNER 2013-08-08 19:41 . 2013-08-08 19:41 466456 ----a-w- c:\windows\system32\wrap_oal.dll 2013-08-08 19:41 . 2013-08-08 19:41 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll 2013-08-08 19:41 . 2013-08-08 19:41 122904 ----a-w- c:\windows\system32\OpenAL32.dll 2013-08-08 19:41 . 2013-08-08 19:41 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll 2013-08-08 19:41 . 2013-08-08 19:41 -------- d-----w- c:\program files (x86)\OpenAL . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-09-06 12:21 . 2013-04-05 12:30 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2013-09-04 09:20 . 2012-08-13 14:49 178448 ----a-w- c:\windows\system32\drivers\kneps.sys 2013-09-04 09:20 . 2012-06-08 09:38 54368 ----a-w- c:\windows\system32\drivers\kltdi.sys 2013-08-20 13:24 . 2012-03-19 14:31 12615680 ----a-w- c:\windows\system32\igdumd64.dll 2013-08-20 13:24 . 2012-03-19 14:26 11049472 ----a-w- c:\windows\SysWow64\igdumd32.dll 2013-08-20 13:24 . 2012-03-19 13:17 28672 ----a-w- c:\windows\system32\igfxexps.dll 2013-08-20 13:24 . 2012-03-19 13:17 64000 ----a-w- c:\windows\system32\igfxsrvc.dll 2013-08-20 13:24 . 2012-03-19 13:17 442880 ----a-w- c:\windows\system32\igfxdev.dll 2013-08-20 13:24 . 2012-03-19 14:22 12858368 ----a-w- c:\windows\system32\igd10umd64.dll 2013-08-20 13:24 . 2012-03-19 14:11 11175424 ----a-w- c:\windows\SysWow64\igd10umd32.dll 2013-08-20 13:24 . 2012-03-19 13:17 110592 ----a-w- c:\windows\system32\hccutils.dll 2013-08-14 10:55 . 2013-04-05 11:42 78161360 ----a-w- c:\windows\system32\MRT.exe 2013-07-17 08:31 . 2013-07-17 08:31 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll 2013-07-11 17:45 . 2013-04-05 11:11 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-07-11 17:45 . 2013-04-05 11:11 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-07-09 04:45 . 2013-08-14 10:36 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-06-24 16:08 . 2013-06-24 16:08 312232 ----a-w- c:\windows\system32\javaws.exe 2013-06-24 16:08 . 2013-06-24 16:08 189352 ----a-w- c:\windows\system32\javaw.exe 2013-06-24 16:08 . 2013-06-24 16:08 188840 ----a-w- c:\windows\system32\java.exe 2013-06-24 16:08 . 2013-06-24 16:08 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2013-06-24 16:08 . 2013-04-05 11:48 972712 ----a-w- c:\windows\system32\deployJava1.dll 2013-06-24 16:08 . 2013-04-05 11:48 1093032 ----a-w- c:\windows\system32\npDeployJava1.dll 2013-06-24 16:06 . 2013-06-24 16:06 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-06-24 16:06 . 2013-04-05 11:47 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2013-06-24 16:06 . 2013-04-05 11:47 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [7] 2011-02-26 . 3B69712041F3D63605529BD66DC00C48 . 2871808 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe [-] 2011-02-25 . 3510644520B93226E7033B7618FCAFF0 . 2388992 . . [6.1.7600.16385] .. c:\windows\explorer.exe [7] 2011-02-25 . 332FEAB1435662FC6C672E25BEB37BE3 . 2871808 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe [7] 2010-11-20 . AC4C51EB24AA95B77F705AB159189E24 . 2872320 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay] @="{DFB16A96-E610-406D-BE62-C9B2EBF4B9A5}" [HKEY_CLASSES_ROOT\CLSID\{DFB16A96-E610-406D-BE62-C9B2EBF4B9A5}] 2012-04-09 14:27 158224 ------w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-04-09 14:27 158224 ------w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Advanced SystemCare 6"="i:\programme\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840] "Spotify Web Helper"="c:\users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-17 1104384] "Growl"="i:\programme\Growl\Growl.exe" [2012-03-21 3817472] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432] "ShowBatteryBar"="c:\program files\BatteryBar\ShowBatteryBar.exe" [2013-04-11 89600] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-03-31 1092688] "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [2013-09-04 356376] "vmware-tray"="i:\programme\VMware\vmware-tray.exe" [2013-02-26 104528] "vmware-tray.exe"="i:\programme\VMware\vmware-tray.exe" [2013-02-26 104528] "VirtualCloneDrive"="i:\programme\VirtualCloneDrive\VCDDaemon.exe" [2013-03-10 88984] "MessengerPlusForSkypeService"="c:\program files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe" [2013-05-07 128000] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "QuickTime Task"="i:\programme\Quicktime\QTTask.exe" -atboottime . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R2 VMwareHostd;VMware Workstation Server;i:\programme\VMware\vmware-hostd.exe;i:\programme\VMware\vmware-hostd.exe [x] R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 Tortilla;Tortilla Driver;c:\windows\system32\DRIVERS\tortilla.sys;c:\windows\SYSNATIVE\DRIVERS\tortilla.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x] R3 USBPNPA;USB PnP Sound Device Interface;c:\windows\system32\drivers\CM10864.sys;c:\windows\SYSNATIVE\drivers\CM10864.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] R3 XFDriver64;XFDriver64; [x] S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x] S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x] S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x] S0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys [x] S1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys;c:\windows\SYSNATIVE\drivers\cbfs3.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x] S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;i:\programme\Advanced SystemCare 6\ASCService.exe;i:\programme\Advanced SystemCare 6\ASCService.exe [x] S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x] S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 MsgPlusService;Messenger Plus! Service;c:\program files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe;c:\program files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 SBSDWSCService;SBSD Security Center Service;i:\programme\Spybot - Search & Destroy\SDWinSec.exe;i:\programme\Spybot - Search & Destroy\SDWinSec.exe [x] S2 TeamViewer8;TeamViewer 8;i:\programme\Team Viewer\TeamViewer_Service.exe;i:\programme\Team Viewer\TeamViewer_Service.exe [x] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x] S2 vstor2-mntapi10-shared;Vstor2 MntApi 1.0 Driver (shared);SysWOW64\drivers\vstor2-mntapi10-shared.sys;SysWOW64\drivers\vstor2-mntapi10-shared.sys [x] S2 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.sys;c:\users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.sys [x] S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x] S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x] S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdbd.sys [x] S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdmp.sys [x] S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiMSa.sys [x] S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiSDa.sys [x] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x] S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x] S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x] S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x] S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x] S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x] S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] . . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon1] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon2] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon3] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon4] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay] @="{DFB16A96-E610-406D-BE62-C9B2EBF4B9A5}" [HKEY_CLASSES_ROOT\CLSID\{DFB16A96-E610-406D-BE62-C9B2EBF4B9A5}] 2012-04-09 14:27 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-04-09 14:27 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960] "Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2012-02-07 1829768] "Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2013-08-01 8290584] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288] "RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-03-08 1278024] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-08-20 172016] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-08-20 399856] "Persistence"="c:\windows\system32\igfxpers.exe" [2013-08-20 442352] "Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: Hinzufügen zu Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm IE: Nach Microsoft &Excel exportieren - i:\progra~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000 LSP: %windir%\system32\vsocklib.dll TCP: DhcpNameServer = 192.168.178.1 FF - ProfilePath - c:\users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\ FF - ExtSQL: 2013-09-03 20:05; {dc572301-7619-498c-a57d-39143191b318}; c:\users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF - ExtSQL: 2013-09-03 20:05; {64161300-e22b-11db-8314-0800200c9a66}; c:\users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi FF - ExtSQL: 2013-09-03 20:11; {daf44bf7-a45e-4450-979c-91cf07434c3d}; c:\users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\extensions\{daf44bf7-a45e-4450-979c-91cf07434c3d}.xpi FF - ExtSQL: 2013-09-03 20:11; statusbardate@webspirited.com; c:\users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\extensions\statusbardate@webspirited.com.xpi FF - ExtSQL: 2013-09-04 11:20; anti_banner@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - ExtSQL: 2013-09-04 11:20; content_blocker@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - ExtSQL: 2013-09-04 11:20; online_banking@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - ExtSQL: 2013-09-04 11:20; url_advisor@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - ExtSQL: 2013-09-04 11:20; virtual_keyboard@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - ExtSQL: 2013-09-06 14:27; {fe272bd1-5f76-4ea4-8501-a05d35d823fc}; c:\users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{53707962-6F74-2D53-2644-206D7942484F}"=hex:51,66,7a,6c,4c,1d,38,12,0c,7a,63, 57,46,21,3d,68,59,52,63,2d,7c,1c,0c,5b "{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}"=hex:51,66,7a,6c,4c,1d,38,12,1d,cf,77, 51,95,a1,d1,09,ee,9c,1f,b7,fe,e1,bb,5b "{73455575-E40C-433C-9784-C78DC7761455}"=hex:51,66,7a,6c,4c,1d,38,12,1b,56,56, 77,3e,aa,52,06,e8,92,84,cd,c2,28,50,41 "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07, 72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57 "{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}"=hex:51,66,7a,6c,4c,1d,38,12,4d,0e,7e, 9a,40,73,fa,0f,d1,09,6e,56,73,7a,a7,cd "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd "{E33CF602-D945-461A-83F0-819F76A199F8}"=hex:51,66,7a,6c,4c,1d,38,12,6c,f5,2f, e7,77,97,74,03,fc,e6,c2,df,73,ff,dd,ec "{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16, fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17 "{10149DAF-506B-4488-8376-DF24F0185196}"=hex:51,66,7a,6c,4c,1d,38,12,c1,9e,07, 14,59,1e,e6,01,fc,60,9c,64,f5,46,15,82 "{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9, b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b "{FFCB3198-32F3-4E8B-9539-4324694ED664}"=hex:51,66,7a,6c,4c,1d,38,12,f6,32,d8, fb,c1,7c,e5,0b,ea,2f,00,64,6c,10,92,70 "{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}"=hex:51,66,7a,6c,4c,1d,38,12,e3,94,1f, be,3b,97,d8,0c,d0,f4,c8,9e,21,03,83,f2 "{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23, 94,30,02,d1,0f,f1,da,12,24,73,56,27,d2 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:23,05,09,42,a0,3d,ce,01 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,59,6e,9e,79,4f,d5,fb,45,ae,1e,8c,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,59,6e,9e,79,4f,d5,fb,45,ae,1e,8c,\ . [HKEY_USERS\S-1-5-21-2154251894-3936538858-3618834447-1000\Software\SecuROM\License information*] "datasecu"=hex:28,e3,5d,aa,29,a1,d1,13,62,d7,c4,c8,f6,bc,6f,18,1e,7a,f7,3a,29, d4,dd,ee,79,a8,bb,e0,d1,3f,f7,94,89,bb,6b,7a,87,71,b7,44,1a,c2,44,2e,f2,ab,\ "rkeysecu"=hex:ab,f9,1c,f7,4d,89,4b,1a,1d,b2,49,f6,44,45,b3,86 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Launch Manager\LMworker.exe c:\program files (x86)\Launch Manager\LMutilps32.exe c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe c:\windows\SysWOW64\vmnat.exe i:\programme\VMware\vmware-authd.exe c:\windows\SysWOW64\vmnetdhcp.exe c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe i:\programme\Driver Booster\AutoUpdate.exe . ************************************************************************** . Zeit der Fertigstellung: 2013-09-07 19:02:24 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2013-09-07 17:02 . Vor Suchlauf: 10 Verzeichnis(se), 117.934.923.776 Bytes frei Nach Suchlauf: 11 Verzeichnis(se), 117.496.799.232 Bytes frei . - - End Of File - - 2831A9DCE45BB41B4F436A88D1798661 A36C5E4F47E84449FF07ED3517B43A31 hxxp://7.rotator.wigetxxmedia.com/servlet/ajrotxxator/319235/0/vh?z=wiget&dim=79059&kw=&click= ging auf und schickte mich diesmal ins Casino hxxps://www.sunmaker.coxxm/?a_aid=4e146f8bxx6ecd9&chan=wiDE4 Geändert von SilverDrag0n (07.09.2013 um 18:46 Uhr) Grund: korrektur |
