| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Mobilfunk-MMS erhalten per Mail...Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
24.09.2013, 14:30
| #1 |
 |  Mobilfunk-MMS erhalten per Mail... Hallöchen :/ "Leider" muss ich hier mal um Hilfe bitten ... undzwar folgende Geschichte ... Meine Mutter hat auf Arbeit eine EMail bekommen mit dem folgendem Inhalt / Betreff.  (Kann es auch gerne als Textform posten aber vielleicht ist es als Bild übersichtlicher...) Sie schickte die Email an mich weiter um zu gucken was es damit auf sich hat (Weil sie eine Antwort erwartete von einer Mitarbeiterin und sie sich nicht so mit Handy Kram auskennt). Leider war ich so blöd und wollte denn Anhang herunterladen ... Jedoch mischte sich Avira sogleich ein und warnte mich vor Malware (Ereignisse (1) hab ich jetzt mal an gehangen...) Ich hab den Zugriff blockieren lassen ... Aus "Panik" hab ich mit Malwarebytes ein "QuickScan" durchführen lassen... naja Report auch im Anhang... Um 14:54 Hat Avira wohl noch (erfolgreich?) einen Zugriff auf die Registry blockiert. (Ereignisse (2) im Anhang) Meine Frage ist jetzt nur ob ich da was zu befürchten habe, oder ob Avira erfolgreich abblocken konnte... Ich bedanke mich schonmal im Voraus .. Mit freundlichen Grüßen Brille65 |
|
24.09.2013, 15:10
| #2 |
| /// the machine /// TB-Ausbilder    | Mobilfunk-MMS erhalten per Mail... hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
24.09.2013, 15:23
| #3 |
| | Mobilfunk-MMS erhalten per Mail... Gern, bittesehr. Kann leider nicht beide in einem Post posten, sry.
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2013 Ran by PC (administrator) on PC-PC on 24-09-2013 16:15:01 Running from C:\Users\PC\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe (Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Mirillis Ltd.) C:\Program Files (x86)\Mirillis\Action!\Action.exe () C:\Program Files (x86)\Mirillis\Action!\Action_x86.bin () C:\Program Files (x86)\Mirillis\Action!\Action_x64.bin (TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe () C:\Program Files (x86)\Opera Next\17.0.1241.18\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Piotr Pawlowski) C:\Program Files (x86)\foobar2000\foobar2000.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor) HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.) HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1814440 2013-09-21] (Valve Corporation) HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [3333632 2012-08-16] () HKCU\...\Run: [] - [x] HKCU\...\Run: [AdBuck.exe] - C:\Program Files (x86)\AdBuck\AdBuck.exe [5991424 2013-08-06] (Media Revolution GmbH) HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 MountPoints2: G - G:\setup.exe MountPoints2: {5c398cc0-0961-11e3-a5f4-806e6f6e6963} - E:\Install.exe MountPoints2: {6ccb4294-190f-11e2-afc1-5404a668ff84} - E:\SETUP.EXE MountPoints2: {c45fec6b-1b5f-11e2-bb4a-5404a668ff84} - F:\setup.exe MountPoints2: {c93bda61-3371-11e2-88cf-5404a668ff84} - E:\autorun.exe HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [ASUS ShellProcess Execute] - C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-09-28] (ASUSTeK Computer Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Logitech G35] - C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech(c)) IMEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\acrord32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\databasecompare.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\guildii venedig.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hirezgamesdiagandsupport.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hpcustpartic.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hpwucli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\lync.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\misc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\msoev.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\msotd.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\ocpubmgr.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\openvpntray.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\overwolflauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\owuninstaller.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\realconverter.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\realplay.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\realtrimmer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\rnxproc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\spreadsheetcompare.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\teamviewer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\tunngle.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\tunngle_setup_v4.4.1.5.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\uninstall.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\wisecare365.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\wisecare365_chip_2.45.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=112250&babsrc=HP_ss&mntrId=e4a53f6a00000000000000ff6e30f268 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44BB45A48AB6CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE URLSearchHook: (No Name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File URLSearchHook: (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File URLSearchHook: (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=112250&babsrc=SP_ss&mntrId=e4a53f6a00000000000000ff6e30f268 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=112250&babsrc=SP_ss&mntrId=e4a53f6a00000000000000ff6e30f268 SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File BHO-x32: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll No File BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File BHO-x32: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No File DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter-x32: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 83.169.184.33 83.169.184.97 FireFox: ======== FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default FF user.js: detected! => C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\user.js FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", ""); FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF SelectedSearchEngine: Google FF NetworkProxy: "socks_remote_dns", true FF NetworkProxy: "type", 0 FF Keyword.URL: user_pref("keyword.URL", ""); FF Homepage: user_pref("browser.startup.homepage", ""); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File FF Plugin-x32: @vizzed.com/VizzedRGR - C:\Program Files (x86)\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll (Vizzed.com) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\PC\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: saffee. save - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\elcp6hth@oee-oeua.net FF Extension: FoxyProxy Basic - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\foxyproxy@eric.h.jung FF Extension: U2bview Firefox Add-on - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\noreply@u2bviews.com FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\staged FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\extensions\afurladvisor@anchorfree.com FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ Chrome: ======= CHR HomePage: hxxp://search.conduit.com/?SearchSource=10&userid=EB_USER_ID&ctid=CT2481020&SSPV=TB_IESB20 CHR RestoreOnStartup: "urls_to_restore_on_startup": [ CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll No File CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll No File CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) CHR Plugin: (Vizzed Retro Game Room Plugin) - C:\Program Files (x86)\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll (Vizzed.com) CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) CHR Extension: (Google Drive) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (Bitcoin Ticker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkjcngcenokaadmhbmcokmkanjibmmje\0.3.2_0 CHR Extension: (Bitcoin Mining Monitor) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkonhfangjkibemiedpiahgedlffdma\0.5_0 CHR Extension: (Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (RealDownloader) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0 CHR Extension: (saffee. save) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1 CHR Extension: (YouTube Unblocker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0 CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx ==================== Services (Whitelisted) ================= R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-08-20] (Avira Operations GmbH & Co. KG) R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-20] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-20] (Avira Operations GmbH & Co. KG) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-04] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.) R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe [1470592 2012-03-21] (ASUSTeK Computer Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-26] () R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.) S2 MAGIX StartUp Analyze Service; C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe [186368 2010-11-04] (MAGIX AG) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [6237800 2010-04-30] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-02] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] () R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC) S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-05-25] () R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software) S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH) ==================== Drivers (Whitelisted) ==================== R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] () R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-02-09] () R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-02-13] (Avira GmbH) R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-02-13] (Avira GmbH) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-08-20] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems) S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-21] (DT Soft Ltd) S3 FETNDIS; C:\Windows\System32\DRIVERS\fet6x64.sys [47872 2009-06-10] (VIA Technologies, Inc. ) R3 GEARAspiWDM; C:\Windows\SysWow64\Drivers\GEARAspiWDM.sys [15664 2012-04-05] (GEAR Software Inc.