Windows 7 (64bit): Unregelmäßiges auftauchen weißer PopUp´s im Browser

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 01
Ran by knowi at 2013-09-16 15:49:12
Running from C:\Users\knowi\Downloads\Download
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

@BIOS (x32 Version: 2.30)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.1.0.7)
Batman: Arkham Asylum GOTY Edition (x32)
Batman: Arkham City GOTY (x32)
CCleaner (Version: 3.28)
CPUID CPU-Z 1.63.0
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Diablo II (x32)
Diablo III (x32 Version: 1.0.8.16603)
DivX-Setup (x32 Version: 2.6.1.24)
Dokan Library 0.6.0 (x32)
Dual-Core Optimizer (x32 Version: 1.1.4.0169)
Easy Tune 6 B12.0210.2 (x32 Version: 1.00.0000)
ElsterFormular (x32 Version: 14.0.0.10960)
eReg (x32 Version: 1.20.138.34)
erLT (x32 Version: 1.20.0137)
Euro Truck Simulator 2 (x32 Version: 1.0.2)
Europa-Führerschein 2013 v10.1 (x32 Version: 10.1)
EVGA Precision X 4.2.1 (x32 Version: 4.2.1)
ffdshow v1.2.4422 [2012-04-09] (x32 Version: 1.2.4422.0)
GIMP 2.8.6 (Version: 2.8.6)
Google Chrome (x32 Version: 29.0.1547.66)
Google Update Helper (x32 Version: 1.3.21.153)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.225)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374)
Kerbal Space Program Demo (x32)
LG United Mobile Drivers (x32 Version: 3.7.1.0)
Logitech Gaming Software (Version: 8.40.83)
Logitech SetPoint 5.20 (Version: 5.20)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0)
MotioninJoy Gamepad tool 0.7.1001 (Version: 0.7.1001)
NVIDIA 3D Vision Controller-Treiber 310.70 (Version: 310.70)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OMC ModPack Version 0.8.8.0 (x32 Version: 0.8.8.0)
Open Broadcaster Software (x32)
Platform (x32 Version: 1.39)
RivaTuner Statistics Server 5.2.0 (x32 Version: 5.2.0)
SaitekPCWheel (Version: 1.0.1)
Skype™ 6.3 (x32 Version: 6.3.105)
SpeedFan (remove only) (x32)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
StarCraft II (x32 Version: 2.0.11.26825)
Steam (x32 Version: 1.0.0.0)
SteelSeries Engine (Version: 2.7.3047.30645)
TeamSpeak 3 Client (Version: 3.0.12)
TeamViewer 7 (x32 Version: 7.0.13852)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589370) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
User's Guides (Version: 1.20.0000)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VIA Plattform-Geräte-Manager (x32 Version: 1.39)
VLC media player 2.0.5 (Version: 2.0.5)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR 4.00 (64-Bit) (Version: 4.00.0)
Wise Registry Cleaner 7.82 (x32 Version: 7.82)
WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7303)
World of Tanks (x32)