09.09.2013, 04:46 | #7 |
/// the machine /// TB-Ausbilder | Firefox öffnet verschiedene seiten in unregelmäsigen abständen. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.09.2013, 15:09 | #8 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen.Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.09.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Silverdrag0n :: SILVERDRAG0N-LE [Administrator] 09.09.2013 16:17:20 mbam-log-2013-09-09 (16-17-20).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 250240 Laufzeit: 3 Minute(n), 8 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.003 - Report created 09/09/2013 at 15:49:35 # Updated 07/09/2013 by Xplode # Operating System : Windows 7 Ultimate Service Pack 1 (64 bits) # Username : Silverdrag0n - SILVERDRAG0N-LE # Running from : C:\Users\Silverdrag0n\Desktop\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com Key Deleted : HKCU\Software\APN PIP Key Deleted : HKCU\Software\OCS Key Deleted : HKLM\Software\PIP ***** [ Browsers ] ***** -\\ Internet Explorer v10.0.9200.16660 -\\ Mozilla Firefox v24.0 (de) [ File : C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\prefs.js ] ************************* AdwCleaner[R0].txt - [1204 octets] - [09/09/2013 15:48:43] AdwCleaner[S0].txt - [1057 octets] - [09/09/2013 15:49:35] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1117 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.9 (09.07.2013:1) OS: Windows 7 Ultimate x64 Ran by Silverdrag0n on 09.09.2013 at 15:57:52,15 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Successfully stopped: [Service] MsgPlusService Successfully deleted: [Service] MsgPlusService ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{37211D63-CCE9-4780-B182-96538CFC6FED} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{8B9C4F32-044E-491C-893E-362CB8A679D5} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CBC3E05C-F841-452A-A600-E8D8BBEA63D9} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CBC3E05D-F841-452A-A600-E8D8BBEA63DA} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CF2BF214-9D1E-4803-9AEB-38552615FD40} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yuna software Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\msgplusforskype.animationpackage Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\msgplusforskype.skinpack Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\messenger plus! for skype Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\yuna software ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\messenger plus! for skype" Failed to delete: [Folder] "C:\Program Files (x86)\yuna software" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 09.09.2013 at 16:00:08,58 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013 Ran by Silverdrag0n (administrator) on SILVERDRAG0N-LE on 09-09-2013 16:06:26 Running from C:\Users\Silverdrag0n\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) I:\Programme\Advanced SystemCare 6\ASCService.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Safer Networking Ltd.) I:\Programme\Spybot - Search & Destroy\SDWinSec.exe (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (VMware, Inc.) I:\Programme\VMware\vmware-authd.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe () I:\Programme\VMware\vmware-hostd.exe (TeamViewer GmbH) I:\Programme\Team Viewer\tv_w32.exe (TeamViewer GmbH) I:\Programme\Team Viewer\tv_x64.exe (Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (IObit) I:\Programme\Advanced SystemCare 6\ASCTray.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Spotify Ltd) C:\Users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (element code project) I:\Programme\Growl\Growl.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (VMware, Inc.) I:\Programme\VMware\vmware-tray.exe (Elaborate Bytes AG) I:\Programme\VirtualCloneDrive\VCDDaemon.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Yuna Software) C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\Messenger Plus! for Skype.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) I:\Programme\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-09-24] (ELAN Microelectronics Corp.) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKCU\...\Run: [Advanced SystemCare 6] - I:\Programme\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-17] (Spotify Ltd) HKCU\...\Run: [Growl] - I:\Programme\Growl\Growl.exe [3817472 2012-03-21] (element code project) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2013-04-11] () HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1092688 2011-03-31] (Dritek System Inc.) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-09-04] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [vmware-tray] - I:\Programme\VMware\vmware-tray.exe [104528 2013-02-26] (VMware, Inc.) HKLM-x32\...\Run: [vmware-tray.exe] - I:\Programme\VMware\vmware-tray.exe [104528 2013-02-26] (VMware, Inc.) HKLM-x32\...\Run: [VirtualCloneDrive] - I:\Programme\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-08-18] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-18] (NVIDIA Corporation) SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - I:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - I:\Programme\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - I:\Programme\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - I:\Programme\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - I:\Programme\VLC\npvlc.dll (VideoLAN) FF Extension: statusbardate - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\statusbardate@webspirited.com.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{daf44bf7-a45e-4450-979c-91cf07434c3d}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF StartMenuInternet: FIREFOX.EXE - I:\Programme\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= R2 AdvancedSystemCareService6; I:\Programme\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-09-04] (Kaspersky Lab ZAO) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-08-23] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) R2 SBSDWSCService; I:\Programme\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) R2 TeamViewer8; I:\Programme\Team Viewer\TeamViewer_Service.exe [5071712 2013-09-02] (TeamViewer GmbH) R2 VMAuthdService; I:\Programme\VMware\vmware-authd.exe [87120 2013-02-26] (VMware, Inc.) R2 VMwareHostd; I:\Programme\VMware\vmware-hostd.exe [13242960 2013-02-26] () R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-20] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-04] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.) R2 WinRing0_1_2_0; C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.sys [14544 2013-09-03] (OpenLibSys.org) S3 catchme; \??\C:\ComboFix\catchme.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-04] (Kaspersky Lab ZAO) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 Tortilla; system32\DRIVERS\tortilla.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 XFDriver64; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-09 16:00 - 2013-09-09 16:00 - 00001988 _____ C:\Users\Silverdrag0n\Desktop\JRT.txt 2013-09-09 15:53 - 2013-09-09 15:53 - 00000000 ____D C:\Windows\ERUNT 2013-09-09 15:48 - 2013-09-09 15:49 - 00000000 ____D C:\AdwCleaner 2013-09-09 15:45 - 2013-09-09 15:45 - 01029490 _____ (Thisisu) C:\Users\Silverdrag0n\Desktop\JRT.exe 2013-09-09 15:44 - 2013-09-09 15:44 - 01037278 _____ C:\Users\Silverdrag0n\Desktop\adwcleaner.exe 2013-09-07 21:07 - 2013-09-07 21:07 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Neuer Ordner 2013-09-07 19:02 - 2013-09-07 19:02 - 00036563 _____ C:\ComboFix.txt 2013-09-07 18:56 - 2013-09-07 18:56 - 00001018 _____ C:\Windows\PFRO.log 2013-09-07 18:48 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-09-07 18:48 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-09-07 18:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-09-07 18:47 - 2013-09-07 19:02 - 00000000 ____D C:\Qoobox 2013-09-07 18:47 - 2013-09-07 19:00 - 00000000 ____D C:\Windows\erdnt 2013-09-07 18:45 - 2013-09-07 18:45 - 05120615 ____R (Swearware) C:\Users\Silverdrag0n\Desktop\ComboFix.exe 2013-09-06 19:24 - 2013-09-06 19:24 - 00000000 ____D C:\FRST 2013-09-06 14:21 - 2013-09-06 14:22 - 00000388 _____ C:\Windows\LkmdfCoInst.log 2013-09-06 14:16 - 2013-09-09 15:57 - 00001546 _____ C:\Windows\setupact.log 2013-09-06 14:16 - 2013-09-06 14:16 - 00000000 _____ C:\Windows\setuperr.log 2013-09-05 23:20 - 2012-04-09 16:27 - 00190480 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll 2013-09-05 23:20 - 2012-04-09 16:27 - 00141328 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll 2013-09-05 23:11 - 2013-09-05 23:13 - 26788960 _____ C:\Users\Silverdrag0n\Downloads\WualaSetup.exe 2013-09-05 21:32 - 2013-09-05 21:32 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Silverdrag0n\Downloads\KillBox.exe 2013-09-05 01:39 - 2013-09-05 01:39 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-05 01:37 - 2013-09-05 01:38 - 23003252 _____ C:\Users\Silverdrag0n\Downloads\vlc-2.0.8-win32.exe 2013-09-05 01:36 - 2013-09-05 01:36 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim(1).exe 2013-09-05 00:02 - 2013-09-05 21:44 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\hijackthis 2013-09-04 22:15 - 2013-09-04 22:16 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim.exe 2013-09-04 10:58 - 2013-09-09 15:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Windows\ELAMBKUP 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-04 10:58 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll 2013-09-04 10:57 - 2013-09-04 11:20 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-09-04 10:57 - 2013-09-04 11:20 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-09-04 10:50 - 2013-09-04 10:53 - 00427934 _____ C:\Users\Silverdrag0n\Downloads\kavremvr 2013-09-04 10-50-36 (pid 5304).log 2013-09-04 10:50 - 2013-09-04 10:50 - 04894912 _____ (Kaspersky Lab ZAO) C:\Users\Silverdrag0n\Downloads\kavremover.exe 2013-09-04 00:30 - 2013-09-04 00:56 - 176212264 _____ (Kaspersky Lab) C:\Users\Silverdrag0n\Downloads\kis13.0.1.4190de-de.exe 2013-09-04 00:30 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-09-04 00:30 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-09-04 00:23 - 2013-09-04 00:23 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\system32\NV 2013-09-04 00:18 - 2013-09-04 00:18 - 00001360 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-04 00:18 - 2013-09-04 00:18 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-04 00:17 - 2013-09-04 00:22 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-04 00:17 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 01041696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-09-04 00:17 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-09-04 