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [41704 2012-10-10] (AnchorFree Inc.) R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech) R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-02-09] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-07-02] (Duplex Secure Ltd.) S2 tandpl; C:\Windows\SysWow64\drivers\tandpl.sys [4736 2003-04-19] () R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294232 2013-02-15] (Microsoft Corporation) S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.) U3 a14kl01c; C:\Windows\System32\Drivers\a14kl01c.sys [0 ] (Microsoft Corporation) R3 cpuz132; \??\C:\Users\PC\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [x] S3 MSICDSetup; \??\D:\CDriver64.sys [x] S2 tandpl; System32\drivers\tandpl.sys [x] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x] S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [x] S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x] S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-24 16:14 - 2013-09-24 16:14 - 00000000 ____D C:\FRST 2013-09-24 16:13 - 2013-09-24 16:13 - 01955802 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe 2013-09-24 15:22 - 2013-09-24 15:22 - 00000378 _____ C:\Users\PC\Desktop\Ereignisse (2).txt 2013-09-24 15:14 - 2013-09-24 15:14 - 00001214 _____ C:\Users\PC\Desktop\Ereignisse (1).txt 2013-09-24 15:09 - 2013-09-24 15:09 - 00001536 _____ C:\Users\PC\Desktop\Ereignisse.txt 2013-09-24 14:17 - 2013-09-24 14:17 - 97531747 _____ C:\Windows\SysWOW64\덼A 2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\Documents\MAGIX_MxTray 2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\AppData\Roaming\MAGIX 2013-09-24 13:02 - 2013-09-24 13:02 - 00002812 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG 2013-09-24 13:02 - 2013-09-24 13:02 - 00000440 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job 2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\OnDemandDump 2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\CrashLog 2013-09-24 13:00 - 2013-09-24 13:07 - 00000000 ____D C:\ProgramData\MAGIX 2013-09-24 13:00 - 2013-09-24 13:01 - 00000000 ____D C:\Program Files (x86)\MAGIX 2013-09-24 12:56 - 2013-09-24 12:56 - 41085024 _____ (MAGIX AG) C:\Users\PC\Desktop\setup_pc_check_tuning.exe 2013-09-24 11:29 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\Mirillis 2013-09-24 11:28 - 2013-09-24 11:28 - 00001995 _____ C:\Users\Public\Desktop\Action!.lnk 2013-09-24 11:28 - 2013-04-27 06:12 - 00000035 _____ C:\Users\PC\Desktop\key.txt 2013-09-24 11:28 - 2013-04-27 06:07 - 19022088 _____ (Mirillis Ltd.) C:\Users\PC\Desktop\action_1_14_0_setup.exe 2013-09-24 11:26 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Local\Mirillis 2013-09-24 11:24 - 2013-09-24 11:24 - 31237192 _____ (Mirillis Ltd.) C:\Users\PC\Desktop\action_1_16_2_setup (1).exe 2013-09-24 11:15 - 2013-09-24 11:15 - 18751346 _____ C:\Users\PC\Desktop\mirillis.action.1.14.0.rar 2013-09-24 10:55 - 2013-09-24 10:55 - 00000000 ____D C:\Users\PC\Desktop\Action! 1.16.2 2013-09-24 10:51 - 2013-09-22 00:02 - 31237192 _____ (Mirillis Ltd.) C:\Users\PC\Desktop\action_1_16_2_setup.exe 2013-09-24 10:51 - 2013-09-22 00:02 - 03780040 _____ C:\Users\PC\Desktop\Action! 1.16.2.7z 2013-09-24 10:50 - 2013-09-24 10:50 - 35017373 _____ C:\Users\PC\Desktop\Mirillis-Action-1.16.2.0_PlusCrack.com.rar 2013-09-23 16:36 - 2013-09-23 16:58 - 00000000 ____D C:\Users\PC\AppData\Local\PAYDAY 2 2013-09-23 16:36 - 2013-09-23 16:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-09-23 16:21 - 2013-09-24 04:21 - 98840431 _____ C:\Windows\SysWOW64\簾 2013-09-23 14:26 - 2013-09-23 14:26 - 98646441 _____ C:\Windows\SysWOW64\డ柦d 2013-09-22 21:07 - 2013-09-22 21:07 - 98597466 _____ C:\Windows\SysWOW64\侽 2013-09-22 18:30 - 2013-09-12 10:58 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-09-22 18:30 - 2013-09-12 10:58 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-09-22 18:30 - 2013-09-12 10:58 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-22 18:28 - 2013-09-22 18:28 - 00000000 ____D C:\NVIDIA 2013-09-22 05:14 - 2013-09-22 05:19 - 00000000 ____D C:\Windows\system32\MRT 2013-09-22 05:14 - 2013-07-31 15:29 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-22 05:14 - 2013-07-31 15:20 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-22 05:14 - 2013-07-31 15:19 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-22 05:14 - 2013-07-31 15:18 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-22 05:14 - 2013-07-31 15:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-22 05:14 - 2013-07-31 15:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-22 05:14 - 2013-07-31 15:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-22 05:14 - 2013-07-31 15:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-22 05:14 - 2013-07-31 15:13 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-22 05:14 - 2013-07-31 15:11 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-22 05:14 - 2013-07-31 15:11 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-22 05:14 - 2013-07-31 15:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-22 05:14 - 2013-07-31 15:08 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-22 05:14 - 2013-07-31 15:05 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-22 05:14 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-22 05:14 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-22 05:14 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-22 05:14 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-09-22 05:14 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-22 05:14 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-09-22 05:14 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-22 05:14 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-22 05:14 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-09-22 05:14 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-09-22 05:14 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-22 05:14 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-22 05:14 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-22 05:14 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-09-22 05:14 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-22 05:13 - 2013-07-31 16:17 - 17833472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-22 05:13 - 2013-07-31 15:42 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-22 05:13 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-22 05:01 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-22 05:01 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-09-22 05:01 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-09-22 05:01 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-09-22 05:01 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-09-22 05:01 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-09-22 05:01 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-09-22 05:01 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-09-22 05:01 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-09-22 05:01 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-09-22 05:01 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-09-22 05:01 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-09-22 05:01 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-09-22 05:01 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-09-22 05:01 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-09-22 05:01 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-09-22 05:01 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-09-22 05:01 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-09-22 05:01 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-09-22 05:01 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-09-22 05:01 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-09-22 05:01 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-09-22 05:01 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-09-22 05:01 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-09-22 05:01 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-09-22 05:01 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-09-22 05:01 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-09-22 05:01 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-09-22 05:01 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-09-22 05:01 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-09-22 05:01 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-09-22 05:01 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-09-22 05:01 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-09-22 05:01 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-09-22 05:01 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-09-22 05:01 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-09-22 