==================== Restore Points  =========================

10-09-2013 07:15:04 Windows Update
11-09-2013 22:32:54 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {1E090492-E6B0-47CE-B0BE-37346DD68D8E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-25] (Piriform Ltd)
Task: {3BA248F1-48D2-4F2A-A557-94F2D790C4CA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-02] (Google Inc.)
Task: {569A1364-2F58-4DDF-B5EA-6A241F4A2FBD} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {6BD10D4B-1CBF-499E-A7AF-40E1DD9563B5} - System32\Tasks\EVGAPrecision => C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe [2013-07-18] ()
Task: {8ED1C039-F870-4F11-A34A-6A72224A9388} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {92CCF930-9786-4A43-8F21-8425A2493294} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {93132755-151C-4C5F-A8A9-9785DB0B75E0} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {9A7F0769-8436-42E0-9A6E-35ADA9E887B8} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {ABE90BD0-53AA-4031-BE15-376A13211A2C} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {D67142BB-1A43-4498-B0EA-1885DB5EB865} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {E1C7DBD5-78D4-4A1A-BC19-F4F03A502CA5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated)
Task: {F03464A3-70CF-4A47-A8DE-46D6F85BF42C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-02] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-02-02 12:13 - 2013-02-26 00:32 - 15053264 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-02-15 17:13 - 2011-03-02 13:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2011-10-13 21:41 - 2011-10-13 21:41 - 00231824 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\shellex.dll
2011-04-25 00:14 - 2011-04-25 00:14 - 00189840 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\prremote.dll
2011-04-25 00:14 - 2011-04-25 00:14 - 00405904 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\prloader.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00603136 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00175616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll
2013-04-09 18:18 - 2013-04-09 18:18 - 00089915 _____ () C:\Users\knowi\AppData\Local\Temp\d12d05b4-91e4-4bef-b454-f07710dc01b4\CliSecureRT64.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00269824 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00139776 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00142336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll
2013-01-03 23:21 - 2013-01-03 23:21 - 00053248 _____ ( ) C:\Program Files\SteelSeries\SteelSeries Engine\Interop.BSteelLinkLib.dll
2013-01-10 07:46 - 2013-01-10 07:46 - 00651776 _____ (TODO: <Company name>) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\BSteelLink.dll
2013-01-10 07:46 - 2013-01-10 07:46 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00148480 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 09435648 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll
2011-03-28 11:29 - 2011-03-28 11:29 - 00200704 _____ (ICSharpCode.net) C:\Program Files\SteelSeries\SteelSeries Engine\ICSharpCode.SharpZipLib.dll
2010-05-07 11:32 - 2010-05-07 11:32 - 00135168 _____ (Simon Mourier) C:\Program Files\SteelSeries\SteelSeries Engine\HtmlAgilityPack.dll
2013-01-10 07:46 - 2013-01-10 07:46 - 01102336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll
2013-02-02 12:13 - 2013-02-26 00:32 - 18055184 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00163840 _____ (Protolog Systems Ltd.) C:\Program Files\SteelSeries\SteelSeries Engine\PluginAbstract.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00198144 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CustomWPFColorPicker.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00302592 _____ (Protolog Systems Ltd.) C:\Program Files\SteelSeries\SteelSeries Engine\VoicePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00349184 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00164864 _____ (Protolog Systems Ltd.) C:\Program Files\SteelSeries\SteelSeries Engine\D3HeadsetPlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00172032 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00306688 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00154112 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00168960 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00169472 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00156160 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll
2013-02-06 17:10 - 2013-02-06 17:10 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll
2013-02-02 12:13 - 2013-02-26 00:32 - 02826040 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-02-02 13:08 - 2012-08-09 12:55 - 00078480 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-02-02 13:08 - 2012-08-09 12:55 - 00386192 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2013-02-02 13:08 - 2012-08-09 12:55 - 02792592 _____ (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll
2013-02-02 13:08 - 2012-08-09 12:56 - 04469392 _____ (TODO: <Company name>) C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin6.dll
2012-10-29 12:08 - 2012-10-29 12:08 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qgif4.dll
2012-10-29 12:08 - 2012-10-29 12:08 - 00236032 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qjpeg4.dll
2012-10-29 12:08 - 2013-09-10 09:39 - 00302056 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2012-10-29 12:08 - 2013-09-10 09:39 - 00320488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2012-10-29 12:08 - 2013-09-10 09:39 - 00186344 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2012-10-29 12:08 - 2013-09-10 09:39 - 00565224 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-09-10 09:39 - 2013-09-10 09:39 - 00700904 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2013-02-03 10:44 - 2010-11-20 15:27 - 01435648 _____ (Microsoft Corporation) C:\Windows\System32\Speech\Common\sapi.dll
2013-05-15 18:49 - 2013-05-15 18:49 - 00071680 _____ () C:\Program Files (x86)\EVGA Precision X\RTMUI.dll
2013-05-15 18:48 - 2013-05-15 18:48 - 00056832 _____ () C:\Program Files (x86)\EVGA Precision X\RTFC.dll
2013-05-15 18:49 - 2013-05-15 18:49 - 00216064 _____ () C:\Program Files (x86)\EVGA Precision X\RTCore.dll