00:17 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-09-04 00:16 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-09-04 00:16 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2013-09-04 00:16 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-09-03 23:30 - 2013-09-03 23:30 - 00165054 _____ C:\Users\Silverdrag0n\Downloads\IntelCoreSeries.zip 2013-09-03 23:30 - 2013-09-03 23:30 - 00086061 _____ C:\Users\Silverdrag0n\Downloads\PowerStatusGadget.zip 2013-09-03 23:29 - 2013-09-04 00:02 - 239467888 _____ (NVIDIA Corporation) C:\Users\Silverdrag0n\Downloads\326.80-notebook-win8-win7-64bit-international-beta.exe 2013-09-03 23:29 - 2013-09-03 23:29 - 00106523 _____ C:\Users\Silverdrag0n\Downloads\GPUObserver.zip 2013-09-03 19:59 - 2013-09-03 20:00 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Mozilla 2013-09-03 19:59 - 2013-09-03 19:59 - 00000767 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-03 19:59 - 2013-09-03 19:59 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-03 19:04 - 2013-09-03 19:04 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Process Explorer 2013-09-03 13:34 - 2013-09-03 13:34 - 00002938 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2013-09-03 13:27 - 2013-09-09 15:56 - 00378709 _____ C:\Windows\WindowsUpdate.log 2013-09-02 23:21 - 2013-09-02 23:21 - 04454952 _____ (Piriform Ltd) C:\Users\Silverdrag0n\Downloads\ccsetup405.exe 2013-09-02 22:33 - 2013-09-02 22:44 - 56514904 _____ (Logitech Inc.) C:\Users\Silverdrag0n\Downloads\LGS_8.50.281_x64_Logitech.exe 2013-09-02 21:50 - 2013-09-03 19:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-08-30 18:05 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll 2013-08-30 12:20 - 2013-08-30 12:20 - 00243651 _____ C:\Users\Silverdrag0n\Downloads\Bestellung_bei_ESPRIT.zip 2013-08-26 12:03 - 2013-08-26 12:03 - 00001496 _____ C:\Users\Silverdrag0n\Desktop\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe.lnk 2013-08-25 23:56 - 2013-08-28 22:30 - 00007184 _____ C:\Users\Silverdrag0n\Desktop\BuildFirestorm_new_deutsch.txt 2013-08-24 00:14 - 2013-08-24 00:37 - 98688206 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part3.rar 2013-08-23 23:39 - 2013-08-24 00:10 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part2.rar 2013-08-23 22:58 - 2013-08-23 23:38 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part1.rar 2013-08-22 00:06 - 2013-08-22 20:41 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\ebooks 2013-08-21 17:53 - 2013-08-21 19:08 - 00000521 _____ C:\Windows\system\Cm108.ini 2013-08-21 17:53 - 2008-10-06 14:55 - 07696384 _____ (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll 2013-08-21 17:26 - 2013-08-21 17:29 - 21591617 _____ C:\Users\Silverdrag0n\Downloads\HPX-3090M_USB-Driver_XP_VISTA_WIN7(1).zip 2013-08-21 12:46 - 2013-08-21 12:47 - 10356589 _____ C:\Users\Silverdrag0n\Downloads\cmake-2.8.11.2-win32-x86.exe 2013-08-20 15:39 - 2013-08-20 15:39 - 00057376 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00644968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00028008 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 13030912 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 10811904 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 05905904 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 05358016 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 03511296 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 01040384 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00931840 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00575488 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00542720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00515568 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00442352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00399856 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 00330752 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00254960 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00223664 _____ C:\Windows\system32\Gfxres.th-TH.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00210106 _____ C:\Windows\system32\Gfxres.el-GR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00194245 _____ C:\Windows\system32\Gfxres.ru-RU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00175104 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00172016 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00166170 _____ C:\Windows\system32\Gfxres.ar-SA.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00163421 _____ C:\Windows\system32\Gfxres.ja-JP.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00159008 _____ C:\Windows\system32\Gfxres.he-IL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00149682 _____ C:\Windows\system32\Gfxres.it-IT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00148042 _____ C:\Windows\system32\Gfxres.ko-KR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147393 _____ C:\Windows\system32\Gfxres.de-DE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147288 _____ C:\Windows\system32\Gfxres.es-ES.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00146004 _____ C:\Windows\system32\Gfxres.ro-RO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00145491 _____ C:\Windows\system32\Gfxres.fr-FR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144645 _____ C:\Windows\system32\Gfxres.tr-TR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144260 _____ C:\Windows\system32\Gfxres.pt-BR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144020 _____ C:\Windows\system32\Gfxres.nl-NL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00143932 _____ C:\Windows\system32\Gfxres.hu-HU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142882 _____ C:\Windows\system32\Gfxres.sv-SE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142877 _____ C:\Windows\system32\Gfxres.pt-PT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142717 _____ C:\Windows\system32\Gfxres.pl-PL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00142289 _____ C:\Windows\system32\Gfxres.cs-CZ.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142008 _____ C:\Windows\system32\Gfxres.fi-FI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141838 _____ C:\Windows\system32\Gfxres.sk-SK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141049 _____ C:\Windows\system32\Gfxres.hr-HR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137889 _____ C:\Windows\system32\Gfxres.sl-SI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137784 _____ C:\Windows\system32\Gfxres.nb-NO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137141 _____ C:\Windows\system32\Gfxres.da-DK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2013-08-20 15:24 - 2013-08-20 15:24 - 00126300 _____ C:\Windows\system32\Gfxres.zh-TW.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00124650 _____ C:\Windows\system32\Gfxres.zh-CN.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3062.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00080384 _____ C:\Windows\system32\igdde64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00017078 _____ C:\Windows\system32\iglhxs64.vp 2013-08-20 15:24 - 2013-08-20 15:24 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2013-08-20 13:52 - 2013-08-20 13:52 - 86949888 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 05005312 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00065536 _____ C:\Windows\system32\config\SAM.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit 2013-08-20 11:46 - 2013-08-20 11:46 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mirc732.exe 2013-08-20 11:44 - 2013-08-20 11:44 - 01105460 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mIRC.exe 2013-08-20 10:59 - 2013-08-20 16:05 - 00001223 _____ C:\Users\Silverdrag0n\Desktop\SilverScriptV.1.0.1.lnk 2013-08-19 23:28 - 2013-08-19 23:28 - 04539462 _____ C:\Users\Silverdrag0n\Downloads\slvoice-4.5.0009.17865-windows-20130214.tar.bz2 2013-08-19 20:30 - 2013-08-19 23:12 - 1391998657 _____ (Acresso Software Inc.) C:\Users\Silverdrag0n\Downloads\TS3_1.55.4.0220xx_update.exe 2013-08-19 14:41 - 2013-08-19 14:41 - 00000000 ____D C:\ProgramData\EA Core 2013-08-19 14:25 - 2013-08-19 14:21 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll 2013-08-19 14:24 - 2013-08-19 14:24 - 00001182 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk 2013-08-18 21:43 - 2013-08-18 21:43 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Electronic Arts 2013-08-16 21:31 - 2013-08-16 21:31 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal Prelude 1.1.5 2013-08-15 20:22 - 2013-08-16 21:55 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Origin 2013-08-15 20:22 - 2013-08-15 20:38 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Origin 2013-08-15 20:03 - 2013-08-18 22:27 - 00000000 ____D C:\ProgramData\Origin 2013-08-15 20:03 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-08-14 12:59 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 12:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 12:59 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 12:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 12:59 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 12:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 12:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 12:59 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 12:59 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 12:58 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 12:58 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 12:58 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 12:58 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 12:58 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 12:37 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 12:37 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 12:36 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 12:36 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 12:36 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 12:36 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 12:36 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 12:36 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 12:36 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 12:36 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 12:36 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 12:36 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 12:36 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 12:36 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 12:36 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 12:36 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 12:36 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 12:36 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 12:36 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 12:35 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 12:35 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-13 00:14 - 2013-08-13 00:14 - 00009728 _____ C:\Windows\SysWOW64\BASSMOD.dll 2013-08-12 12:18 - 2013-08-12 12:18 - 00194885 _____ C:\Users\Silverdrag0n\Downloads\hjsplit.zip ==================== One Month Modified Files and Folders ======= 2013-09-09 16:05 - 2013-09-09 16:05 - 01948948 _____ (Farbar) C:\Users\Silverdrag0n\Desktop\FRST64.exe 2013-09-09 16:04 - 2009-07-14 06:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-09 16:04 - 2009-07-14 06:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-09 16:00 - 2013-09-09 16:00 - 00001988 _____ C:\Users\Silverdrag0n\Desktop\JRT.txt 2013-09-09 16:00 - 2013-09-03 13:27 - 00378709 _____ C:\Windows\WindowsUpdate.log 2013-09-09 15:58 - 2013-09-04 10:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-09 15:58 - 2013-04-05 18:34 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Skype 