05:01 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-09-22 05:01 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-09-22 05:01 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-09-22 05:01 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-09-22 05:01 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-09-22 05:01 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-09-22 05:00 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-09-21 14:17 - 2013-09-21 20:17 - 98547399 _____ C:\Windows\SysWOW64\죏颧[ 2013-09-20 19:25 - 2013-09-20 21:24 - 98498750 _____ C:\Windows\SysWOW64\X 2013-09-20 15:26 - 2013-09-20 15:26 - 00189683 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_16.853042.dmp 2013-09-20 15:26 - 2013-09-20 15:26 - 00183059 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_03.853298.dmp 2013-09-20 13:34 - 2013-09-20 13:35 - 00675988 _____ C:\Users\PC\Desktop\Minecraft.exe 2013-09-19 23:42 - 2013-09-19 23:42 - 00189187 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-19 23_42_20.036083.dmp 2013-09-19 21:14 - 2013-09-19 21:14 - 03684312 _____ C:\Users\PC\Desktop\rgnlauncher0.9.6.exe 2013-09-19 20:30 - 2013-09-19 20:30 - 00000000 ____D C:\Users\PC\Documents\Westcoast Launcher 2013-09-19 13:38 - 2013-09-20 01:51 - 98428185 _____ C:\Windows\SysWOW64\⓻[ 2013-09-18 11:04 - 2013-09-18 11:04 - 00184959 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-18 11_04_09.325110.dmp 2013-09-18 09:26 - 2013-09-12 10:58 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-09-18 09:26 - 2013-09-12 10:58 - 00022814 _____ C:\Windows\system32\nvinfo.pb 2013-09-18 09:26 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-09-18 09:26 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-09-18 09:26 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2013-09-18 09:26 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2013-09-18 09:17 - 2013-09-21 04:19 - 00003350 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000 2013-09-18 08:59 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-09-18 08:59 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-09-17 14:02 - 2013-09-18 00:00 - 98071447 _____ C:\Windows\SysWOW64\ⱐ㐿 2013-09-16 19:52 - 2013-09-16 19:53 - 00000000 ____D C:\Users\PC\AppData\Roaming\MTE 2013-09-16 18:54 - 2013-09-24 15:47 - 00000000 ____D C:\Program Files (x86)\Minecraft Texturepack Editor 2013-09-16 18:54 - 2013-09-16 18:54 - 00001076 _____ C:\Users\UpdatusUser\Desktop\Minecraft Texturepack Editor.lnk 2013-09-15 00:45 - 2013-09-15 00:45 - 00215544 _____ C:\Users\PC\Youtube Kacke_Peter Lustig Collab.mp3.sfk 2013-09-14 13:55 - 2013-09-14 21:55 - 97600188 _____ C:\Windows\SysWOW64\씴�V 2013-09-13 16:02 - 2013-09-20 13:02 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-09-13 14:51 - 2013-09-13 20:51 - 97503480 _____ C:\Windows\SysWOW64\俭㜀” 2013-09-13 00:19 - 2013-09-13 00:19 - 97412816 _____ C:\Windows\SysWOW64\䩾„ 2013-09-12 23:57 - 2013-09-12 23:57 - 00003246 _____ C:\Users\PC\AppData\Local\recently-used.xbel 2013-09-12 20:25 - 2013-09-12 20:25 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder 2013-09-12 15:55 - 2013-09-12 15:55 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.GroupEventArgs.resizer_settings 2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-09-11 19:30 - 2013-09-11 21:29 - 97171315 _____ C:\Windows\SysWOW64\ꂘc 2013-09-11 13:30 - 2013-09-11 13:30 - 97124766 _____ C:\Windows\SysWOW64\칍㺲— 2013-09-11 06:00 - 2013-09-11 06:00 - 00000000 ____D C:\Users\PC\Documents\ANNO 1404 Venedig 2013-09-09 15:19 - 2013-09-09 15:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2013-09-09 15:18 - 2013-09-09 15:19 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-09-09 15:16 - 2013-09-12 08:32 - 00000000 ____D C:\Users\PC\AppData\Local\Overwolf 2013-09-09 14:43 - 2013-09-10 00:42 - 96851172 _____ C:\Windows\SysWOW64\�ゆ‡ 2013-09-09 10:11 - 2013-09-09 10:11 - 00000000 ____D C:\Users\PC\Documents\Alpha Protocol 2013-09-09 01:17 - 2013-09-09 01:18 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-09 01_17_18.095630.dmp 2013-09-08 23:34 - 2013-09-18 08:43 - 00000000 ____D C:\Users\PC\Desktop\redsn0w_win_0.9.15b3 2013-09-08 23:29 - 2013-09-08 23:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\PathToSuccess_DE 2013-09-08 22:42 - 2013-09-09 08:42 - 96601965 _____ C:\Windows\SysWOW64\퉼浘Š 2013-09-08 01:53 - 2013-09-08 01:53 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-08 01_53_11.539379.dmp 2013-09-07 14:42 - 2013-09-08 10:42 - 96533415 _____ C:\Windows\SysWOW64\╀’ 2013-09-07 12:58 - 2013-09-07 12:58 - 00000000 ____D C:\Users\PC\Desktop\Anno Trainer 2013-09-07 06:02 - 2013-09-07 06:02 - 00000000 ____D C:\Users\PC\Documents\Anno 1404 2013-09-06 16:50 - 2013-09-06 16:50 - 00184656 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_50_15.882892.dmp 2013-09-06 16:11 - 2013-09-06 16:11 - 00183400 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_11_18.257187.dmp 2013-09-06 00:48 - 2013-09-06 00:48 - 00085640 _____ C:\Users\PC\Desktop\96_cs-dd-patch.rar 2013-09-06 00:43 - 2013-09-06 00:43 - 00002069 _____ C:\Users\UpdatusUser\Desktop\American Conquest Fight Back.lnk 2013-09-06 00:10 - 2013-09-06 00:10 - 00001926 _____ C:\Users\UpdatusUser\Desktop\American Conquest.lnk 2013-09-05 18:14 - 2013-09-06 00:15 - 96269118 _____ C:\Windows\SysWOW64\谑ᜊ” 2013-09-04 14:11 - 2013-09-04 22:10 - 95956132 _____ C:\Windows\SysWOW64\颧ˆ 2013-09-04 00:04 - 2013-08-28 17:53 - 00001815 _____ C:\Users\PC\Desktop\Apps.lnk 2013-09-03 22:02 - 2013-09-03 22:02 - 00179360 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-03 22_02_10.360328.dmp 2013-09-03 19:11 - 2013-09-03 19:11 - 00018712 _____ C:\Users\PC\Downloads\YouTube-Unblocker-045.crx 2013-09-02 21:50 - 2013-09-03 18:13 - 00000000 ____D C:\Users\PC\AppData\Local\Game Dev Tycoon - Steam 2013-09-02 21:41 - 2013-09-02 21:41 - 00000000 ____D C:\ProgramData\Package Cache 2013-09-02 21:26 - 2013-09-02 21:27 - 00168615 _____ C:\Users\PC\bluuuuuuuuuuuuuuuuuuuuuuuuuubb 2013-09-02 18:32 - 2013-09-02 18:34 - 00132441 _____ C:\Users\PC\ficken 2013-09-02 13:34 - 2013-09-02 13:34 - 00000000 ____D C:\Program Files (x86)\Nemex 2013-09-01 15:41 - 2013-09-01 19:41 - 95199041 _____ C:\Windows\SysWOW64\ꃰ쟁— 2013-08-31 23:58 - 2013-08-31 23:58 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-08-31 23_58_13.220319.dmp 2013-08-31 15:19 - 2013-08-31 21:18 - 95128664 _____ C:\Windows\SysWOW64\✤搴– 2013-08-30 14:52 - 2013-08-30 20:51 - 94985858 _____ C:\Windows\SysWOW64\樵ﱳ’ 2013-08-29 18:45 - 2013-08-29 18:45 - 00011264 ___SH C:\Users\PC\Thumbs.db 2013-08-29 15:02 - 2013-08-29 21:02 - 94663095 _____ C:\Windows\SysWOW64\던ꫪ” 2013-08-28 17:52 - 2013-08-28 17:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-08-28 17:51 - 2013-08-28 17:53 - 00000000 ____D C:\ProgramData\BlueStacks 2013-08-28 14:54 - 2013-08-28 22:54 - 101091881 _____ C:\Windows\SysWOW64\說㹬P 2013-08-28 12:20 - 2013-08-28 12:20 - 00000000 ____D C:\Users\PC\AppData\Roaming\Empty Clip Studios 2013-08-27 19:21 - 2013-08-27 21:21 - 100458977 _____ C:\Windows\SysWOW64\崑義‘ 2013-08-26 13:40 - 2013-08-26 21:40 - 100279224 _____ C:\Windows\SysWOW64\뜇ꍺ 2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ___RD C:\Users\PC\Documents\HP Photo Creations 2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ____D C:\Users\PC\AppData\Roaming\Visan 2013-08-26 11:42 - 2013-09-22 09:06 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job 2013-08-26 11:42 - 2013-09-22 00:55 - 00003336 _____ C:\Windows\System32\Tasks\HP Photo Creations Communicator 2013-08-26 11:42 - 2013-09-16 00:50 - 00000000 ____D C:\ProgramData\HP Photo Creations 2013-08-26 11:42 - 2013-08-26 11:45 - 00000000 ____D C:\ProgramData\Visan 2013-08-26 10:26 - 2013-08-26 10:27 - 00000000 ____D C:\Users\PC\AppData\Local\gtk-2.0 2013-08-26 10:17 - 2013-08-26 10:17 - 00000000 ____D C:\Users\PC\.thumbnails 2013-08-26 10:15 - 2013-09-12 23:58 - 00000000 ____D C:\Users\PC\.gimp-2.8 2013-08-26 10:15 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\AppData\Local\gegl-0.2 2013-08-26 10:14 - 2013-08-26 10:14 - 00000000 ____D C:\Program Files\GIMP 2 ==================== One Month Modified Files and Folders ======= 2013-09-24 16:14 - 2013-09-24 16:14 - 00000000 ____D C:\FRST 2013-09-24 16:13 - 2013-09-24 16:13 - 01955802 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe 2013-09-24 16:02 - 2012-12-14 06:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-24 15:53 - 2012-10-23 20:32 - 00000000 ____D C:\ProgramData\Sony 2013-09-24 15:51 - 2013-06-25 16:29 - 00000000 ____D C:\Wanadoo Edition 2013-09-24 15:51 - 2012-12-03 12:08 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive 2013-09-24 15:47 - 2013-09-16 18:54 - 00000000 ____D C:\Program Files (x86)\Minecraft Texturepack Editor 2013-09-24 15:28 - 2013-07-15 12:38 - 03458048 ___SH C:\Users\PC\Desktop\Thumbs.db 2013-09-24 15:25 - 2013-07-16 00:51 - 00000000 ____D C:\ProgramData\saffee. save 2013-09-24 15:22 - 2013-09-24 15:22 - 00000378 _____ C:\Users\PC\Desktop\Ereignisse (2).txt 2013-09-24 15:14 - 2013-09-24 15:14 - 00001214 _____ C:\Users\PC\Desktop\Ereignisse (1).txt 2013-09-24 15:09 - 2013-09-24 15:09 - 00001536 _____ C:\Users\PC\Desktop\Ereignisse.txt 2013-09-24 14:54 - 2013-07-16 00:52 - 00000000 ____D C:\Program Files (x86)\SafeSaver 2013-09-24 14:17 - 2013-09-24 14:17 - 97531747 _____ C:\Windows\SysWOW64\덼A 2013-09-24 14:15 - 2012-10-18 10:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\foobar2000 2013-09-24 13:36 - 2012-10-19 07:08 - 00000000 ____D C:\Users\PC\Desktop\Ordner mit Krimskrams 2013-09-24 13:07 - 2013-09-24 13:00 - 00000000 ____D C:\ProgramData\MAGIX 