2013-05-15 18:49 - 2013-05-15 18:49 - 00127488 _____ () C:\Program Files (x86)\EVGA Precision X\RTUI.dll
2013-05-15 18:49 - 2013-05-15 18:49 - 00587776 _____ () C:\Program Files (x86)\EVGA Precision X\RTHAL.dll
2013-06-10 12:39 - 2013-07-07 08:12 - 24985600 _____ () C:\Users\knowi\AppData\Roaming\Spotify\Data\libcef.dll
2013-06-10 12:39 - 2013-07-07 08:12 - 09964032 _____ (The ICU Project) C:\Users\knowi\AppData\Roaming\Spotify\Data\icudt.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2013-07-01 08:20 - 2013-08-22 00:18 - 00687104 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-07-09 17:56 - 2013-09-06 22:55 - 01120680 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-07-09 13:45 - 2013-08-07 21:31 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-07-09 17:56 - 2013-09-06 22:55 - 00113064 _____ () C:\Program Files (x86)\Steam\bin\audio.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00450560 _____ (RAD Game Tools, Inc.) C:\Program Files (x86)\Steam\bin\mss32.DLL
2013-06-14 15:49 - 2013-06-15 01:49 - 00071680 _____ () C:\Program Files (x86)\Steam\bin\mssmp3.asi
2013-06-14 15:49 - 2013-06-15 01:49 - 00153088 _____ () C:\Program Files (x86)\Steam\bin\mssvoice.asi
2013-06-14 15:49 - 2013-06-15 01:49 - 00055296 _____ (RAD Game Tools, Inc.) C:\Program Files (x86)\Steam\bin\mssdsp.flt
2011-10-13 21:41 - 2011-10-13 21:41 - 00090512 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ushata.dll
2011-04-25 00:12 - 2011-04-25 00:12 - 00012688 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avpinit.dll
2011-10-13 21:41 - 2013-02-02 14:11 - 00455096 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avpmain.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 00147856 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\prremote.dll
2011-04-25 00:13 - 2013-02-02 14:11 - 00098744 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\fssync.dll
2011-04-25 00:12 - 2011-04-25 00:12 - 00123280 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\DumpWriter.dll
2011-04-25 00:12 - 2011-04-25 00:12 - 00019856 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\CLLDR.DLL
2011-04-25 00:13 - 2011-04-25 00:13 - 00270736 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\prloader.dll
2011-04-25 00:14 - 2011-04-25 00:14 - 00115088 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\nfio.ppl
2011-04-25 00:13 - 2011-04-25 00:13 - 00021392 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\fsdrvplg.ppl
2011-04-25 00:14 - 2011-04-25 00:14 - 00038288 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\winreg.ppl
2011-04-25 00:13 - 2013-09-04 21:43 - 00274624 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\service.dll
2011-04-25 00:13 - 2013-09-04 21:43 - 00979136 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\eka_meta.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 00315792 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\esmgr.dll
2011-10-13 21:41 - 2013-02-02 14:11 - 00042896 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\pxstub.ppl
2011-10-13 21:41 - 2013-09-04 21:43 - 01118400 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\params.ppl
2011-10-13 21:41 - 2013-09-04 21:43 - 04460736 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avpgui.ppl
2011-04-25 00:13 - 2011-04-25 00:13 - 02118032 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtCore4.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 07008656 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtGui4.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 02089360 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtDeclarative4.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 01270160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtScript4.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 00192912 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtSql4.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 00758160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtNetwork4.dll
2011-10-13 21:41 - 2013-02-02 14:11 - 02154936 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\basegui.ppl
2011-04-25 00:14 - 2011-04-25 00:14 - 00041360 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\thpimpl.ppl
2011-04-25 00:13 - 2011-04-25 00:13 - 00074128 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\memmon.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 00582032 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\localization_manager.dll
2011-04-20 20:56 - 2011-04-20 20:56 - 00025088 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll
2011-04-25 00:14 - 2011-04-25 00:14 - 00090512 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\propmap.ppl
2013-02-13 04:38 - 2013-02-13 04:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-09-04 14:23 - 2013-09-02 22:35 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-04 14:23 - 2013-09-02 22:35 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-04 14:23 - 2013-09-02 22:35 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 14:23 - 2013-09-02 22:35 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 14:23 - 2013-09-02 22:35 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-02-02 14:18 - 2013-02-02 14:18 - 00098704 _____ (Kaspersky Lab ZAO) C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\plugin\npVKPlugin.dll
2013-02-02 14:18 - 2013-02-02 14:18 - 00266640 _____ (Kaspersky Lab ZAO) C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\plugin\npUrlAdvisor.dll
2011-10-13 21:41 - 2011-10-13 21:41 - 00209296 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtblc.dll
2011-04-25 00:13 - 2013-02-02 14:11 - 00238008 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\kltbar.dll
2011-04-25 00:13 - 2011-04-25 00:13 - 00070032 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbcl.dll
2013-02-02 14:18 - 2013-02-02 14:18 - 00078224 _____ (Kaspersky Lab ZAO) C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin\npABPlugin.dll
2013-09-04 14:23 - 2013-09-02 22:35 - 13599184 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/10/2013 01:03:27 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.3.1.43709, Zeitstempel: 0x5113cbd9
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xc0000025
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x1b84
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3