2013-09-09 15:57 - 2013-09-06 14:16 - 00001546 _____ C:\Windows\setupact.log 2013-09-09 15:57 - 2013-04-15 00:20 - 00000000 ____D C:\ProgramData\VMware 2013-09-09 15:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-09 15:53 - 2013-09-09 15:53 - 00000000 ____D C:\Windows\ERUNT 2013-09-09 15:49 - 2013-09-09 15:48 - 00000000 ____D C:\AdwCleaner 2013-09-09 15:45 - 2013-09-09 15:45 - 01029490 _____ (Thisisu) C:\Users\Silverdrag0n\Desktop\JRT.exe 2013-09-09 15:44 - 2013-09-09 15:44 - 01037278 _____ C:\Users\Silverdrag0n\Desktop\adwcleaner.exe 2013-09-09 15:33 - 2013-04-05 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-09-08 23:07 - 2013-04-05 22:24 - 00700816 _____ C:\Windows\system32\perfh007.dat 2013-09-08 23:07 - 2013-04-05 22:24 - 00150104 _____ C:\Windows\system32\perfc007.dat 2013-09-08 23:07 - 2009-07-14 07:13 - 01624996 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-08 23:04 - 2013-04-24 21:01 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Windows Live 2013-09-08 22:55 - 2013-07-18 19:27 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\FirestormOS 2013-09-08 18:26 - 2013-04-05 13:14 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Macromedia 2013-09-07 21:07 - 2013-09-07 21:07 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Neuer Ordner 2013-09-07 19:02 - 2013-09-07 19:02 - 00036563 _____ C:\ComboFix.txt 2013-09-07 19:02 - 2013-09-07 18:47 - 00000000 ____D C:\Qoobox 2013-09-07 19:00 - 2013-09-07 18:47 - 00000000 ____D C:\Windows\erdnt 2013-09-07 18:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-09-07 18:56 - 2013-09-07 18:56 - 00001018 _____ C:\Windows\PFRO.log 2013-09-07 18:45 - 2013-09-07 18:45 - 05120615 ____R (Swearware) C:\Users\Silverdrag0n\Desktop\ComboFix.exe 2013-09-07 18:43 - 2013-04-05 11:55 - 00000000 ____D C:\Program Files\BatteryBar 2013-09-07 18:41 - 2013-04-05 13:49 - 00000000 ____D C:\Program Files (x86)\Wuala OverlayIcons 2013-09-06 19:24 - 2013-09-06 19:24 - 00000000 ____D C:\FRST 2013-09-06 14:22 - 2013-09-06 14:21 - 00000388 _____ C:\Windows\LkmdfCoInst.log 2013-09-06 14:21 - 2013-04-05 14:30 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-09-06 14:16 - 2013-09-06 14:16 - 00000000 _____ C:\Windows\setuperr.log 2013-09-06 14:16 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-05 23:20 - 2013-04-05 13:00 - 00000905 _____ C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk 2013-09-05 23:13 - 2013-09-05 23:11 - 26788960 _____ C:\Users\Silverdrag0n\Downloads\WualaSetup.exe 2013-09-05 23:10 - 2013-04-05 13:00 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Wuala 2013-09-05 23:04 - 2013-04-07 12:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-09-05 22:35 - 2013-04-23 11:40 - 00000695 _____ C:\Windows\ULead32.ini 2013-09-05 21:44 - 2013-09-05 00:02 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\hijackthis 2013-09-05 21:32 - 2013-09-05 21:32 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Silverdrag0n\Downloads\KillBox.exe 2013-09-05 03:22 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Visual Studio 2010 2013-09-05 03:02 - 2013-04-15 09:16 - 00000638 __RSH C:\Users\Silverdrag0n\ntuser.pol 2013-09-05 03:02 - 2013-04-05 10:29 - 00000000 ____D C:\Users\Silverdrag0n 2013-09-05 02:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources 2013-09-05 01:42 - 2013-04-05 12:47 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Notepad++ 2013-09-05 01:39 - 2013-09-05 01:39 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-05 01:38 - 2013-09-05 01:37 - 23003252 _____ C:\Users\Silverdrag0n\Downloads\vlc-2.0.8-win32.exe 2013-09-05 01:37 - 2013-05-28 23:52 - 00000000 ___RD C:\Users\Silverdrag0n\Desktop\Tools 2013-09-05 01:36 - 2013-09-05 01:36 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim(1).exe 2013-09-04 23:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2013-09-04 22:16 - 2013-09-04 22:15 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Silverdrag0n\Downloads\Shockwave_Installer_Slim.exe 2013-09-04 11:20 - 2013-09-04 10:57 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-09-04 11:20 - 2013-09-04 10:57 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-09-04 11:20 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2013-09-04 11:20 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Windows\ELAMBKUP 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-04 10:53 - 2013-09-04 10:50 - 00427934 _____ C:\Users\Silverdrag0n\Downloads\kavremvr 2013-09-04 10-50-36 (pid 5304).log 2013-09-04 10:50 - 2013-09-04 10:50 - 04894912 _____ (Kaspersky Lab ZAO) C:\Users\Silverdrag0n\Downloads\kavremover.exe 2013-09-04 01:15 - 2013-04-05 11:06 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Mozilla 2013-09-04 00:56 - 2013-09-04 00:30 - 176212264 _____ (Kaspersky Lab) C:\Users\Silverdrag0n\Downloads\kis13.0.1.4190de-de.exe 2013-09-04 00:31 - 2013-04-05 11:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-09-04 00:23 - 2013-09-04 00:23 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-04 00:22 - 2013-09-04 00:17 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-04 00:22 - 2013-07-17 10:16 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\NVIDIA 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\system32\NV 2013-09-04 00:20 - 2013-05-19 18:15 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-04 00:18 - 2013-09-04 00:18 - 00001360 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-04 00:18 - 2013-09-04 00:18 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-04 00:18 - 2013-04-05 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-09-04 00:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-09-04 00:02 - 2013-09-03 23:29 - 239467888 _____ (NVIDIA Corporation) C:\Users\Silverdrag0n\Downloads\326.80-notebook-win8-win7-64bit-international-beta.exe 2013-09-03 23:30 - 2013-09-03 23:30 - 00165054 _____ C:\Users\Silverdrag0n\Downloads\IntelCoreSeries.zip 2013-09-03 23:30 - 2013-09-03 23:30 - 00086061 _____ C:\Users\Silverdrag0n\Downloads\PowerStatusGadget.zip 2013-09-03 23:29 - 2013-09-03 23:29 - 00106523 _____ C:\Users\Silverdrag0n\Downloads\GPUObserver.zip 2013-09-03 23:24 - 2013-04-15 00:24 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\VMware 2013-09-03 23:24 - 2013-04-15 00:24 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\VMware 2013-09-03 23:16 - 2013-04-05 10:48 - 00000184 _____ C:\Windows\LMv4.UNI 2013-09-03 23:16 - 2013-04-05 10:48 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-09-03 22:27 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-09-03 22:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-09-03 20:00 - 2013-09-03 19:59 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Mozilla 2013-09-03 19:59 - 2013-09-03 19:59 - 00000767 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-03 19:59 - 2013-09-03 19:59 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-03 19:53 - 2013-09-02 21:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-09-03 19:45 - 2013-04-19 19:50 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Spotify 2013-09-03 19:04 - 2013-09-03 19:04 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Process Explorer 2013-09-03 15:17 - 2013-04-07 11:24 - 00000688 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-03 13:34 - 2013-09-03 13:34 - 00002938 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2013-09-02 23:21 - 2013-09-02 23:21 - 04454952 _____ (Piriform Ltd) C:\Users\Silverdrag0n\Downloads\ccsetup405.exe 2013-09-02 23:21 - 2013-04-05 12:14 - 00000673 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-02 22:53 - 2013-04-05 14:23 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2013-09-02 22:51 - 2013-04-05 14:03 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Logishrd 2013-09-02 22:44 - 2013-09-02 22:33 - 56514904 _____ (Logitech Inc.) C:\Users\Silverdrag0n\Downloads\LGS_8.50.281_x64_Logitech.exe 2013-08-31 12:25 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Winamp 2013-08-30 13:52 - 2013-04-05 19:47 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Last.fm 2013-08-30 12:20 - 2013-08-30 12:20 - 00243651 _____ C:\Users\Silverdrag0n\Downloads\Bestellung_bei_ESPRIT.zip 2013-08-30 11:31 - 2013-06-17 00:11 - 00000752 _____ C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-08-30 11:30 - 2013-07-05 20:55 - 00000788 _____ C:\Users\Public\Desktop\Uninstaller.lnk 2013-08-30 11:30 - 2013-06-17 00:11 - 00000759 _____ C:\Users\Public\Desktop\Advanced SystemCare 6.lnk 2013-08-28 22:30 - 2013-08-25 23:56 - 00007184 _____ C:\Users\Silverdrag0n\Desktop\BuildFirestorm_new_deutsch.txt 2013-08-27 14:49 - 2013-07-07 19:19 - 00000094 _____ C:\Users\Silverdrag0n\Desktop\PoenixG.Doc_pw.txt 2013-08-27 13:48 - 2013-04-19 19:52 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Spotify 2013-08-26 23:41 - 2013-06-17 00:49 - 00007605 _____ C:\Users\SILVER~1\AppData\Local\Resmon.ResmonCfg 2013-08-26 23:33 - 2013-04-11 22:13 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\vlc 2013-08-26 12:03 - 2013-08-26 12:03 - 00001496 _____ C:\Users\Silverdrag0n\Desktop\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe.lnk 2013-08-24 00:37 - 2013-08-24 00:14 - 98688206 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part3.rar 2013-08-24 00:10 - 2013-08-23 23:39 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part2.rar 2013-08-23 23:38 - 2013-08-23 22:58 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part1.rar 2013-08-22 20:41 - 2013-08-22 00:06 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\ebooks 2013-08-21 19:08 - 2013-08-21 17:53 - 00000521 _____ C:\Windows\system\Cm108.ini 2013-08-21 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system 2013-08-21 17:29 - 2013-08-21 17:26 - 21591617 _____ C:\Users\Silverdrag0n\Downloads\HPX-3090M_USB-Driver_XP_VISTA_WIN7(1).zip 2013-08-21 16:27 - 2013-04-07 11:54 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\TeamViewer 2013-08-21 12:48 - 2013-04-07 10:47 - 00000000 ____D C:\Program Files (x86)\CMake 2.8 2013-08-21 12:47 - 2013-08-21 12:46 - 10356589 _____ C:\Users\Silverdrag0n\Downloads\cmake-2.8.11.2-win32-x86.exe 2013-08-20 17:18 - 2013-04-12 20:29 - 00123344 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-08-20 16:05 - 2013-08-20 10:59 - 00001223 _____ C:\Users\Silverdrag0n\Desktop\SilverScriptV.1.0.1.lnk 2013-08-20 15:39 - 2013-08-20 15:39 - 00057376 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00644968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00028008 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2013-08-20 15:33 - 2013-09-04 00:30 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-08-20 15:32 - 2013-09-04 00:30 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-08-20 15:32 - 2013-09-04 00:16 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 13030912 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 10811904 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 05905904 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 05358016 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 03511296 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 01040384 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00931840 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00575488 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00542720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00515568 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00442352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00399856 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 00330752 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00254960 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00223664 _____ C:\Windows\system32\Gfxres.th-TH.