2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\Documents\MAGIX_MxTray 2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\AppData\Roaming\MAGIX 2013-09-24 13:02 - 2013-09-24 13:02 - 00002812 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG 2013-09-24 13:02 - 2013-09-24 13:02 - 00000440 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job 2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\OnDemandDump 2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\CrashLog 2013-09-24 13:01 - 2013-09-24 13:00 - 00000000 ____D C:\Program Files (x86)\MAGIX 2013-09-24 12:56 - 2013-09-24 12:56 - 41085024 _____ (MAGIX AG) C:\Users\PC\Desktop\setup_pc_check_tuning.exe 2013-09-24 12:11 - 2012-10-18 10:21 - 00000000 ____D C:\Users\PC\AppData\Roaming\TS3Client 2013-09-24 12:05 - 2013-06-12 11:08 - 00000020 _____ C:\Windows\capsys184523.log 2013-09-24 12:05 - 2013-05-19 08:43 - 01617202 _____ C:\Windows\WindowsUpdate.log 2013-09-24 12:04 - 2013-07-25 16:48 - 00000000 ____D C:\Users\PC\AppData\Local\CrashDumps 2013-09-24 11:29 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\Mirillis 2013-09-24 11:29 - 2013-09-24 11:26 - 00000000 ____D C:\Users\PC\AppData\Local\Mirillis 2013-09-24 11:28 - 2013-09-24 11:28 - 00001995 _____ C:\Users\Public\Desktop\Action!.lnk 2013-09-24 11:28 - 2013-06-12 19:13 - 00000000 ____D C:\Program Files (x86)\Mirillis 2013-09-24 11:24 - 2013-09-24 11:24 - 31237192 _____ (Mirillis Ltd.) C:\Users\PC\Desktop\action_1_16_2_setup (1).exe 2013-09-24 11:15 - 2013-09-24 11:15 - 18751346 _____ C:\Users\PC\Desktop\mirillis.action.1.14.0.rar 2013-09-24 10:55 - 2013-09-24 10:55 - 00000000 ____D C:\Users\PC\Desktop\Action! 1.16.2 2013-09-24 10:50 - 2013-09-24 10:50 - 35017373 _____ C:\Users\PC\Desktop\Mirillis-Action-1.16.2.0_PlusCrack.com.rar 2013-09-24 08:40 - 2012-10-20 08:21 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-09-24 08:26 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-24 08:26 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-24 08:17 - 2012-10-18 10:18 - 00000000 ____D C:\Program Files (x86)\Steam 2013-09-24 08:15 - 2013-05-19 08:40 - 00034676 _____ C:\Windows\setupact.log 2013-09-24 08:15 - 2013-05-17 19:02 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-24 08:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-24 04:21 - 2013-09-23 16:21 - 98840431 _____ C:\Windows\SysWOW64\簾 2013-09-24 01:02 - 2012-10-21 15:58 - 00000000 ____D C:\Users\PC\Documents\Euro Truck Simulator 2 2013-09-23 17:36 - 2013-08-07 11:41 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.PartitionProvider.resizer_settings 2013-09-23 16:58 - 2013-09-23 16:36 - 00000000 ____D C:\Users\PC\AppData\Local\PAYDAY 2 2013-09-23 16:36 - 2013-09-23 16:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-09-23 16:36 - 2012-10-18 09:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-09-23 15:09 - 2013-05-05 14:30 - 00000000 ____D C:\Users\PC\Desktop\Zuhause Fotos 2013-09-23 14:26 - 2013-09-23 14:26 - 98646441 _____ C:\Windows\SysWOW64\డ柦d 2013-09-23 13:39 - 2012-10-25 21:18 - 00000000 ____D C:\Users\PC\AppData\Roaming\.minecraft 2013-09-23 12:19 - 2013-05-19 08:40 - 00300820 _____ C:\Windows\PFRO.log 2013-09-22 21:07 - 2013-09-22 21:07 - 98597466 _____ C:\Windows\SysWOW64\侽 2013-09-22 18:28 - 2013-09-22 18:28 - 00000000 ____D C:\NVIDIA 2013-09-22 11:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-09-22 09:10 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-09-22 09:10 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-09-22 09:06 - 2013-08-26 11:42 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job 2013-09-22 09:06 - 2013-01-13 13:13 - 05058176 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-22 05:21 - 2012-11-18 04:59 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-22 05:21 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini 2013-09-22 05:19 - 2013-09-22 05:14 - 00000000 ____D C:\Windows\system32\MRT 2013-09-22 00:55 - 2013-08-26 11:42 - 00003336 _____ C:\Windows\System32\Tasks\HP Photo Creations Communicator 2013-09-22 00:54 - 2013-03-25 09:35 - 00003212 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3322853412-3098556889-925944958-1000 2013-09-22 00:02 - 2013-09-24 10:51 - 31237192 _____ (Mirillis Ltd.) C:\Users\PC\Desktop\action_1_16_2_setup.exe 2013-09-22 00:02 - 2013-09-24 10:51 - 03780040 _____ C:\Users\PC\Desktop\Action! 1.16.2.7z 2013-09-21 20:17 - 2013-09-21 14:17 - 98547399 _____ C:\Windows\SysWOW64\죏颧[ 2013-09-21 04:19 - 2013-09-18 09:17 - 00003350 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000 2013-09-21 01:58 - 2012-10-18 10:16 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype 2013-09-20 21:24 - 2013-09-20 19:25 - 98498750 _____ C:\Windows\SysWOW64\X 2013-09-20 15:26 - 2013-09-20 15:26 - 00189683 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_16.853042.dmp 2013-09-20 15:26 - 2013-09-20 15:26 - 00183059 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_03.853298.dmp 2013-09-20 13:35 - 2013-09-20 13:34 - 00675988 _____ C:\Users\PC\Desktop\Minecraft.exe 2013-09-20 13:02 - 2013-09-13 16:02 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-09-20 13:02 - 2012-12-14 06:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-20 13:02 - 2012-10-18 11:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-09-20 13:02 - 2012-10-18 11:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-20 01:51 - 2013-09-19 13:38 - 98428185 _____ C:\Windows\SysWOW64\⓻[ 2013-09-19 23:42 - 2013-09-19 23:42 - 00189187 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-19 23_42_20.036083.dmp 2013-09-19 21:14 - 2013-09-19 21:14 - 03684312 _____ C:\Users\PC\Desktop\rgnlauncher0.9.6.exe 2013-09-19 20:30 - 2013-09-19 20:30 - 00000000 ____D C:\Users\PC\Documents\Westcoast Launcher 2013-09-18 21:19 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC 2013-09-18 11:04 - 2013-09-18 11:04 - 00184959 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-18 11_04_09.325110.dmp 2013-09-18 08:43 - 2013-09-08 23:34 - 00000000 ____D C:\Users\PC\Desktop\redsn0w_win_0.9.15b3 2013-09-18 00:00 - 2013-09-17 14:02 - 98071447 _____ C:\Windows\SysWOW64\ⱐ㐿 2013-09-16 19:53 - 2013-09-16 19:52 - 00000000 ____D C:\Users\PC\AppData\Roaming\MTE 2013-09-16 18:54 - 2013-09-16 18:54 - 00001076 _____ C:\Users\UpdatusUser\Desktop\Minecraft Texturepack Editor.lnk 2013-09-16 00:50 - 2013-08-26 11:42 - 00000000 ____D C:\ProgramData\HP Photo Creations 2013-09-15 00:45 - 2013-09-15 00:45 - 00215544 _____ C:\Users\PC\Youtube Kacke_Peter Lustig Collab.mp3.sfk 2013-09-14 21:55 - 2013-09-14 13:55 - 97600188 _____ C:\Windows\SysWOW64\씴�V 2013-09-13 20:51 - 2013-09-13 14:51 - 97503480 _____ C:\Windows\SysWOW64\俭㜀” 2013-09-13 20:30 - 2013-07-03 12:04 - 00000000 ____D C:\Users\PC\AppData\Local\ArmA 2 OA 2013-09-13 16:03 - 2013-02-27 10:09 - 00000000 ____D C:\Users\PC\Desktop\Ordner für Lustige BIlder 2013-09-13 12:55 - 2013-06-22 19:20 - 00000000 ____D C:\Program Files (x86)\Opera Next 2013-09-13 00:46 - 2012-10-18 13:43 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-09-13 00:46 - 2012-10-18 13:43 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-09-13 00:19 - 2013-09-13 00:19 - 97412816 _____ C:\Windows\SysWOW64\䩾„ 2013-09-12 23:58 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\.gimp-2.8 2013-09-12 23:57 - 2013-09-12 23:57 - 00003246 _____ C:\Users\PC\AppData\Local\recently-used.xbel 2013-09-12 20:25 - 2013-09-12 20:25 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder 2013-09-12 18:20 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-09-12 15:55 - 2013-09-12 15:55 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.GroupEventArgs.resizer_settings 2013-09-12 10:58 - 2013-09-22 18:30 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-09-12 10:58 - 2013-09-22 18:30 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-09-12 10:58 - 2013-09-22 18:30 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-12 10:58 - 2013-09-18 09:26 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-09-12 10:58 - 2013-09-18 09:26 - 00022814 _____ C:\Windows\system32\nvinfo.pb 2013-09-12 10:58 - 2013-06-27 12:11 - 12947360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-09-12 10:58 - 2013-06-27 12:11 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-09-12 10:58 - 2013-05-20 00:29 - 15901448 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-09-12 10:58 - 2013-05-17 18:56 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-09-12 10:58 - 2013-05-17 18:56 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-09-12 09:25 - 2013-05-17 19:02 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-09-12 09:25 - 2013-05-17 19:02 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-09-12 09:25 - 2013-05-17 19:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-09-12 09:25 - 2013-05-17 19:02 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-09-12 09:25 - 2013-05-17 19:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-09-12 09:25 - 2013-05-17 19:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-09-12 08:32 - 2013-09-09 15:16 - 00000000 ____D C:\Users\PC\AppData\Local\Overwolf 2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-09-12 00:06 - 2013-05-17 19:02 - 03361114 _____ C:\Windows\system32\nvcoproc.bin 2013-09-11 21:29 - 2013-09-11 19:30 - 97171315 _____ C:\Windows\SysWOW64\ꂘc 2013-09-11 13:30 - 2013-09-11 13:30 - 97124766 _____ C:\Windows\SysWOW64\칍㺲— 2013-09-11 06:00 - 2013-09-11 06:00 - 00000000 ____D C:\Users\PC\Documents\ANNO 1404 Venedig 2013-09-11 05:28 - 2012-10-19 08:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Ubisoft 2013-09-10 00:42 - 2013-09-09 14:43 - 