Error: (09/10/2013 01:00:25 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.3.1.43709, Zeitstempel: 0x5113cbd9
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xc0000025
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x14b8
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3

Error: (09/10/2013 00:54:33 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.3.1.43709, Zeitstempel: 0x5113cbd9
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xc0000025
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x1ff8
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3

Error: (09/10/2013 00:49:12 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.3.1.43709, Zeitstempel: 0x5113cbd9
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xc0000025
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x10a8
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3

Error: (09/10/2013 00:48:00 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.3.1.43709, Zeitstempel: 0x5113cbd9
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xc0000025
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x187c
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3

Error: (09/10/2013 00:46:51 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eurotrucks2.exe, Version: 1.3.1.43709, Zeitstempel: 0x5113cbd9
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a
Ausnahmecode: 0xc0000025
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x11cc
Startzeit der fehlerhaften Anwendung: 0xeurotrucks2.exe0
Pfad der fehlerhaften Anwendung: eurotrucks2.exe1
Pfad des fehlerhaften Moduls: eurotrucks2.exe2
Berichtskennung: eurotrucks2.exe3

Error: (09/09/2013 10:28:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avp.exe, Version: 12.0.1.513, Zeitstempel: 0x506c673b
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0004866a
ID des fehlerhaften Prozesses: 0x6d4
Startzeit der fehlerhaften Anwendung: 0xavp.exe0
Pfad der fehlerhaften Anwendung: avp.exe1
Pfad des fehlerhaften Moduls: avp.exe2
Berichtskennung: avp.exe3

Error: (08/01/2013 04:33:02 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SteelSeriesEngine.exe, Version: 2.7.3047.0, Zeitstempel: 0x51127265
Name des fehlerhaften Moduls: CliSecureRT64.dll, Version: 5.2.0.6, Zeitstempel: 0x4c993b3a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000012b0
ID des fehlerhaften Prozesses: 0xcac
Startzeit der fehlerhaften Anwendung: 0xSteelSeriesEngine.exe0
Pfad der fehlerhaften Anwendung: SteelSeriesEngine.exe1
Pfad des fehlerhaften Moduls: SteelSeriesEngine.exe2
Berichtskennung: SteelSeriesEngine.exe3

Error: (07/27/2013 06:37:07 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Steam.exe, Version: 1.82.67.49, Zeitstempel: 0x51dcaeb7
Name des fehlerhaften Moduls: nvd3dum.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x50f946b6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x66621262
ID des fehlerhaften Prozesses: 0xb64
Startzeit der fehlerhaften Anwendung: 0xSteam.exe0
Pfad der fehlerhaften Anwendung: Steam.exe1
Pfad des fehlerhaften Moduls: Steam.exe2
Berichtskennung: Steam.exe3

Error: (07/27/2013 06:36:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Steam.exe, Version: 1.82.67.49, Zeitstempel: 0x51dcaeb7
Name des fehlerhaften Moduls: nvd3dum.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x50f946b6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6665567e
ID des fehlerhaften Prozesses: 0xb64
Startzeit der fehlerhaften Anwendung: 0xSteam.exe0
Pfad der fehlerhaften Anwendung: Steam.exe1
Pfad des fehlerhaften Moduls: Steam.exe2
Berichtskennung: Steam.exe3


System errors:
=============
Error: (09/16/2013 00:06:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (09/16/2013 00:06:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (09/16/2013 00:06:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (09/16/2013 00:06:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (09/16/2013 00:06:13 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (09/16/2013 00:06:13 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (09/16/2013 00:06:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (09/16/2013 00:06:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (09/16/2013 00:06:02 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (09/16/2013 00:05:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535


Microsoft Office Sessions:
=========================
Error: (09/10/2013 01:03:27 AM) (Source: Application Error)(User: )
Description: eurotrucks2.exe1.3.1.437095113cbd9KERNELBASE.dll6.1.7601.1801550b83c8ac00000250000c41f1b8401ceadb0c5bbd73bC:\Program Files (x86)\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeC:\Windows\syswow64\KERNELBASE.dll08addb37-19a4-11e3-bf99-50e549efb5ea

Error: (09/10/2013 01:00:25 AM) (Source: Application Error)(User: )
Description: eurotrucks2.exe1.3.1.437095113cbd9KERNELBASE.dll6.1.7601.1801550b83c8ac00000250000c41f14b801ceadb05a726ee3C:\Program Files (x86)\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeC:\Windows\syswow64\KERNELBASE.dll9c35d980-19a3-11e3-bf99-50e549efb5ea

Error: (09/10/2013 00:54:33 AM) (Source: Application Error)(User: )
Description: eurotrucks2.exe1.3.1.437095113cbd9KERNELBASE.dll6.1.7601.1801550b83c8ac00000250000c41f1ff801ceadaf87a36b0eC:\Program Files (x86)\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeC:\Windows\syswow64\KERNELBASE.dllca67326d-19a2-11e3-bf99-50e549efb5ea

Error: (09/10/2013 00:49:12 AM) (Source: Application Error)(User: )
Description: eurotrucks2.exe1.3.1.437095113cbd9KERNELBASE.dll6.1.7601.1801550b83c8ac00000250000c41f10a801ceadaeb607bb9aC:\Program Files (x86)\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeC:\Windows\syswow64\KERNELBASE.dll0b73f038-19a2-11e3-bf99-50e549efb5ea