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00210106 _____ C:\Windows\system32\Gfxres.el-GR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00194245 _____ C:\Windows\system32\Gfxres.ru-RU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00175104 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00172016 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00166170 _____ C:\Windows\system32\Gfxres.ar-SA.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00163421 _____ C:\Windows\system32\Gfxres.ja-JP.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00159008 _____ C:\Windows\system32\Gfxres.he-IL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00149682 _____ C:\Windows\system32\Gfxres.it-IT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00148042 _____ C:\Windows\system32\Gfxres.ko-KR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147393 _____ C:\Windows\system32\Gfxres.de-DE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147288 _____ C:\Windows\system32\Gfxres.es-ES.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00146004 _____ C:\Windows\system32\Gfxres.ro-RO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00145491 _____ C:\Windows\system32\Gfxres.fr-FR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144645 _____ C:\Windows\system32\Gfxres.tr-TR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144260 _____ C:\Windows\system32\Gfxres.pt-BR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144020 _____ C:\Windows\system32\Gfxres.nl-NL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00143932 _____ C:\Windows\system32\Gfxres.hu-HU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142882 _____ C:\Windows\system32\Gfxres.sv-SE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142877 _____ C:\Windows\system32\Gfxres.pt-PT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142717 _____ C:\Windows\system32\Gfxres.pl-PL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00142289 _____ C:\Windows\system32\Gfxres.cs-CZ.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142008 _____ C:\Windows\system32\Gfxres.fi-FI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141838 _____ C:\Windows\system32\Gfxres.sk-SK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141049 _____ C:\Windows\system32\Gfxres.hr-HR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137889 _____ C:\Windows\system32\Gfxres.sl-SI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137784 _____ C:\Windows\system32\Gfxres.nb-NO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137141 _____ C:\Windows\system32\Gfxres.da-DK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2013-08-20 15:24 - 2013-08-20 15:24 - 00126300 _____ C:\Windows\system32\Gfxres.zh-TW.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00124650 _____ C:\Windows\system32\Gfxres.zh-CN.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3062.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00080384 _____ C:\Windows\system32\igdde64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00017078 _____ C:\Windows\system32\iglhxs64.vp 2013-08-20 15:24 - 2013-08-20 15:24 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2013-08-20 15:24 - 2012-03-19 16:31 - 12615680 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll 2013-08-20 15:24 - 2012-03-19 16:26 - 11049472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll 2013-08-20 15:24 - 2012-03-19 16:22 - 12858368 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll 2013-08-20 15:24 - 2012-03-19 16:11 - 11175424 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00442880 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00064000 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2013-08-20 14:16 - 2013-07-19 22:36 - 00003196 _____ C:\Windows\System32\Tasks\Driver Booster Update 2013-08-20 13:52 - 2013-08-20 13:52 - 86949888 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 05005312 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00065536 _____ C:\Windows\system32\config\SAM.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit 2013-08-20 12:52 - 2013-04-05 10:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-20 11:46 - 2013-08-20 11:46 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mirc732.exe 2013-08-20 11:44 - 2013-08-20 11:44 - 01105460 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mIRC.exe 2013-08-19 23:28 - 2013-08-19 23:28 - 04539462 _____ C:\Users\Silverdrag0n\Downloads\slvoice-4.5.0009.17865-windows-20130214.tar.bz2 2013-08-19 23:12 - 2013-08-19 20:30 - 1391998657 _____ (Acresso Software Inc.) C:\Users\Silverdrag0n\Downloads\TS3_1.55.4.0220xx_update.exe 2013-08-19 14:41 - 2013-08-19 14:41 - 00000000 ____D C:\ProgramData\EA Core 2013-08-19 14:24 - 2013-08-19 14:24 - 00001182 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk 2013-08-19 14:21 - 2013-08-19 14:25 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-18 23:02 - 2013-09-04 00:16 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2013-08-18 23:02 - 2013-09-04 00:16 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-18 22:27 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Origin 2013-08-18 21:43 - 2013-08-18 21:43 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Electronic Arts 2013-08-18 21:34 - 2013-09-04 00:17 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 01041696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-18 21:34 - 2013-09-04 00:17 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-17 07:30 - 2013-09-04 00:17 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-16 21:55 - 2013-08-15 20:22 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Origin 2013-08-16 21:31 - 2013-08-16 21:31 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal Prelude 1.1.5 2013-08-16 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-16 18:36 - 2013-04-05 20:23 - 00000000 ____D C:\Windows\Panther 2013-08-15 20:38 - 2013-08-15 20:22 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Origin 2013-08-15 20:03 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-08-15 20:03 - 2013-04-11 22:10 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Spiele 2013-08-14 12:55 - 2013-04-05 13:42 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 00:14 - 2013-08-13 00:14 - 00009728 _____ C:\Windows\SysWOW64\BASSMOD.dll 2013-08-12 12:18 - 2013-08-12 12:18 - 00194885 _____ C:\Users\Silverdrag0n\Downloads\hjsplit.zip 2013-08-11 19:18 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\Documents\My Games Files to move or delete: ==================== C:\Users\SILVER~1\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2013-05-19 18:24] - [2011-02-25 08:19] - 2388992 ____A (Microsoft Corporation) 3510644520B93226E7033B7618FCAFF0 C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-04 21:16 ==================== End Of Log ============================ --- --- --- --- --- --- Die MD5 Bei der Explorer.exe ist übrigens nicht gültig, da sie modifiziert ist , ich habe ein anderes Start Button eingefügt. Geändert von SilverDrag0n (09.09.2013 um 15:21 Uhr) Grund: Malewarebytes war nicht Aktuell Fixed |
09.09.2013, 18:01 | #9 |
/// the machine /// TB-Ausbilder | Firefox öffnet verschiedene seiten in unregelmäsigen abständen.ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.09.2013, 23:12 | #10 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen.Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5a48c97095a1c94cb5ae48c76900c28c # engine=15064 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-09-09 09:54:03 # local_time=2013-09-09 11:54:03 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1286 16777213 100 98 28614 33533565 0 0 # compatibility_mode=5893 16776573 100 94 27983 130393493 0 0 # scanned=607348 # found=0 # cleaned=0 # scan_time=14663 FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013 01 Ran by Silverdrag0n (administrator) on SILVERDRAG0N-LE on 10-09-2013 00:02:09 Running from C:\Users\Silverdrag0n\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) I:\Programme\Advanced SystemCare 6\ASCService.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Safer Networking Ltd.) I:\Programme\Spybot - Search & Destroy\SDWinSec.exe (TeamViewer GmbH) I:\Programme\Team Viewer\TeamViewer.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (VMware, Inc.) I:\Programme\VMware\vmware-authd.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe () I:\Programme\VMware\vmware-hostd.exe (TeamViewer GmbH) I:\Programme\Team Viewer\tv_w32.exe (TeamViewer GmbH) I:\Programme\Team Viewer\tv_x64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (IObit) I:\Programme\Advanced SystemCare 6\ASCTray.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Spotify Ltd) C:\Users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (element code project) I:\Programme\Growl\Growl.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (VMware, Inc.) I:\Programme\VMware\vmware-tray.exe (Elaborate Bytes AG) I:\Programme\VirtualCloneDrive\VCDDaemon.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (IObit) I:\Programme\Advanced SystemCare 6\ASC.exe (LaCie) C:\Users\Silverdrag0n\AppData\Roaming\Wuala\Wuala.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Mozilla Corporation) I:\Programme\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-09-24] (ELAN Microelectronics Corp.) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKCU\...\Run: [Advanced SystemCare 6] - I:\Programme\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Silverdrag0n\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-17] (Spotify Ltd) HKCU\...\Run: [Growl] - I:\Programme\Growl\Growl.exe [3817472 2012-03-21] (element code project) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2013-04-11] () HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1092688 2011-03-31] (Dritek System Inc.) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-09-04] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [vmware-tray] - I:\Programme\VMware\vmware-tray.exe [104528 2013-02-26] (VMware, Inc.) HKLM-x32\...\Run: [vmware-tray.exe] - I:\Programme\VMware\vmware-tray.exe [104528 2013-02-26] (VMware, Inc.) HKLM-x32\...\Run: [VirtualCloneDrive] - I:\Programme\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-08-18] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-18] (NVIDIA Corporation) SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - I:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - I:\Programme\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - I:\Programme\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - I:\Programme\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - I:\Programme\VLC\npvlc.dll (VideoLAN) FF Extension: statusbardate - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\statusbardate@webspirited.com.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{daf44bf7-a45e-4450-979c-91cf07434c3d}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: No Name - C:\Users\Silverdrag0n\AppData\Roaming\Mozilla\Firefox\Profiles\nbtsnq88.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF StartMenuInternet: FIREFOX.EXE - I:\Programme\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= R2 AdvancedSystemCareService6; I:\Programme\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-09-04] (Kaspersky Lab ZAO) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-08-23] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) R2 SBSDWSCService; I:\Programme\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) R2 TeamViewer8; I:\Programme\Team Viewer\TeamViewer_Service.exe [5071712 2013-09-02] (TeamViewer GmbH) R2 VMAuthdService; I:\Programme\VMware\vmware-authd.exe [87120 2013-02-26] (VMware, Inc.) R2 VMwareHostd; I:\Programme\VMware\vmware-hostd.exe [13242960 2013-02-26] () R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-20] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-04] (Kaspersky Lab ZAO) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.) R2 WinRing0_1_2_0; C:\Users\Silverdrag0n\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.sys [14544 2013-09-03] (OpenLibSys.org) S3 catchme; \??