96851172 _____ C:\Windows\SysWOW64\�ゆ‡ 2013-09-09 15:19 - 2013-09-09 15:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2013-09-09 15:19 - 2013-09-09 15:18 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-09-09 15:15 - 2013-07-25 10:49 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client 2013-09-09 10:11 - 2013-09-09 10:11 - 00000000 ____D C:\Users\PC\Documents\Alpha Protocol 2013-09-09 10:10 - 2013-05-20 12:36 - 00222199 _____ C:\Windows\DirectX.log 2013-09-09 08:42 - 2013-09-08 22:42 - 96601965 _____ C:\Windows\SysWOW64\퉼浘Š 2013-09-09 01:18 - 2013-09-09 01:17 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-09 01_17_18.095630.dmp 2013-09-08 23:42 - 2013-07-25 09:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\redsn0w 2013-09-08 23:29 - 2013-09-08 23:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\PathToSuccess_DE 2013-09-08 10:42 - 2013-09-07 14:42 - 96533415 _____ C:\Windows\SysWOW64\╀’ 2013-09-08 01:53 - 2013-09-08 01:53 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-08 01_53_11.539379.dmp 2013-09-07 12:58 - 2013-09-07 12:58 - 00000000 ____D C:\Users\PC\Desktop\Anno Trainer 2013-09-07 06:02 - 2013-09-07 06:02 - 00000000 ____D C:\Users\PC\Documents\Anno 1404 2013-09-06 16:50 - 2013-09-06 16:50 - 00184656 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_50_15.882892.dmp 2013-09-06 16:11 - 2013-09-06 16:11 - 00183400 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_11_18.257187.dmp 2013-09-06 00:48 - 2013-09-06 00:48 - 00085640 _____ C:\Users\PC\Desktop\96_cs-dd-patch.rar 2013-09-06 00:43 - 2013-09-06 00:43 - 00002069 _____ C:\Users\UpdatusUser\Desktop\American Conquest Fight Back.lnk 2013-09-06 00:15 - 2013-09-05 18:14 - 96269118 _____ C:\Windows\SysWOW64\谑ᜊ” 2013-09-06 00:10 - 2013-09-06 00:10 - 00001926 _____ C:\Users\UpdatusUser\Desktop\American Conquest.lnk 2013-09-04 22:10 - 2013-09-04 14:11 - 95956132 _____ C:\Windows\SysWOW64\颧ˆ 2013-09-03 22:02 - 2013-09-03 22:02 - 00179360 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-03 22_02_10.360328.dmp 2013-09-03 19:11 - 2013-09-03 19:11 - 00018712 _____ C:\Users\PC\Downloads\YouTube-Unblocker-045.crx 2013-09-03 18:13 - 2013-09-02 21:50 - 00000000 ____D C:\Users\PC\AppData\Local\Game Dev Tycoon - Steam 2013-09-02 21:41 - 2013-09-02 21:41 - 00000000 ____D C:\ProgramData\Package Cache 2013-09-02 21:27 - 2013-09-02 21:26 - 00168615 _____ C:\Users\PC\bluuuuuuuuuuuuuuuuuuuuuuuuuubb 2013-09-02 18:34 - 2013-09-02 18:32 - 00132441 _____ C:\Users\PC\ficken 2013-09-02 15:22 - 2013-03-28 09:26 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-02 14:27 - 2011-04-12 09:43 - 00719582 _____ C:\Windows\system32\perfh007.dat 2013-09-02 14:27 - 2011-04-12 09:43 - 00158444 _____ C:\Windows\system32\perfc007.dat 2013-09-02 14:27 - 2009-07-14 07:13 - 01674864 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-02 14:08 - 2012-11-23 00:20 - 00000000 ____D C:\Users\PC\Documents\My Recorded Scripts 2013-09-02 13:34 - 2013-09-02 13:34 - 00000000 ____D C:\Program Files (x86)\Nemex 2013-09-02 13:26 - 2012-10-31 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games 2013-09-02 13:19 - 2012-10-31 20:30 - 00000000 ____D C:\Program Files (x86)\Origin 2013-09-01 19:41 - 2013-09-01 15:41 - 95199041 _____ C:\Windows\SysWOW64\ꃰ쟁— 2013-09-01 19:02 - 2013-08-13 10:50 - 00000000 ____D C:\Users\PC\Desktop\Game Dev Tycoon Tipps 2013-09-01 17:08 - 2012-10-20 23:07 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-01 13:05 - 2013-06-25 17:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-09-01 12:56 - 2012-10-19 08:05 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-08-31 23:58 - 2013-08-31 23:58 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-08-31 23_58_13.220319.dmp 2013-08-31 21:18 - 2013-08-31 15:19 - 95128664 _____ C:\Windows\SysWOW64\✤搴– 2013-08-30 20:51 - 2013-08-30 14:52 - 94985858 _____ C:\Windows\SysWOW64\樵ﱳ’ 2013-08-29 21:02 - 2013-08-29 15:02 - 94663095 _____ C:\Windows\SysWOW64\던ꫪ” 2013-08-29 18:45 - 2013-08-29 18:45 - 00011264 ___SH C:\Users\PC\Thumbs.db 2013-08-28 22:54 - 2013-08-28 14:54 - 101091881 _____ C:\Windows\SysWOW64\說㹬P 2013-08-28 17:54 - 2013-03-02 20:47 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-08-28 17:53 - 2013-09-04 00:04 - 00001815 _____ C:\Users\PC\Desktop\Apps.lnk 2013-08-28 17:53 - 2013-08-28 17:51 - 00000000 ____D C:\ProgramData\BlueStacks 2013-08-28 17:53 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-08-28 17:52 - 2013-08-28 17:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-08-28 12:20 - 2013-08-28 12:20 - 00000000 ____D C:\Users\PC\AppData\Roaming\Empty Clip Studios 2013-08-27 21:21 - 2013-08-27 19:21 - 100458977 _____ C:\Windows\SysWOW64\崑義‘ 2013-08-26 21:40 - 2013-08-26 13:40 - 100279224 _____ C:\Windows\SysWOW64\뜇ꍺ 2013-08-26 11:54 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Local\VirtualStore 2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ___RD C:\Users\PC\Documents\HP Photo Creations 2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ____D C:\Users\PC\AppData\Roaming\Visan 2013-08-26 11:45 - 2013-08-26 11:42 - 00000000 ____D C:\ProgramData\Visan 2013-08-26 10:27 - 2013-08-26 10:26 - 00000000 ____D C:\Users\PC\AppData\Local\gtk-2.0 2013-08-26 10:17 - 2013-08-26 10:17 - 00000000 ____D C:\Users\PC\.thumbnails 2013-08-26 10:15 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\AppData\Local\gegl-0.2 2013-08-26 10:14 - 2013-08-26 10:14 - 00000000 ____D C:\Program Files\GIMP 2 Files to move or delete: ==================== C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\PC\AppData\Local\Temp\GLB1A2B.EXE C:\Users\PC\AppData\Local\Temp\nvSCPAPI.dll C:\Users\PC\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\PC\AppData\Local\Temp\nvStereoApiI.dll C:\Users\PC\AppData\Local\Temp\nvStInst.exe C:\Users\PC\AppData\Local\Temp\ubi628.tmp.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-22 11:12 ==================== End Of Log ============================ Mit freundlichen Grüßen Brille65 |
|
24.09.2013, 15:25
| #4 |
| | Mobilfunk-MMS erhalten per Mail... und hier die Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-09-2013
Ran by PC at 2013-09-24 16:16:28
Running from C:\Users\PC\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
4Videosoft Video Converter Platinum 5.0.12 (x32)
Action! (x32 Version: 1.14.0)
Adbuck (x32 Version: 2.2)
Adbuck (x32 Version: 2.2.1)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
AI Suite II (x32 Version: 1.02.15)
Amazon Kindle (HKCU)
ANNO 1404 - Venedig (x32 Version: 2.01.5010)
Anno 1404 (x32 Version: 1.00.0000)
ANNO 1404 (x32 Version: 1.02.0000)
ANNO 1503 GOLD (x32 Version: 1.05.00)
ANNO 1602 Königs-Edition (x32 Version: 1.00)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ARMA 2 Operation Arrowhead Uninstall (x32)
ArmA2 Uninstall (x32)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.8.0)
Assassin's Creed Brotherhood (x32 Version: 1.00)
ASUS PC Diagnostics (x32 Version: 1.1.2)
Audacity 1.2.6 (x32)
Audiosurf (x32)
Avira Internet Security (x32 Version: 13.0.0.4052)
AviSynth 2.5 (x32)
Battlelog Web Plugins (x32 Version: 2.1.7)
BattlEye for OA Uninstall (x32)
Bitcoin (HKCU Version: 0.8.1)
BlueStacks App Player (x32 Version: 0.7.17.916)
BlueStacks Notification Center (x32 Version: 0.7.17.916)
BOINC (Version: 7.0.28)
Bonjour (Version: 3.0.0.10)
Clonk Planet (x32 Version: 4.65)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
DayZ Commander (x32 Version: 0.92.85)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Die Gilde 2 Venedig (x32 Version: 3.00.0000)
DivX-Setup (x32 Version: 2.6.1.44)
DuckTales Remastered (x32 Version: 1)
ESN Sonar (x32 Version: 0.70.4)
Euro Truck Simulator 2 (x32)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
Fallout (x32)
Fallout 2 (x32)
Fallout 2 Unofficial Patch 1.02.22 (x32)
foobar2000 v1.2.8 (x32 Version: 1.2.8)
Fraps (remove only) (x32)
GIMP 2.8.6 (Version: 2.8.6)
Google Update Helper (x32 Version: 1.3.21.145)
Gothic (x32)
Gothic 3 (x32)
Gothic I Datenbank (HKCU Version: 1.0 Beta)
Gothic II: Gold Edition (x32)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto San Andreas (x32 Version: v1.0/1.1)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135)
HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Deskjet 1000 J110 series Hilfe (x32 Version: 140.0.65.65)
HP Update (x32 Version: 5.002.006.003)
I Am Alive (x32 Version: 1.00.0)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
iTunes (Version: 11.0.5.5)
Jardinains 2! Lite Version 1.1 (x32 Version: 1.1)
Jardinains! (x32)
Java 7 Update 21 (x32 Version: 7.0.210)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
KC Softwares VideoInspector (x32)
Knights Of Honor (x32 Version: 1.00)
LoewenherZ Launcher (HKCU Version: 1.0.1.9)
Logitech G35 (Version: 1.1.178)
Logitech Gaming Software 5.10 (Version: 5.10.127)
MAGIX PC Check & Tuning Free 2011 (x32 Version: 6.0.403.1050)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Managed DirectX (0900) (x32 Version: 4.09.00.0900)
MediaCoder x64 0.8.24.5542 (Version: 0.8.24.5542)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Application Compatibility Toolkit 5.6 (x32 Version: 5.6.7324.0)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Game Studios Common Redistributables Pack 1 (x32 Version: 1.0.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Plus! for Windows XP (x32 Version: 1.00.00.0536)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Virtual PC 2007 (Version: 6.0.156.0)
Microsoft Visual Basic PowerPacks 10.0 (x32 Version: 10.0.30319)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft XML Parser (x32 Version: 8.20.8730.4)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0)