Error: (09/10/2013 00:48:00 AM) (Source: Application Error)(User: )
Description: eurotrucks2.exe1.3.1.437095113cbd9KERNELBASE.dll6.1.7601.1801550b83c8ac00000250000c41f187c01ceadae7f105740C:\Program Files (x86)\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeC:\Windows\syswow64\KERNELBASE.dlle028635e-19a1-11e3-bf99-50e549efb5ea

Error: (09/10/2013 00:46:51 AM) (Source: Application Error)(User: )
Description: eurotrucks2.exe1.3.1.437095113cbd9KERNELBASE.dll6.1.7601.1801550b83c8ac00000250000c41f11cc01ceadae5581c32aC:\Program Files (x86)\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exeC:\Windows\syswow64\KERNELBASE.dllb7167b2b-19a1-11e3-bf99-50e549efb5ea

Error: (09/09/2013 10:28:39 AM) (Source: Application Error)(User: )
Description: avp.exe12.0.1.513506c673bole32.dll6.1.7601.175144ce7b96fc00000050004866a6d401cead2e23eb5094C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exeC:\Windows\syswow64\ole32.dlld3667673-1929-11e3-bf99-50e549efb5ea

Error: (08/01/2013 04:33:02 AM) (Source: Application Error)(User: )
Description: SteelSeriesEngine.exe2.7.3047.051127265CliSecureRT64.dll5.2.0.64c993b3ac000000500000000000012b0cac01ce8e5dc5e67338C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exeC:\Users\knowi\AppData\Local\Temp\d12d05b4-91e4-4bef-b454-f07710dc01b4\CliSecureRT64.dllaf917bb2-fa52-11e2-be30-50e549efb5ea

Error: (07/27/2013 06:37:07 PM) (Source: Application Error)(User: )
Description: Steam.exe1.82.67.4951dcaeb7nvd3dum.dll_unloaded0.0.0.050f946b6c000000566621262b6401ce8a8a02805624C:\Program Files (x86)\Steam\Steam.exenvd3dum.dllc6308ace-f6da-11e2-b95a-50e549efb5ea

Error: (07/27/2013 06:36:51 PM) (Source: Application Error)(User: )
Description: Steam.exe1.82.67.4951dcaeb7nvd3dum.dll_unloaded0.0.0.050f946b6c00000056665567eb6401ce8a8a02805624C:\Program Files (x86)\Steam\Steam.exenvd3dum.dllbc9153dd-f6da-11e2-b95a-50e549efb5ea


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 12249.21 MB
Available physical RAM: 8915.43 MB
Total Pagefile: 24496.61 MB
Available Pagefile: 20356.9 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223.35 GB) (Free:41.41 GB) NTFS
Drive e: (ST2012) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 224 GB) (Disk ID: 58906655)