\C:\ComboFix\catchme.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-04] (Kaspersky Lab ZAO) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 Tortilla; system32\DRIVERS\tortilla.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 XFDriver64; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-10 00:00 - 2013-09-10 00:01 - 01949196 _____ (Farbar) C:\Users\Silverdrag0n\Desktop\FRST64.exe 2013-09-09 19:39 - 2013-09-09 19:40 - 00891144 _____ C:\Users\Silverdrag0n\Desktop\SecurityCheck.exe 2013-09-09 15:53 - 2013-09-09 15:53 - 00000000 ____D C:\Windows\ERUNT 2013-09-09 15:45 - 2013-09-09 15:45 - 01029490 _____ (Thisisu) C:\Users\Silverdrag0n\Desktop\JRT.exe 2013-09-09 15:44 - 2013-09-09 15:44 - 01037278 _____ C:\Users\Silverdrag0n\Desktop\adwcleaner.exe 2013-09-07 18:56 - 2013-09-07 18:56 - 00001018 _____ C:\Windows\PFRO.log 2013-09-07 18:48 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-09-07 18:48 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-09-07 18:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-09-07 18:48 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-09-07 18:47 - 2013-09-07 19:02 - 00000000 ____D C:\Qoobox 2013-09-07 18:47 - 2013-09-07 19:00 - 00000000 ____D C:\Windows\erdnt 2013-09-07 18:45 - 2013-09-07 18:45 - 05120615 ____R (Swearware) C:\Users\Silverdrag0n\Desktop\ComboFix.exe 2013-09-06 14:21 - 2013-09-06 14:22 - 00000388 _____ C:\Windows\LkmdfCoInst.log 2013-09-06 14:16 - 2013-09-09 15:57 - 00001546 _____ C:\Windows\setupact.log 2013-09-06 14:16 - 2013-09-06 14:16 - 00000000 _____ C:\Windows\setuperr.log 2013-09-05 23:20 - 2012-04-09 16:27 - 00190480 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll 2013-09-05 23:20 - 2012-04-09 16:27 - 00141328 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll 2013-09-05 23:11 - 2013-09-05 23:13 - 26788960 _____ C:\Users\Silverdrag0n\Downloads\WualaSetup.exe 2013-09-05 21:32 - 2013-09-05 21:32 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Silverdrag0n\Downloads\KillBox.exe 2013-09-05 01:39 - 2013-09-05 01:39 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-05 01:37 - 2013-09-05 01:38 - 23003252 _____ C:\Users\Silverdrag0n\Downloads\vlc-2.0.8-win32.exe 2013-09-05 00:02 - 2013-09-05 21:44 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\hijackthis 2013-09-04 10:58 - 2013-09-09 22:17 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Windows\ELAMBKUP 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-04 10:58 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll 2013-09-04 10:57 - 2013-09-04 11:20 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-09-04 10:57 - 2013-09-04 11:20 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-09-04 00:30 - 2013-09-04 00:56 - 176212264 _____ (Kaspersky Lab) C:\Users\Silverdrag0n\Downloads\kis13.0.1.4190de-de.exe 2013-09-04 00:30 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-09-04 00:30 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-09-04 00:23 - 2013-09-04 00:23 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\system32\NV 2013-09-04 00:18 - 2013-09-04 00:18 - 00001360 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-04 00:18 - 2013-09-04 00:18 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-04 00:17 - 2013-09-04 00:22 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-04 00:17 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 01041696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-09-04 00:17 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2013-09-04 00:17 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-09-04 00:17 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-09-04 00:16 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-09-04 00:16 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-04 00:16 - 2013-08-18 23:02 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2013-09-04 00:16 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-09-03 23:30 - 2013-09-03 23:30 - 00165054 _____ C:\Users\Silverdrag0n\Downloads\IntelCoreSeries.zip 2013-09-03 23:30 - 2013-09-03 23:30 - 00086061 _____ C:\Users\Silverdrag0n\Downloads\PowerStatusGadget.zip 2013-09-03 23:29 - 2013-09-04 00:02 - 239467888 _____ (NVIDIA Corporation) C:\Users\Silverdrag0n\Downloads\326.80-notebook-win8-win7-64bit-international-beta.exe 2013-09-03 23:29 - 2013-09-03 23:29 - 00106523 _____ C:\Users\Silverdrag0n\Downloads\GPUObserver.zip 2013-09-03 19:59 - 2013-09-03 20:00 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Mozilla 2013-09-03 19:59 - 2013-09-03 19:59 - 00000767 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-03 19:59 - 2013-09-03 19:59 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-03 19:04 - 2013-09-03 19:04 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Process Explorer 2013-09-03 13:34 - 2013-09-03 13:34 - 00002938 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2013-09-03 13:27 - 2013-09-09 20:51 - 00378805 _____ C:\Windows\WindowsUpdate.log 2013-09-02 23:21 - 2013-09-02 23:21 - 04454952 _____ (Piriform Ltd) C:\Users\Silverdrag0n\Downloads\ccsetup405.exe 2013-09-02 22:33 - 2013-09-02 22:44 - 56514904 _____ (Logitech Inc.) C:\Users\Silverdrag0n\Downloads\LGS_8.50.281_x64_Logitech.exe 2013-09-02 21:50 - 2013-09-03 19:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-08-30 18:05 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll 2013-08-26 12:03 - 2013-08-26 12:03 - 00001496 _____ C:\Users\Silverdrag0n\Desktop\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe.lnk 2013-08-25 23:56 - 2013-08-28 22:30 - 00007184 _____ C:\Users\Silverdrag0n\Desktop\BuildFirestorm_new_deutsch.txt 2013-08-24 00:14 - 2013-08-24 00:37 - 98688206 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part3.rar 2013-08-23 23:39 - 2013-08-24 00:10 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part2.rar 2013-08-23 22:58 - 2013-08-23 23:38 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part1.rar 2013-08-22 00:06 - 2013-08-22 20:41 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\ebooks 2013-08-21 17:53 - 2013-08-21 19:08 - 00000521 _____ C:\Windows\system\Cm108.ini 2013-08-21 17:53 - 2008-10-06 14:55 - 07696384 _____ (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll 2013-08-21 17:26 - 2013-08-21 17:29 - 21591617 _____ C:\Users\Silverdrag0n\Downloads\HPX-3090M_USB-Driver_XP_VISTA_WIN7(1).zip 2013-08-21 12:46 - 2013-08-21 12:47 - 10356589 _____ C:\Users\Silverdrag0n\Downloads\cmake-2.8.11.2-win32-x86.exe 2013-08-20 15:39 - 2013-08-20 15:39 - 00057376 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00644968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00028008 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 13030912 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 10811904 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 05905904 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 05358016 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 03511296 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 01040384 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00931840 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00575488 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00542720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00515568 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00442352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00399856 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 00330752 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00254960 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00223664 _____ C:\Windows\system32\Gfxres.th-TH.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00210106 _____ C:\Windows\system32\Gfxres.el-GR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00194245 _____ C:\Windows\system32\Gfxres.ru-RU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00175104 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00172016 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00166170 _____ C:\Windows\system32\Gfxres.ar-SA.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00163421 _____ C:\Windows\system32\Gfxres.ja-JP.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00159008 _____ C:\Windows\system32\Gfxres.he-IL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00149682 _____ C:\Windows\system32\Gfxres.it-IT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00148042 _____ C:\Windows\system32\Gfxres.ko-KR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147393 _____ C:\Windows\system32\Gfxres.de-DE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147288 _____ C:\Windows\system32\Gfxres.es-ES.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00146004 _____ C:\Windows\system32\Gfxres.ro-RO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00145491 _____ C:\Windows\system32\Gfxres.fr-FR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144645 _____ C:\Windows\system32\Gfxres.tr-TR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144260 _____ C:\Windows\system32\Gfxres.pt-BR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144020 _____ C:\Windows\system32\Gfxres.nl-NL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00143932 _____ C:\Windows\system32\Gfxres.hu-HU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142882 _____ C:\Windows\system32\Gfxres.sv-SE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142877 _____ C:\Windows\system32\Gfxres.pt-PT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142717 _____ C:\Windows\system32\Gfxres.pl-PL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00142289 _____ C:\Windows\system32\Gfxres.cs-CZ.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142008 _____ C:\Windows\system32\Gfxres.fi-FI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141838 _____ C:\Windows\system32\Gfxres.sk-SK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141049 _____ C:\Windows\system32\Gfxres.hr-HR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137889 _____ C:\Windows\system32\Gfxres.sl-SI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137784 _____ C:\Windows\system32\Gfxres.nb-NO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137141 _____ C:\Windows\system32\Gfxres.da-DK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2013-08-20 15:24 - 2013-08-20 15:24 - 00126300 _____ C:\Windows\system32\Gfxres.zh-TW.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00124650 _____ C:\Windows\system32\Gfxres.zh-CN.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3062.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00080384 _____ C:\Windows\system32\igdde64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00017078 _____ C:\Windows\system32\iglhxs64.vp 2013-08-20 15:24 - 2013-08-20 15:24 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2013-08-20 13:52 - 2013-08-20 13:52 - 86949888 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 05005312 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00065536 _____ C:\Windows\system32\config\SAM.