MOUSE Editor (x32 Version: 12.08.0006)
Mouse Recorder Pro 2.0.7.4 (x32)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT Redists (Version: 1.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyFreeCodec (HKCU)
Nikon Message Center 2 (x32 Version: 2.1.0)
Nikon Movie Editor (x32 Version: 2.7.0)
Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0)
Nokia Suite (x32 Version: 3.8.30.0)
Notepad++ (x32 Version: 6.3.2)
NVIDIA 3D Vision Controller Driver (x32 Version: 280.19)
NVIDIA 3D Vision Controller-Treiber 326.01 (Version: 326.01)
NVIDIA 3D Vision Treiber 327.23 (Version: 327.23)
NVIDIA GeForce Experience 1.6 (Version: 1.6)
NVIDIA Grafiktreiber 327.23 (Version: 327.23)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.133.902)
NVIDIA Performance Drivers (Version: 2.2.5.0)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2723)
NVIDIA Systemsteuerung 327.23 (Version: 327.23)
NVIDIA Update 8.3.14 (Version: 8.3.14)
NVIDIA Update Components (Version: 8.3.14)
NVIDIA Virtual Audio 1.2.5 (Version: 1.2.5)
OpenAL (x32)
OpenMG Secure Module 4.7.00 (x32 Version: 4.7.00.12140)
Opera 12.16 (x32 Version: 12.16.1860)
Opera Next 17.0.1241.18 (x32 Version: 17.0.1241.18)
Origin (x32 Version: 9.0.15.65)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Overwolf (x32 Version: 0.44.256)
Patch v4.17b Update (x32)
PAYDAY 2 (x32)
PC Connectivity Solution (x32 Version: 12.0.109.0)
PCSX2 - Playstation 2 Emulator (x32)
Philips Songbird (x32 Version: 6.1.2265 (2265))
Picture Control Utility (x32 Version: 1.4.12)
Play withSIX (x32 Version: 1.30.0472)
PunkBuster Services (x32 Version: 0.989)
QuickTime (x32 Version: 7.73.80.64)
RAD Video Tools (x32)
RealDownloader (x32 Version: 1.3.0)
RealNetworks - Microsoft Visual C++ 2005 Runtime (x32 Version: 8.0)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.0)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)
SafeSaver 1.74 (x32)
Sandboxie 4.04 (64-bit) (Version: 4.04)
SHIELD Streaming (Version: 1.05.28)
Sid Meier's Civilization V (x32)
Sid Meier's Pirates! (x32 Version: 1.00.0000)
Skype™ 6.6 (x32 Version: 6.6.106)
SlimDX SDK (September 2011) (x32 Version: 2.0.12.43)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
State of Decay (x32)
Steam (x32 Version: 1.0.0.0)
Studie zur Verbesserung von HP Deskjet 1000 J110 series Produkten (Version: 22.50.231.0)
SumatraPDF (x32 Version: 2.1.1)
TeamSpeak 3 Client (Version: 3.0.10.1)
TeamSpeak 3 Client (x32 Version: 3.0.12)
TeamViewer 8 (x32 Version: 8.0.16447)
The Walking Dead Episode 4 (c) Telltale Games version 1 (x32 Version: 1)
Tropico 4 Collectors Bundle (x32)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.2)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2)
Tunngle beta (x32)
U2bviews Software (x32 Version: 2.0.0)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Access 2013 (KB2752093) 64-Bit Edition
Update for Microsoft Access 2013 (KB2760350) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817621) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2727096) 64-Bit Edition
Update for Microsoft Office 2013 (KB2737954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2752025) 64-Bit Edition
Update for Microsoft Office 2013 (KB2752101) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760533) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760538) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767851) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767860) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817493) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817624) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817632) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2768011) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2817467) 64-Bit Edition
Update for Microsoft Outlook 2013 (KB2817629) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2810006) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2817622) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2810008) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2767863) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817308) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817627) 64-Bit Edition
Uplay (x32 Version: 2.0)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Vegas Pro 10.0 (64-bit) (Version: 10.0.738)
ViewNX 2 (x32 Version: 2.7.6)
Vizzed Retro Game Room (x32 Version: 2.0.0)
War Thunder (x32)
War Thunder Launcher 1.0.1.269 (x32)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0)
Windows-Treiberpaket - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/11/2009 2.0.0010.00002) (Version: 08/11/2009 2.0.0010.00002)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
WinHTTrack Website Copier 3.46-1 (x32 Version: 3.46.1)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Wisterer HX 4.2.32 (x32)
Xilisoft Video Converter Ultimate (x32 Version: 7.7.2.20130217)
Yahoo! Messenger (x32)
Yahoo! Toolbar (x32)
Your Uninstaller! 7 (x32 Version: 7.4.2012.5)
==================== Restore Points =========================
24-09-2013 13:38:18 Removed Guild 2 Patch 1.4
24-09-2013 13:44:23 Removed Google Earth.
24-09-2013 13:46:46 Moloch City wurde entfernt.
24-09-2013 13:47:30 Removed Overwolf
24-09-2013 13:51:28 Stranded 2 wurde entfernt.
24-09-2013 13:52:18 Removed Vegas Pro 12.0 (64-bit)
==================== Hosts content: ==========================
2013-06-14 12:14 - 2013-06-14 12:24 - 00001858 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 adobe.activate.com
127.0.0.1 adobeereg.com
127.0.0.1 www.adobeereg.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 125.252.224.90
127.0.0.1 125.252.224.91
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 www.mirillis.com
127.0.0.1 serwer2.paka-service.com
==================== Scheduled Tasks (whitelisted) =============
Task: {0484BE1A-76BD-4725-91FB-0A6F88B6D3FF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {05B1B38D-D226-4E09-AD71-A654CEA15FC1} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2010-10-12] (ASUSTeK Computer Inc.)
Task: {15C3E648-E083-4F2A-BD95-05EDE1D35954} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {261253AF-7C76-409C-BCD0-F43A80AEAC13} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {271B34A6-9E95-403C-8283-530DE726381E} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {292D26E1-47F7-49C2-BBB6-99F2C6002591} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3322853412-3098556889-925944958-1000UA => C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-08] (Facebook Inc.)
Task: {2C85B11F-CA0E-496D-B62C-8E843B75A1C9} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-06-05] ()
Task: {3596C65D-A249-4DCC-A226-1D01415A6CB1} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2012-12-24] (RealNetworks, Inc.)
Task: {3B73BDD9-7037-484A-A28D-77475E36E0D2} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {3DD2C742-A1F8-43E4-93C3-84128A3DFD25} - System32\Tasks\PCCT - MAGIX AG => C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe [2010-11-08] ()
Task: {478EC09B-4E25-4097-AB2B-5B70EC43D811} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {52CAFC27-95CD-46E9-8A60-78B20598C2E3} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3322853412-3098556889-925944958-1000Core => C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-08] (Facebook Inc.)
Task: {5961305B-8072-4E63-9058-BCE77F28E56D} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {59BB68ED-6E2A-4F82-A522-A5AD3EC1BEBE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {6376FCB7-20DB-4B23-830E-D682FB7B6131} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {670A71D4-397F-403C-9BFE-2D66AD67BA3D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {7372F0A0-878B-4F4C-B6BB-530A30884464} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {7AA750B3-B476-4BF2-A8FB-B09E70693597} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.)
Task: {7C9092CE-7DF5-45EC-9A7A-00EBF9AD8911} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {83DE4EB8-B3B5-4402-BBDB-364A6AAA910F} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {891FF18D-69C8-4321-8F34-269A3C470AAF} - System32\Tasks\{A6FB2088-B5F2-47B3-A320-9B657AD3DBBB} => C:\Program Files (x86)\JoWooD\King\king.exe
Task: {90AF0770-7F8C-4FB9-92ED-8F38510BD4DA} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {916BCE90-5381-4FB6-9483-9D30B6F94B0C} - System32\Tasks\{24B1E832-1D78-4AFF-9AA0-D5CD5509AF8D} => C:\Program Files (x86)\JoWooD\King\king.exe
Task: {9416E738-CB17-490E-AC85-FD9A3688D3B4} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {9C0B432D-3BF9-409A-82A6-7E9D1C430C34} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3322853412-3098556889-925944958-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {A9706EC9-1C2D-46AF-A434-F0755579BDD4} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2011-07-25] ()
Task: {AEAE04D6-C9E4-4D02-BA6F-81D93D0B8AA5} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {AFF3409B-E447-43D6-83B4-C59C9C3EF47B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {C861A018-3634-4970-8614-C7C781E83852} - System32\Tasks\ASUS\ASUS Mobilink Execute => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\ASUS Mobilink.exe [2010-10-13] (ASUSTeK Computer Inc.)
Task: {C9BBC3CB-80AA-4AF3-90D9-5BE7374FE03B} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-21] (Microsoft Corporation)
Task: {DD4B7735-DA98-4217-AB1B-4BB6EE93C9F7} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
Task: {E394C079-C17E-4FFC-A488-4AF00F63F9A0} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {E8948A33-FF7D-4638-9A79-CD9370279F31} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2012-11-29] (RealNetworks, Inc.)