Partition: GPT Partition Type
==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 01
Ran by knowi (administrator) on KNOWI-PC on 16-09-2013 15:48:46
Running from C:\Users\knowi\Downloads\Download
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(Spotify Ltd) C:\Users\knowi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\knowi\AppData\Roaming\Spotify\spotify.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint II\SetPointII.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [239104 2013-02-06] (SteelSeries ApS)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\knowi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\knowi\AppData\Roaming\Spotify\spotify.exe [4640768 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [SSync] - C:\Users\knowi\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKCU\...\Run: [DataMgr] - C:\Users\knowi\AppData\Roaming\DataMgr\DataMgr.exe [168824 2013-07-21] (HTTO Group, Ltd.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
HKCU\...\Run: [SCheck] - C:\Users\knowi\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - C:\Users\knowi\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Run: [Intermediate] - C:\Users\knowi\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Run: [OMESupervisor] - C:\Users\knowi\AppData\Local\omesuperv.exe [2218359 2013-08-28] ()
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
MountPoints2: {66843226-f1cf-11e2-b7f3-50e549efb5ea} - E:\start.exe /auto
MountPoints2: {c6bf7291-a5e7-11e2-9209-50e549efb5ea} - F:\LGAutoRun.exe
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [avp] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2013-02-02] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x20081B895514CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: movie2kdownloader - C:\Users\knowi\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://start.iminent.com/?appId=F5F5CAC4-4192-41E9-889A-BB68C2D2B53A"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Knowi\AppData\Local\Google\Chrome\Application\21.0.1180.60\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\plugin/npUrlAdvisor.dll (Kaspersky Lab ZAO)
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\plugin/npVKPlugin.dll (Kaspersky Lab ZAO)
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll (Kaspersky Lab ZAO)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Google Update) - C:\Users\Knowi\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Extension: (ProxTube) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0
CHR Extension: (Skipscreen) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\agcjgboanffecpmahabacenfnlbihgai\0.5.8_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0
CHR Extension: (Grooveshark Germany unlocker) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\docdgimmdejoiemdafcgeodchlbllgac\2.3.4_0
CHR Extension: (HD Flash Player) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ephpalmdogjlanfomckcbndlpcnapcnd\7.2.4_0
CHR Extension: (OfferMosquito) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.6_0
CHR Extension: (AdBlock) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0
CHR Extension: (Virtual Keyboard) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0
CHR Extension: (BetterJTV) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\njnnheckmeppnahikljofploeeodidhj\1.1.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0
CHR Extension: (Anti-Banner) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0
CHR Extension: (Twitch Giveaways) - C:\Users\knowi\AppData\Local\Google\Chrome\User Data\Default\Extensions\poohjpljfecljomfhhimjhddddlidhdd\1.5.2_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2013-02-02] (Kaspersky Lab ZAO)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2012-03-07] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-03-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-03-06] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2012-03-06] (LG Electronics Inc.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-21] (DT Soft Ltd)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-06-19] (Windows (R) Server 2003 DDK provider)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-06-19] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-06-21] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-06-21] (Windows (R) Server 2003 DDK provider)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-06-20] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-06-20] ()
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2013-02-02] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
S3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-03] (Logitech Inc.)
R3 RTCore64; C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-18] ()
R3 RTCore64; C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-18] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-16 15:48 - 2013-09-16 15:48 - 00000000 ____D C:\FRST
2013-09-16 15:46 - 2013-09-16 15:46 - 00000168 _____ C:\Users\knowi\defogger_reenable
2013-09-13 16:46 - 2013-09-13 17:56 - 00000754 _____ C:\Users\Public\Desktop\OMC ModPack entfernen.lnk
2013-09-13 16:41 - 2013-09-13 16:41 - 00000000 ____D C:\Users\knowi\Documents\OMC ModPack
2013-09-12 00:35 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 00:35 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 00:35 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-12 00:35 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 00:35 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 00:35 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-12 00:35 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-12 00:35 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 00:35 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 00:35 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 00:35 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 00:35 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 00:35 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-12 00:35 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 14:02 - 2013-09-11 14:23 - 00000776 _____ C:\Users\UpdatusUser\Desktop\World of Tanks 0.8.8 ProMod.lnk
2013-09-11 12:30 - 2013-09-11 12:30 - 00000769 _____ C:\Users\Public\Desktop\World of Tanks.lnk
2013-09-11 08:35 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 08:35 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 08:35 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 08:35 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 08:35 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 08:35 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 08:35 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 08:35 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 08:35 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 08:35 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 08:35 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 08:35 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 08:35 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 08:35 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 08:35 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 08:35 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 08:35 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 08:35 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 08:35 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 08:35 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 08:35 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 08:35 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 08:35 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 08:35 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 08:35 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 08:35 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 08:35 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-05 06:54 - 2013-09-05 06:54 - 00000000 ____D C:\Users\knowi\AppData\Roaming\Snz
2013-09-04 21:43 - 2013-09-11 12:30 - 00000000 ____D C:\Games
2013-09-04 15:21 - 2013-09-04 15:21 - 00000222 _____ C:\Users\knowi\Desktop\Kerbal Space Program Demo.url
2013-08-28 20:47 - 2013-08-28 20:47 - 02218359 _____ C:\Users\knowi\AppData\Local\omesuperv.exe
2013-08-24 09:18 - 2013-09-10 00:36 - 00000050 _____ C:\Users\knowi\Desktop\adresse xlendi.txt
2013-08-23 17:24 - 2013-04-29 10:44 - 06058496 _____ C:\Users\knowi\Downloads\QuickMark.msi
2013-08-19 10:59 - 2013-08-19 10:59 - 01467128 _____ C:\Users\knowi\Downloads\SystemCheck_deDE.exe