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit 2013-08-20 11:46 - 2013-08-20 11:46 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mirc732.exe 2013-08-20 11:44 - 2013-08-20 11:44 - 01105460 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mIRC.exe 2013-08-20 10:59 - 2013-08-20 16:05 - 00001223 _____ C:\Users\Silverdrag0n\Desktop\SilverScriptV.1.0.1.lnk 2013-08-19 23:28 - 2013-08-19 23:28 - 04539462 _____ C:\Users\Silverdrag0n\Downloads\slvoice-4.5.0009.17865-windows-20130214.tar.bz2 2013-08-19 20:30 - 2013-08-19 23:12 - 1391998657 _____ (Acresso Software Inc.) C:\Users\Silverdrag0n\Downloads\TS3_1.55.4.0220xx_update.exe 2013-08-19 14:41 - 2013-08-19 14:41 - 00000000 ____D C:\ProgramData\EA Core 2013-08-19 14:25 - 2013-08-19 14:21 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll 2013-08-19 14:24 - 2013-08-19 14:24 - 00001182 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk 2013-08-18 21:43 - 2013-08-18 21:43 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Electronic Arts 2013-08-16 21:31 - 2013-08-16 21:31 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal Prelude 1.1.5 2013-08-15 20:22 - 2013-08-16 21:55 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Origin 2013-08-15 20:22 - 2013-08-15 20:38 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Origin 2013-08-15 20:03 - 2013-08-18 22:27 - 00000000 ____D C:\ProgramData\Origin 2013-08-15 20:03 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-08-14 12:59 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 12:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 12:59 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 12:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 12:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 12:59 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 12:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 12:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 12:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 12:59 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 12:59 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 12:58 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 12:58 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 12:58 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 12:58 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 12:58 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 12:58 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 12:37 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 12:37 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 12:37 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 12:37 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 12:36 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 12:36 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 12:36 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 12:36 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 12:36 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 12:36 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 12:36 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 12:36 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 12:36 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 12:36 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 12:36 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 12:36 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 12:36 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 12:36 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 12:36 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 12:36 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 12:36 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 12:35 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 12:35 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-13 00:14 - 2013-08-13 00:14 - 00009728 _____ C:\Windows\SysWOW64\BASSMOD.dll 2013-08-12 12:18 - 2013-08-12 12:18 - 00194885 _____ C:\Users\Silverdrag0n\Downloads\hjsplit.zip ==================== One Month Modified Files and Folders ======= 2013-09-10 00:01 - 2013-09-10 00:00 - 01949196 _____ (Farbar) C:\Users\Silverdrag0n\Desktop\FRST64.exe 2013-09-09 23:57 - 2013-04-05 18:34 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Skype 2013-09-09 23:19 - 2013-07-18 19:27 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\FirestormOS 2013-09-09 22:17 - 2013-09-04 10:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-09 20:51 - 2013-09-03 13:27 - 00378805 _____ C:\Windows\WindowsUpdate.log 2013-09-09 19:43 - 2013-04-05 22:24 - 00700816 _____ C:\Windows\system32\perfh007.dat 2013-09-09 19:43 - 2013-04-05 22:24 - 00150104 _____ C:\Windows\system32\perfc007.dat 2013-09-09 19:43 - 2009-07-14 07:13 - 01624996 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-09 19:40 - 2013-09-09 19:39 - 00891144 _____ C:\Users\Silverdrag0n\Desktop\SecurityCheck.exe 2013-09-09 16:04 - 2009-07-14 06:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-09 16:04 - 2009-07-14 06:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-09 15:57 - 2013-09-06 14:16 - 00001546 _____ C:\Windows\setupact.log 2013-09-09 15:57 - 2013-04-15 00:20 - 00000000 ____D C:\ProgramData\VMware 2013-09-09 15:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-09 15:53 - 2013-09-09 15:53 - 00000000 ____D C:\Windows\ERUNT 2013-09-09 15:45 - 2013-09-09 15:45 - 01029490 _____ (Thisisu) C:\Users\Silverdrag0n\Desktop\JRT.exe 2013-09-09 15:44 - 2013-09-09 15:44 - 01037278 _____ C:\Users\Silverdrag0n\Desktop\adwcleaner.exe 2013-09-09 15:33 - 2013-04-05 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-09-08 23:04 - 2013-04-24 21:01 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Windows Live 2013-09-08 18:26 - 2013-04-05 13:14 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Macromedia 2013-09-07 19:02 - 2013-09-07 18:47 - 00000000 ____D C:\Qoobox 2013-09-07 19:00 - 2013-09-07 18:47 - 00000000 ____D C:\Windows\erdnt 2013-09-07 18:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-09-07 18:56 - 2013-09-07 18:56 - 00001018 _____ C:\Windows\PFRO.log 2013-09-07 18:45 - 2013-09-07 18:45 - 05120615 ____R (Swearware) C:\Users\Silverdrag0n\Desktop\ComboFix.exe 2013-09-07 18:43 - 2013-04-05 11:55 - 00000000 ____D C:\Program Files\BatteryBar 2013-09-07 18:41 - 2013-04-05 13:49 - 00000000 ____D C:\Program Files (x86)\Wuala OverlayIcons 2013-09-06 14:22 - 2013-09-06 14:21 - 00000388 _____ C:\Windows\LkmdfCoInst.log 2013-09-06 14:21 - 2013-04-05 14:30 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-09-06 14:16 - 2013-09-06 14:16 - 00000000 _____ C:\Windows\setuperr.log 2013-09-06 14:16 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-05 23:20 - 2013-04-05 13:00 - 00000905 _____ C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk 2013-09-05 23:13 - 2013-09-05 23:11 - 26788960 _____ C:\Users\Silverdrag0n\Downloads\WualaSetup.exe 2013-09-05 23:10 - 2013-04-05 13:00 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Wuala 2013-09-05 23:04 - 2013-04-07 12:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-09-05 22:35 - 2013-04-23 11:40 - 00000695 _____ C:\Windows\ULead32.ini 2013-09-05 21:44 - 2013-09-05 00:02 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\hijackthis 2013-09-05 21:32 - 2013-09-05 21:32 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Silverdrag0n\Downloads\KillBox.exe 2013-09-05 03:22 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Visual Studio 2010 2013-09-05 03:02 - 2013-04-15 09:16 - 00000638 __RSH C:\Users\Silverdrag0n\ntuser.pol 2013-09-05 03:02 - 2013-04-05 10:29 - 00000000 ____D C:\Users\Silverdrag0n 2013-09-05 02:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources 2013-09-05 01:42 - 2013-04-05 12:47 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Notepad++ 2013-09-05 01:39 - 2013-09-05 01:39 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-09-05 01:38 - 2013-09-05 01:37 - 23003252 _____ C:\Users\Silverdrag0n\Downloads\vlc-2.0.8-win32.exe 2013-09-05 01:37 - 2013-05-28 23:52 - 00000000 ___RD C:\Users\Silverdrag0n\Desktop\Tools 2013-09-04 23:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2013-09-04 11:20 - 2013-09-04 10:57 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-09-04 11:20 - 2013-09-04 10:57 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-09-04 11:20 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2013-09-04 11:20 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Windows\ELAMBKUP 2013-09-04 10:58 - 2013-09-04 10:58 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-04 01:15 - 2013-04-05 11:06 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Mozilla 2013-09-04 00:56 - 2013-09-04 00:30 - 176212264 _____ (Kaspersky Lab) C:\Users\Silverdrag0n\Downloads\kis13.0.1.4190de-de.exe 2013-09-04 00:31 - 2013-04-05 11:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-09-04 00:23 - 2013-09-04 00:23 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\NVIDIA 2013-09-04 00:22 - 2013-09-04 00:17 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-04 00:22 - 2013-07-17 10:16 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\NVIDIA 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-09-04 00:20 - 2013-09-04 00:20 - 00000000 ____D C:\Windows\system32\NV 2013-09-04 00:20 - 2013-05-19 18:15 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-04 00:18 - 2013-09-04 00:18 - 00001360 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-04 00:18 - 2013-09-04 00:18 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-04 00:18 - 2013-04-05 11:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-09-04 00:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-09-04 00:02 - 2013-09-03 23:29 - 239467888 _____ (NVIDIA Corporation) C:\Users\Silverdrag0n\Downloads\326.80-notebook-win8-win7-64bit-international-beta.exe 2013-09-03 23:30 - 2013-09-03 23:30 - 00165054 _____ C:\Users\Silverdrag0n\Downloads\IntelCoreSeries.zip 2013-09-03 23:30 - 2013-09-03 23:30 - 00086061 _____ C:\Users\Silverdrag0n\Downloads\PowerStatusGadget.zip 2013-09-03 23:29 - 2013-09-03 23:29 - 00106523 _____ C:\Users\Silverdrag0n\Downloads\GPUObserver.zip 2013-09-03 23:24 - 2013-04-15 00:24 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\VMware 2013-09-03 23:24 - 2013-04-15 00:24 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\VMware 2013-09-03 23:16 - 2013-04-05 10:48 - 00000184 _____ C:\Windows\LMv4.UNI 2013-09-03 23:16 - 2013-04-05 10:48 - 00000000 ____D C:\Program Files (x86)\Launch Manager 2013-09-03 22:27 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-09-03 22:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-09-03 20:00 - 2013-09-03 19:59 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Mozilla 2013-09-03 19:59 - 2013-09-03 19:59 - 00000767 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-03 19:59 - 2013-09-03 19:59 - 00000000 ____D C:\ProgramData\Mozilla 2013-09-03 19:53 - 2013-09-02 21:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-09-03 19:45 - 2013-04-19 19:50 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Spotify 2013-09-03 19:04 - 2013-09-03 19:04 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Process Explorer 2013-09-03 15:17 - 2013-04-07 11:24 - 00000688 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk 2013-09-03 13:34 - 2013-09-03 13:34 - 00002938 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2013-09-02 23:21 - 2013-09-02 23:21 - 04454952 _____ (Piriform Ltd) C:\Users\Silverdrag0n\Downloads\ccsetup405.exe 2013-09-02 23:21 - 2013-04-05 12:14 - 00000673 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-02 22:53 - 2013-04-05 14:23 - 00000000 ____D C:\Program Files\Logitech Gaming Software 2013-09-02 22:51 - 2013-04-05 14:03 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Logishrd 2013-09-02 22:44 - 2013-09-02 22:33 - 56514904 _____ (Logitech Inc.) C:\Users\Silverdrag0n\Downloads\LGS_8.50.281_x64_Logitech.exe 2013-08-31 12:25 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Winamp 2013-08-30 13:52 - 2013-04-05 19:47 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Last.fm 2013-08-30 11:31 - 2013-06-17 00:11 - 00000752 _____ C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-08-30 11:30 - 2013-07-05 20:55 - 00000788 _____ C:\Users\Public\Desktop\Uninstaller.lnk 2013-08-30 11:30 - 2013-06-17 00:11 - 00000759 _____ C:\Users\Public\Desktop\Advanced SystemCare 6.lnk 2013-08-28 22:30 - 2013-08-25 23:56 - 00007184 _____ C:\Users\Silverdrag0n\Desktop\BuildFirestorm_new_deutsch.txt 2013-08-27 14:49 - 2013-07-07 19:19 - 00000094 _____ C:\Users\Silverdrag0n\Desktop\PoenixG.Doc_pw.txt 2013-08-27 13:48 - 2013-04-19 19:52 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Spotify 