Task: {EB35EADC-6C20-4052-A112-12F8033747C6} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3322853412-3098556889-925944958-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {F0800775-8030-45F0-AF0C-698AC8BC90D3} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-06-12] ()
Task: {F8ABB04B-6636-4F96-AB0C-922D12184F8B} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3322853412-3098556889-925944958-1000Core.job => C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3322853412-3098556889-925944958-1000UA.job => C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\Windows\Tasks\PCCT - MAGIX AG.job => C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe
==================== Loaded Modules (whitelisted) =============
2013-04-26 19:35 - 2013-04-26 19:35 - 00466944 _____ () C:\Program Files (x86)\Mirillis\Action!\action_x64.dll
2013-05-20 00:29 - 2013-09-12 10:58 - 15901448 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-05-15 14:14 - 2013-04-13 07:49 - 00308736 _____ (Microsoft Corporation) C:\Windows\AppPatch\AppPatch64\AcGenral.DLL
2013-05-17 18:56 - 2013-09-12 10:58 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-01-28 14:19 - 2013-01-28 14:19 - 00028960 _____ (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\SDShelEx-x64.dll
2013-09-22 05:01 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll
2012-10-18 11:31 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll
2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll
2013-04-13 23:39 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll
2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll
2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll
2013-01-09 17:05 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll
2013-09-22 05:01 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll
2012-10-18 11:30 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.DLL
2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL
2010-11-21 05:24 - 2010-11-21 05:24 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll
2013-09-22 05:14 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 05:14 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll
2013-09-22 05:14 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll
2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\Normaliz.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll
2012-10-18 11:31 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll
2012-10-18 11:31 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll
2012-10-18 11:30 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\psapi.dll
2013-09-22 05:14 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll
2013-02-28 11:52 - 2013-08-22 00:18 - 00687104 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll
2012-12-16 09:10 - 2013-09-21 20:35 - 01121192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2012-12-16 09:10 - 2013-09-11 00:20 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-16 09:10 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-16 09:10 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-16 09:10 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2012-10-18 12:00 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll
2013-01-09 17:05 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2012-10-18 11:37 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XmlLite.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2009-07-14 02:04 - 2009-07-14 03:15 - 00145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dinput8.dll
2013-06-26 13:11 - 2009-05-21 10:14 - 00053248 ____N () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll
2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.DLL
2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\OLE32.DLL
2010-11-21 05:24 - 2010-11-21 05:24 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVFW32.dll
2009-07-14 02:03 - 2009-07-14 03:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2013-09-22 05:01 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.DLL
2013-06-26 13:11 - 2009-05-21 10:14 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll
2013-06-26 13:07 - 2010-08-23 10:17 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMLib.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.DLL
2012-10-18 12:42 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll
2013-09-22 05:13 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-10-18 11:30 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OLEACC.dll
2012-10-18 12:42 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.DLL
2012-10-18 12:42 - 2011-09-20 18:11 - 00985600 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll
2013-06-26 13:09 - 2010-12-30 22:15 - 01656320 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Bluetooth Go!\BluetoothGo.dll
2012-10-18 12:49 - 2012-03-01 14:20 - 01296384 ____N () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll
2013-06-26 13:11 - 2010-12-03 16:12 - 01027072 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll
2012-10-18 12:42 - 2011-09-29 15:12 - 00881664 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll
2012-10-18 12:42 - 2011-09-26 18:37 - 01616384 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll
2012-10-18 12:42 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll
2012-10-18 12:42 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll
2012-10-18 12:42 - 2011-10-14 20:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll
2012-10-18 12:42 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll
2013-06-12 05:06 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll
2013-02-05 23:56 - 2013-02-05 23:56 - 00050176 _____ (Mirillis Ltd.) C:\Program Files (x86)\Mirillis\Action!\res0407.dll
2012-11-08 14:29 - 2012-11-08 14:29 - 00199168 _____ (Mirillis Ltd.) C:\Program Files (x86)\Mirillis\Action!\res0407_ex.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00119808 _____ (Microsoft Corporation) C:\Windows\syswow64\IMM32.dll
2013-04-04 10:38 - 2013-09-09 15:15 - 00230376 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2013-04-04 10:38 - 2013-09-09 15:15 - 00237032 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2013-04-04 10:38 - 2013-09-09 15:15 - 00159208 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2013-04-04 10:38 - 2013-09-09 15:15 - 00431080 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-08-04 00:59 - 2013-08-04 00:59 - 00202752 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\soundboard.dll
2013-08-04 00:59 - 2013-08-04 00:59 - 00105528 _____ (Un4seen Developments) C:\Program Files (x86)\TeamSpeak 3 Client\plugins\bass\BASS.dll
2013-08-04 00:59 - 2013-08-04 00:59 - 00018496 _____ (Un4seen Developments) C:\Program Files (x86)\TeamSpeak 3 Client\plugins\bass\BASSMIX.dll
2013-09-09 15:15 - 2013-09-09 15:15 - 00555496 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2013-04-04 10:38 - 2013-09-09 15:15 - 00075752 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\test_plugin.dll
2013-04-04 10:38 - 2013-08-02 07:15 - 00986624 _____ (Rohrbacher Development) C:\Program Files (x86)\TeamSpeak 3 Client\plugins\ts3overlay_win32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 01435648 _____ (Microsoft Corporation) C:\Windows\System32\Speech\Common\sapi.dll
2013-04-04 10:38 - 2013-08-02 07:15 - 03649024 _____ (Rohrbacher Development) C:\Program Files (x86)\TeamSpeak 3 Client\plugins\ts3overlay\ts3overlay_hook_win32.dll
2009-07-14 02:10 - 2009-07-14 03:16 - 00316928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2013-09-13 12:54 - 2013-09-13 08:08 - 00868704 _____ () C:\Program Files (x86)\Opera Next\17.0.1241.18\ffmpegsumo.dll
2013-09-13 12:54 - 2013-09-13 08:08 - 00881504 _____ () C:\Program Files (x86)\Opera Next\17.0.1241.18\libglesv2.dll
2013-09-13 12:54 - 2013-09-13 08:08 - 00109408 _____ () C:\Program Files (x86)\Opera Next\17.0.1241.18\libegl.dll
2013-09-11 14:02 - 2013-09-11 14:02 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
2013-04-13 23:39 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-05-04 13:57 - 2013-05-04 13:57 - 00095712 _____ () C:\Program Files (x86)\foobar2000\zlib1.dll
2013-06-14 11:44 - 2013-06-14 11:44 - 00156112 _____ () C:\Program Files (x86)\foobar2000\shared.dll
2013-06-14 11:09 - 2013-06-14 11:09 - 00290816 _____ () C:\Program Files (x86)\foobar2000\components\foo_rgscan.dll
2013-02-11 13:28 - 2013-02-11 13:28 - 00173056 _____ () C:\Program Files (x86)\foobar2000\components\foo_unpack.dll
2013-06-14 11:09 - 2013-06-14 11:09 - 00500736 _____ () C:\Program Files (x86)\foobar2000\components\foo_converter.dll
2013-06-14 11:44 - 2013-06-14 11:44 - 00942056 _____ () C:\Program Files (x86)\foobar2000\components\foo_ui_std.dll
2013-06-14 11:44 - 2013-06-14 11:44 - 01491944 _____ () C:\Program Files (x86)\foobar2000\components\foo_input_std.dll
2013-06-14 11:44 - 2013-06-14 11:44 - 01598944 _____ () C:\Program Files (x86)\foobar2000\avcodec-fb2k-54.dll
2013-06-14 11:44 - 2013-06-14 11:44 - 00198112 _____ () C:\Program Files (x86)\foobar2000\avutil-fb2k-52.dll
2013-02-11 13:28 - 2013-02-11 13:28 - 00198656 _____ () C:\Program Files (x86)\foobar2000\components\foo_dsp_eq.dll
2013-03-07 11:48 - 2013-03-07 11:48 - 00303104 _____ () C:\Program Files (x86)\foobar2000\components\foo_cdda.dll
2013-06-14 11:10 - 2013-06-14 11:10 - 00199680 _____ () C:\Program Files (x86)\foobar2000\components\foo_dsp_std.dll
2013-02-11 13:27 - 2013-02-11 13:27 - 00298496 _____ () C:\Program Files (x86)\foobar2000\components\foo_freedb2.dll
2013-02-11 13:28 - 2013-02-11 13:28 - 00358912 _____ () C:\Program Files (x86)\foobar2000\components\foo_albumlist.dll
2013-02-11 13:28 - 2013-02-11 13:28 - 00281600 _____ () C:\Program Files (x86)\foobar2000\components\foo_fileops.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\PC:zylomtest
AlternateDataStreams: C:\Users\PC:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVUV}
AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: GN-FE605M-Management-Ethernet-Adapter
Description: GN-FE605M-Management-Ethernet-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: GIGA-BYTE TECHNOLOGY CO., LTD
Service: FETNDIS
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/24/2013 03:39:59 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 260
Startzeit: 01ceb8ed81f678f2
Endzeit: 3059
Anwendungspfad: C:\Windows\Explorer.EXE
Berichts-ID:
Error: (09/24/2013 00:04:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Action.exe, Version: 1.14.0.0, Zeitstempel: 0x517ab3fa
Name des fehlerhaften Moduls: Action.exe, Version: 1.14.0.0, Zeitstempel: 0x517ab3fa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00036579
ID des fehlerhaften Prozesses: 0x35d0
Startzeit der fehlerhaften Anwendung: 0xAction.exe0
Pfad der fehlerhaften Anwendung: Action.exe1
Pfad des fehlerhaften Moduls: Action.exe2
Berichtskennung: Action.exe3
Error: (09/24/2013 10:26:13 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 1.5.28.0, Zeitstempel: 0x521bb236