==================== One Month Modified Files and Folders =======

2013-09-16 15:48 - 2013-09-16 15:48 - 00000000 ____D C:\FRST
2013-09-16 15:48 - 2013-02-26 21:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-16 15:47 - 2013-06-20 04:50 - 00000000 ____D C:\Users\knowi\Downloads\Download
2013-09-16 15:46 - 2013-09-16 15:46 - 00000168 _____ C:\Users\knowi\defogger_reenable
2013-09-16 15:46 - 2013-02-02 12:04 - 00000000 ____D C:\Users\knowi
2013-09-16 15:45 - 2013-06-10 12:39 - 00000000 ____D C:\Users\knowi\AppData\Roaming\Spotify
2013-09-16 15:25 - 2013-02-02 14:07 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-16 15:21 - 2013-02-02 12:54 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-16 15:02 - 2013-02-03 02:16 - 00000000 ____D C:\Users\knowi\AppData\Roaming\TS3Client
2013-09-16 14:58 - 2013-02-02 12:04 - 01377404 _____ C:\Windows\WindowsUpdate.log
2013-09-16 12:12 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-16 12:12 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-16 12:11 - 2009-07-14 19:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-09-16 12:11 - 2009-07-14 19:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-09-16 12:11 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-16 12:06 - 2013-07-26 19:26 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-16 12:06 - 2013-02-02 13:35 - 00000000 ____D C:\Program Files (x86)\EVGA Precision X
2013-09-16 12:05 - 2013-05-17 20:42 - 00003022 _____ C:\Windows\System32\Tasks\EVGAPrecision
2013-09-16 12:05 - 2013-03-17 10:46 - 00027724 _____ C:\Windows\setupact.log
2013-09-16 12:05 - 2013-02-02 12:54 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-16 12:05 - 2013-02-02 12:14 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-16 12:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-16 12:04 - 2013-04-21 13:18 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-09-13 22:48 - 2013-02-26 21:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 22:48 - 2013-02-26 21:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 22:48 - 2013-02-26 21:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 17:56 - 2013-09-13 16:46 - 00000754 _____ C:\Users\Public\Desktop\OMC ModPack entfernen.lnk
2013-09-13 16:41 - 2013-09-13 16:41 - 00000000 ____D C:\Users\knowi\Documents\OMC ModPack
2013-09-13 16:41 - 2013-08-08 14:58 - 00155136 _____ C:\Windows\SysWOW64\unrar.dll
2013-09-13 16:41 - 2013-08-08 14:58 - 00034308 _____ C:\Windows\SysWOW64\bassmod.dll
2013-09-13 13:53 - 2013-06-20 04:50 - 00000000 ____D C:\Users\knowi\Downloads\Wichtig
2013-09-13 12:31 - 2013-02-15 16:31 - 00000000 ____D C:\Users\knowi\Documents\Euro Truck Simulator 2
2013-09-12 15:27 - 2013-07-29 17:09 - 00000000 ____D C:\Users\knowi\AppData\Roaming\SAD-Europa-Führerschein
2013-09-12 07:03 - 2013-02-02 12:04 - 00000000 ___RD C:\Users\knowi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 07:03 - 2013-02-02 12:04 - 00000000 ___RD C:\Users\knowi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 07:03 - 2009-07-14 06:45 - 00354064 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 07:02 - 2013-03-17 10:46 - 00015686 _____ C:\Windows\PFRO.log
2013-09-12 00:35 - 2013-03-08 22:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 14:23 - 2013-09-11 14:02 - 00000776 _____ C:\Users\UpdatusUser\Desktop\World of Tanks 0.8.8 ProMod.lnk
2013-09-11 12:30 - 2013-09-11 12:30 - 00000769 _____ C:\Users\Public\Desktop\World of Tanks.lnk
2013-09-11 12:30 - 2013-09-04 21:43 - 00000000 ____D C:\Games
2013-09-11 12:30 - 2013-07-30 18:28 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-11 12:30 - 2013-02-02 13:35 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-10 09:39 - 2013-02-03 02:16 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-09-10 01:19 - 2013-02-15 16:29 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-09-10 00:36 - 2013-08-24 09:18 - 00000050 _____ C:\Users\knowi\Desktop\adresse xlendi.txt
2013-09-10 00:10 - 2013-06-10 12:39 - 00000000 ____D C:\Users\knowi\AppData\Local\Spotify
2013-09-08 06:39 - 2013-02-02 12:54 - 00087728 _____ C:\Users\knowi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-05 06:54 - 2013-09-05 06:54 - 00000000 ____D C:\Users\knowi\AppData\Roaming\Snz
2013-09-05 06:54 - 2013-07-23 18:30 - 00000000 ____D C:\Users\knowi\AppData\Roaming\Intermediate
2013-09-04 22:08 - 2013-08-08 15:00 - 00000721 _____ C:\Users\UpdatusUser\Desktop\World of Tanks 0.8.7 ohne XVM.lnk
2013-09-04 22:08 - 2013-08-08 15:00 - 00000706 _____ C:\Users\UpdatusUser\Desktop\World of Tanks 0.8.7 ProMod.lnk
2013-09-04 15:21 - 2013-09-04 15:21 - 00000222 _____ C:\Users\knowi\Desktop\Kerbal Space Program Demo.url
2013-09-04 14:23 - 2013-02-02 12:55 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-01 22:35 - 2013-02-02 13:53 - 00000000 ____D C:\Program Files (x86)\InnerSpace
2013-08-30 21:48 - 2013-02-02 14:47 - 00000000 ____D C:\Users\knowi\AppData\Roaming\OBS
2013-08-30 21:48 - 2013-02-02 14:47 - 00000000 ____D C:\Program Files (x86)\OBS
2013-08-28 20:47 - 2013-08-28 20:47 - 02218359 _____ C:\Users\knowi\AppData\Local\omesuperv.exe
2013-08-26 13:16 - 2013-02-09 21:31 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-08-25 07:29 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-19 10:59 - 2013-08-19 10:59 - 01467128 _____ C:\Users\knowi\Downloads\SystemCheck_deDE.exe
2013-08-19 08:04 - 2013-06-20 04:50 - 00000000 ____D C:\Users\knowi\Downloads\Bilder
2013-08-17 06:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\knowi\AppData\Local\Temp\LMkRstPt.exe
C:\Users\knowi\AppData\Local\Temp\rhxa69yq.dll
C:\Users\knowi\AppData\Local\Temp\sfamcc00001.dll
C:\Users\knowi\AppData\Local\Temp\sfamcc00002.dll
C:\Users\knowi\AppData\Local\Temp\sfextra.dll
C:\Users\knowi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\knowi\AppData\Local\Temp\virtual_ntdll.dll
C:\Users\knowi\AppData\Local\Temp\x2blapi.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-14 08:29