2013-08-26 23:41 - 2013-06-17 00:49 - 00007605 _____ C:\Users\SILVER~1\AppData\Local\Resmon.ResmonCfg 2013-08-26 23:33 - 2013-04-11 22:13 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\vlc 2013-08-26 12:03 - 2013-08-26 12:03 - 00001496 _____ C:\Users\Silverdrag0n\Desktop\FirestormOS-Private-Nogardrevlis-Lgpl-AVX.exe.lnk 2013-08-24 00:37 - 2013-08-24 00:14 - 98688206 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part3.rar 2013-08-24 00:10 - 2013-08-23 23:39 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part2.rar 2013-08-23 23:38 - 2013-08-23 22:58 - 120586242 _____ C:\Users\Silverdrag0n\Downloads\7041078625.part1.rar 2013-08-22 20:41 - 2013-08-22 00:06 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\ebooks 2013-08-21 19:08 - 2013-08-21 17:53 - 00000521 _____ C:\Windows\system\Cm108.ini 2013-08-21 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system 2013-08-21 17:29 - 2013-08-21 17:26 - 21591617 _____ C:\Users\Silverdrag0n\Downloads\HPX-3090M_USB-Driver_XP_VISTA_WIN7(1).zip 2013-08-21 16:27 - 2013-04-07 11:54 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\TeamViewer 2013-08-21 12:48 - 2013-04-07 10:47 - 00000000 ____D C:\Program Files (x86)\CMake 2.8 2013-08-21 12:47 - 2013-08-21 12:46 - 10356589 _____ C:\Users\Silverdrag0n\Downloads\cmake-2.8.11.2-win32-x86.exe 2013-08-20 17:18 - 2013-04-12 20:29 - 00123344 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-08-20 16:05 - 2013-08-20 10:59 - 00001223 _____ C:\Users\Silverdrag0n\Desktop\SilverScriptV.1.0.1.lnk 2013-08-20 15:39 - 2013-08-20 15:39 - 00057376 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00644968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2013-08-20 15:34 - 2013-08-20 15:34 - 00028008 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2013-08-20 15:33 - 2013-09-04 00:30 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-08-20 15:32 - 2013-09-04 00:30 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-08-20 15:32 - 2013-09-04 00:16 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 13030912 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 10811904 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 05905904 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 05358016 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 03511296 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 03121152 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 01040384 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00931840 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00575488 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00542720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00515568 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00442352 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00431104 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00399856 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00384512 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00342528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2013-08-20 15:24 - 2013-08-20 15:24 - 00330752 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2013-08-20 15:24 - 2013-08-20 15:24 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00254960 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00223664 _____ C:\Windows\system32\Gfxres.th-TH.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00210106 _____ C:\Windows\system32\Gfxres.el-GR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00194245 _____ C:\Windows\system32\Gfxres.ru-RU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00175104 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00172016 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2013-08-20 15:24 - 2013-08-20 15:24 - 00166170 _____ C:\Windows\system32\Gfxres.ar-SA.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00163421 _____ C:\Windows\system32\Gfxres.ja-JP.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00159008 _____ C:\Windows\system32\Gfxres.he-IL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00149682 _____ C:\Windows\system32\Gfxres.it-IT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00148042 _____ C:\Windows\system32\Gfxres.ko-KR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147393 _____ C:\Windows\system32\Gfxres.de-DE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00147288 _____ C:\Windows\system32\Gfxres.es-ES.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00146004 _____ C:\Windows\system32\Gfxres.ro-RO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00145491 _____ C:\Windows\system32\Gfxres.fr-FR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144645 _____ C:\Windows\system32\Gfxres.tr-TR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144260 _____ C:\Windows\system32\Gfxres.pt-BR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00144020 _____ C:\Windows\system32\Gfxres.nl-NL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00143932 _____ C:\Windows\system32\Gfxres.hu-HU.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142882 _____ C:\Windows\system32\Gfxres.sv-SE.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142877 _____ C:\Windows\system32\Gfxres.pt-PT.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142717 _____ C:\Windows\system32\Gfxres.pl-PL.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00142289 _____ C:\Windows\system32\Gfxres.cs-CZ.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00142008 _____ C:\Windows\system32\Gfxres.fi-FI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141838 _____ C:\Windows\system32\Gfxres.sk-SK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00141049 _____ C:\Windows\system32\Gfxres.hr-HR.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137889 _____ C:\Windows\system32\Gfxres.sl-SI.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137784 _____ C:\Windows\system32\Gfxres.nb-NO.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00137141 _____ C:\Windows\system32\Gfxres.da-DK.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2013-08-20 15:24 - 2013-08-20 15:24 - 00126300 _____ C:\Windows\system32\Gfxres.zh-TW.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00124650 _____ C:\Windows\system32\Gfxres.zh-CN.resources 2013-08-20 15:24 - 2013-08-20 15:24 - 00116224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3062.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00080384 _____ C:\Windows\system32\igdde64.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00064512 _____ C:\Windows\SysWOW64\igdde32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00017078 _____ C:\Windows\system32\iglhxs64.vp 2013-08-20 15:24 - 2013-08-20 15:24 - 00016896 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2013-08-20 15:24 - 2013-08-20 15:24 - 00009728 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2013-08-20 15:24 - 2012-03-19 16:31 - 12615680 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll 2013-08-20 15:24 - 2012-03-19 16:26 - 11049472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll 2013-08-20 15:24 - 2012-03-19 16:22 - 12858368 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll 2013-08-20 15:24 - 2012-03-19 16:11 - 11175424 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00442880 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00064000 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2013-08-20 15:24 - 2012-03-19 15:17 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2013-08-20 14:16 - 2013-07-19 22:36 - 00003196 _____ C:\Windows\System32\Tasks\Driver Booster Update 2013-08-20 13:52 - 2013-08-20 13:52 - 86949888 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 05005312 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00065536 _____ C:\Windows\system32\config\SAM.iobit 2013-08-20 13:52 - 2013-08-20 13:52 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit 2013-08-20 12:52 - 2013-04-05 10:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-08-20 11:46 - 2013-08-20 11:46 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mirc732.exe 2013-08-20 11:44 - 2013-08-20 11:44 - 01105460 _____ (mIRC Co. Ltd.) C:\Users\Silverdrag0n\Downloads\mIRC.exe 2013-08-19 23:28 - 2013-08-19 23:28 - 04539462 _____ C:\Users\Silverdrag0n\Downloads\slvoice-4.5.0009.17865-windows-20130214.tar.bz2 2013-08-19 23:12 - 2013-08-19 20:30 - 1391998657 _____ (Acresso Software Inc.) C:\Users\Silverdrag0n\Downloads\TS3_1.55.4.0220xx_update.exe 2013-08-19 14:41 - 2013-08-19 14:41 - 00000000 ____D C:\ProgramData\EA Core 2013-08-19 14:24 - 2013-08-19 14:24 - 00001182 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk 2013-08-19 14:21 - 2013-08-19 14:25 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-08-18 23:02 - 2013-09-04 00:16 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-08-18 23:02 - 2013-09-04 00:16 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2013-08-18 23:02 - 2013-09-04 00:16 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-08-18 22:27 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Origin 2013-08-18 21:43 - 2013-08-18 21:43 - 00000000 ____D C:\Users\Silverdrag0n\Documents\Electronic Arts 2013-08-18 21:34 - 2013-09-04 00:17 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 01041696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-08-18 21:34 - 2013-09-04 00:17 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2013-08-18 21:34 - 2013-09-04 00:17 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-08-17 07:30 - 2013-09-04 00:17 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-08-16 21:55 - 2013-08-15 20:22 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Origin 2013-08-16 21:31 - 2013-08-16 21:31 - 00000000 ____D C:\Users\Silverdrag0n\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal Prelude 1.1.5 2013-08-16 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-16 18:36 - 2013-04-05 20:23 - 00000000 ____D C:\Windows\Panther 2013-08-15 20:38 - 2013-08-15 20:22 - 00000000 ____D C:\Users\SILVER~1\AppData\Local\Origin 2013-08-15 20:03 - 2013-08-15 20:03 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-08-15 20:03 - 2013-04-11 22:10 - 00000000 ____D C:\Users\Silverdrag0n\Desktop\Spiele 2013-08-14 12:55 - 2013-04-05 13:42 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-13 00:14 - 2013-08-13 00:14 - 00009728 _____ C:\Windows\SysWOW64\BASSMOD.dll 2013-08-12 12:18 - 2013-08-12 12:18 - 00194885 _____ C:\Users\Silverdrag0n\Downloads\hjsplit.zip 2013-08-11 19:18 - 2013-04-05 12:44 - 00000000 ____D C:\Users\Silverdrag0n\Documents\My Games Files to move or delete: ==================== C:\Users\SILVER~1\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2013-05-19 18:24] - [2011-02-25 08:19] - 2388992 ____A (Microsoft Corporation) 3510644520B93226E7033B7618FCAFF0 C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-04 21:16 ==================== End Of Log ============================ Securitycheck geht irgendwie nicht. Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED! |
10.09.2013, 08:56 | #11 |
/// the machine /// TB-Ausbilder | Firefox öffnet verschiedene seiten in unregelmäsigen abständen. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.09.2013, 22:24 | #12 |
| Firefox öffnet verschiedene seiten in unregelmäsigen abständen. Vielen Dank , nun Läuft alles wieder Sauber , keine Seiten mehr die Aufgehen und mir was verkaufen wollen Danke close |
11.09.2013, 08:54 | #13 |
/// the machine /// TB-Ausbilder | Firefox öffnet verschiedene seiten in unregelmäsigen abständen. Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Firefox öffnet verschiedene seiten in unregelmäsigen abständen. |
anti, browser, combofix, firefox, hilfe, hohe, internet, kaspersky, leute, problem, programme, rootkit, rootkit scanner, scan, scanner, schutz, security, seite, seiten, spybot, system, trojaner, verkaufen, virus, windows, windows 7, öffnen, öffnet |