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-16 15:58:38
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SanDisk_SDSSDX240GG25 rev.R201 223,57GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\knowi\AppData\Local\Temp\pgloqpob.sys


---- Kernel code sections - GMER 2.1 ----

.text  C:\Windows\System32\win32k.sys!XLATEOBJ_iXlate + 638                                                                                                   fffff9600008b422 2 bytes [FF, 25]
.text  C:\Windows\System32\win32k.sys!XLATEOBJ_iXlate + 641                                                                                                   fffff9600008b425 3 bytes [5E, 20, 00]
.text  C:\Windows\System32\win32k.sys!W32pServiceTable                                                                                                        fffff960000d3f00 7 bytes [40, 9D, F3, FF, 01, AB, F0]
.text  C:\Windows\System32\win32k.sys!W32pServiceTable + 8                                                                                                    fffff960000d3f08 3 bytes [C0, 06, 02]
.text  ...                                                                                                                                                    * 113
.text  C:\Windows\System32\win32k.sys!BRUSHOBJ_pvGetRbrush + 432                                                                                              fffff9600018baf8 8 bytes [08, EC, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!CLIPOBJ_bEnum + 740                                                                                                     fffff9600018bfc8 8 bytes [C8, EC, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngAcquireSemaphoreNoWait + 76                                                                                          fffff9600018c658 8 bytes [20, ED, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngIsSemaphoreSharedByCurrentThread + 24                                                                                fffff9600018c738 8 bytes [FC, F0, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngCreateDeviceBitmap + 52                                                                                              fffff960001946e8 8 bytes [B0, F1, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngModifySurface + 972                                                                                                  fffff96000194b48 8 bytes [68, F6, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngCTGetCurrentGamma + 28                                                                                               fffff96000198fe8 8 bytes [78, ED, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngCreateEvent + 88                                                                                                     fffff9600019d048 8 bytes [88, F4, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngSetEvent + 16                                                                                                        fffff9600019d1b8 8 bytes [F4, ED, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngGetFilePath + 88                                                                                                     fffff9600019d9d8 8 bytes [2C, 00, 3A, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngFindResource + 832                                                                                                   fffff9600019de58 8 bytes [84, FE, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngCreatePath + 148                                                                                                     fffff960001b8628 8 bytes [74, F5, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngGetTickCount + 24                                                                                                    fffff960001be498 8 bytes [44, F7, 39, 03, 80, F8, FF, ...]
.text  C:\Windows\System32\win32k.sys!EngSaveFloatingPointState + 20                                                                                          fffff960001ccec8 8 bytes [C4, FB, 39, 03, 80, F8, FF, ...]

---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1272] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1272] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Skype\Updater\Updater.exe[2132] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                         0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\Skype\Updater\Updater.exe[2132] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                        00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                               00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe[2640] C:\Windows\SYSTEM32\ntdll.dll!DbgBreakPoint                                0000000077ce0590 3 bytes [8B, 40, 30]
.text  C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3272] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3272] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2

---- Disk sectors - GMER 2.1 ----

Disk   \Device\Harddisk0\DR0                                                                                                                                  unknown MBR code

---- EOF - GMER 2.1 ----
         

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:46 on 16/09/2013 (knowi)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed

Checking for services/drivers...


-=E.O.F=-