Name des fehlerhaften Moduls: action_x64.dll, Version: 0.0.0.0, Zeitstempel: 0x517abaee
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000006c85
ID des fehlerhaften Prozesses: 0x11f0
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (09/24/2013 10:24:03 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avc.exe, Version: 1.0.7.1219, Zeitstempel: 0x50e79abb
Name des fehlerhaften Moduls: avcodec.dll, Version: 1.0.2.1262, Zeitstempel: 0x50e79a83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000d922a
ID des fehlerhaften Prozesses: 0x1648
Startzeit der fehlerhaften Anwendung: 0xavc.exe0
Pfad der fehlerhaften Anwendung: avc.exe1
Pfad des fehlerhaften Moduls: avc.exe2
Berichtskennung: avc.exe3
Error: (09/24/2013 10:23:01 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avc.exe, Version: 1.0.7.1219, Zeitstempel: 0x50e79abb
Name des fehlerhaften Moduls: avcodec.dll, Version: 1.0.2.1262, Zeitstempel: 0x50e79a83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000d922a
ID des fehlerhaften Prozesses: 0xc8c
Startzeit der fehlerhaften Anwendung: 0xavc.exe0
Pfad der fehlerhaften Anwendung: avc.exe1
Pfad des fehlerhaften Moduls: avc.exe2
Berichtskennung: avc.exe3
Error: (09/24/2013 08:17:09 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/24/2013 04:39:15 AM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to kill already running streamer. [0]
Error: (09/24/2013 04:37:18 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avc.exe, Version: 1.0.7.1219, Zeitstempel: 0x50e79abb
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.6161, Zeitstempel: 0x4dace5b9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00024651
ID des fehlerhaften Prozesses: 0x48f0
Startzeit der fehlerhaften Anwendung: 0xavc.exe0
Pfad der fehlerhaften Anwendung: avc.exe1
Pfad des fehlerhaften Moduls: avc.exe2
Berichtskennung: avc.exe3
Error: (09/24/2013 04:32:36 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avc.exe, Version: 1.0.7.1219, Zeitstempel: 0x50e79abb
Name des fehlerhaften Moduls: avcodec.dll, Version: 1.0.2.1262, Zeitstempel: 0x50e79a83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000d922a
ID des fehlerhaften Prozesses: 0x1e54
Startzeit der fehlerhaften Anwendung: 0xavc.exe0
Pfad der fehlerhaften Anwendung: avc.exe1
Pfad des fehlerhaften Moduls: avc.exe2
Berichtskennung: avc.exe3
Error: (09/24/2013 04:22:04 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avc.exe, Version: 1.0.7.1219, Zeitstempel: 0x50e79abb
Name des fehlerhaften Moduls: avcodec.dll, Version: 1.0.2.1262, Zeitstempel: 0x50e79a83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000d922a
ID des fehlerhaften Prozesses: 0x2ce4
Startzeit der fehlerhaften Anwendung: 0xavc.exe0
Pfad der fehlerhaften Anwendung: avc.exe1
Pfad des fehlerhaften Moduls: avc.exe2
Berichtskennung: avc.exe3
System errors:
=============
Error: (09/24/2013 03:55:34 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (09/24/2013 03:55:33 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (09/24/2013 03:50:56 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (09/24/2013 03:05:44 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (09/24/2013 02:20:43 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (09/24/2013 01:35:49 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (09/24/2013 00:50:43 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (09/24/2013 00:26:44 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (09/24/2013 00:05:13 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (09/24/2013 00:05:12 PM) (Source: Microsoft-Windows-DNS-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Microsoft Office Sessions:
=========================
Error: (09/24/2013 03:39:59 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.1756726001ceb8ed81f678f23059C:\Windows\Explorer.EXE
Error: (09/24/2013 00:04:22 PM) (Source: Application Error)(User: )
Description: Action.exe1.14.0.0517ab3faAction.exe1.14.0.0517ab3fac00000050003657935d001ceb9088279fe0bC:\Program Files (x86)\Mirillis\Action!\Action.exeC:\Program Files (x86)\Mirillis\Action!\Action.exeaeebd181-2500-11e3-86d4-5404a668ff84
Error: (09/24/2013 10:26:13 AM) (Source: Application Error)(User: )
Description: nvstreamsvc.exe1.5.28.0521bb236action_x64.dll0.0.0.0517abaeec00000050000000000006c8511f001ceb8ffbace71f7C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Program Files (x86)\Mirillis\Action!\action_x64.dllf8f80685-24f2-11e3-86d4-5404a668ff84
Error: (09/24/2013 10:24:03 AM) (Source: Application Error)(User: )
Description: avc.exe1.0.7.121950e79abbavcodec.dll1.0.2.126250e79a83c0000005000d922a164801ceb8ff5741219dC:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avc.exeC:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avcodec.dllab130129-24f2-11e3-86d4-5404a668ff84
Error: (09/24/2013 10:23:01 AM) (Source: Application Error)(User: )
Description: avc.exe1.0.7.121950e79abbavcodec.dll1.0.2.126250e79a83c0000005000d922ac8c01ceb8fee20afd70C:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avc.exeC:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avcodec.dll85ff097d-24f2-11e3-86d4-5404a668ff84
Error: (09/24/2013 08:17:09 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/24/2013 04:39:15 AM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcFailed to kill already running streamer. [0]
Error: (09/24/2013 04:37:18 AM) (Source: Application Error)(User: )
Description: avc.exe1.0.7.121950e79abbMSVCR90.dll9.0.30729.61614dace5b9c00000050002465148f001ceb8ce59b527beC:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avc.exeC:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.dll3aa77fac-24c2-11e3-a64f-5404a668ff84
Error: (09/24/2013 04:32:36 AM) (Source: Application Error)(User: )
Description: avc.exe1.0.7.121950e79abbavcodec.dll1.0.2.126250e79a83c0000005000d922a1e5401ceb8cce3013e01C:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avc.exeC:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avcodec.dll92918a8c-24c1-11e3-a64f-5404a668ff84
Error: (09/24/2013 04:22:04 AM) (Source: Application Error)(User: )
Description: avc.exe1.0.7.121950e79abbavcodec.dll1.0.2.126250e79a83c0000005000d922a2ce401ceb8cc47b90f60C:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avc.exeC:\Program Files (x86)\Xilisoft\Video Converter Ultimate\avcodec.dll19f44034-24c0-11e3-a64f-5404a668ff84
==================== Memory info ===========================
Percentage of memory in use: 74%
Total physical RAM: 4063.15 MB
Available physical RAM: 1025.45 MB
Total Pagefile: 8124.49 MB
Available Pagefile: 3466.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.54 GB) (Free:45.76 GB) NTFS
Drive i: (CANON_DC) (Removable) (Total:7.4 GB) (Free:3.26 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 4F9157C5)
Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)
==================== End Of Log ============================
|
|
24.09.2013, 19:10
| #5 | |
| /// the machine /// TB-Ausbilder | Mobilfunk-MMS erhalten per Mail...Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.09.2013, 20:08
| #6 |
| | Mobilfunk-MMS erhalten per Mail... Um es nur kurz zu erwähnen ... Ich hab bevor ich die Antiviersoftware abgeschaltet hab die Internetverbindung gekappt... nur falls es nicht richtig sein sollte gleich mal anmerken. Hier nun der Log: Code:
ATTFilter ComboFix 13-09-24.02 - PC 24.09.2013 20:42:05.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.4063.2015 [GMT 2:00]
ausgeführt von:: c:\users\PC\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\programdata\Tages
c:\programdata\Tages\100664250\Serial.txt
c:\programdata\Tages\Priv.xey
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\51e47d01b24b67.93986216.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\background.html
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\content.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\lsdb.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\manifest.json
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\sqlite.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\elcp6hth@oee-oeua.net
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\elcp6hth@oee-oeua.net\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\elcp6hth@oee-oeua.net\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\elcp6hth@oee-oeua.net\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\elcp6hth@oee-oeua.net\install.rdf
c:\windows\capsys184523.log
c:\windows\IsUn0407.exe
c:\windows\SysWow64\~GLH00c3.TMP
c:\windows\SysWow64\DEBUG.log
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\local.txt
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-08-24 bis 2013-09-24 ))))))))))))))))))))))))))))))
.
.
2013-09-24 18:52 . 2013-09-24 18:52 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-09-24 18:52 . 2013-09-24 18:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-24 14:14 . 2013-09-24 14:14 -------- d-----w- C:\FRST
2013-09-24 11:06 . 2013-09-24 11:06 -------- d-----w- c:\users\PC\AppData\Roaming\MAGIX
2013-09-24 11:00 . 2013-09-24 11:01 -------- d-----w- c:\program files (x86)\MAGIX
2013-09-24 11:00 . 2013-09-24 11:07 -------- d-----w- c:\programdata\MAGIX
2013-09-24 09:29 . 2013-09-24 09:29 -------- d-----w- c:\users\PC\AppData\Roaming\Mirillis
2013-09-24 09:26 . 2013-09-24 09:29 -------- d-----w- c:\users\PC\AppData\Local\Mirillis
2013-09-23 14:36 . 2013-09-23 14:58 -------- d-----w- c:\users\PC\AppData\Local\PAYDAY 2
2013-09-23 14:36 . 2013-09-23 14:36 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-09-22 16:28 . 2013-09-22 16:28 -------- d-----w- C:\NVIDIA
2013-09-22 03:13 . 2013-07-31 14:17 17833472 ----a-w- c:\windows\system32\mshtml.dll
2013-09-22 03:13 . 2013-07-31 13:42 10926080 ----a-w- c:\windows\system32\ieframe.dll
2013-09-22 03:00 . 2013-07-06 06:03 1910208 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-18 07:26 . 2013-06-16 12:38 31520 ----a-w- c:\windows\system32\nvhdap64.dll
2013-09-18 07:26 . 2013-06-16 12:38 196384 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2013-09-18 07:26 . 2013-09-12 08:58 22102304 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-09-18 07:26 . 2013-08-18 21:02 1884448 ----a-w- c:\windows\system32\nvdispco6432680.dll
2013-09-18 07:26 . 2013-08-18 21:02 1511712 ----a-w- c:\windows\system32\nvdispgenco6432680.dll
2013-09-18 06:59 . 2013-08-20 13:33 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2013-09-18 06:59 . 2013-08-20 13:32 28448 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2013-09-16 17:52 . 2013-09-16 17:53 -------- d-----w- c:\users\PC\AppData\Roaming\MTE
2013-09-16 16:54 . 2013-09-24 13:47 -------- d-----w- c:\program files (x86)\Minecraft Texturepack Editor
2013-09-13 14:02 . 2013-09-20 11:02 3723656 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-09-11 23:17 . 2013-09-11 23:17 571168 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-09-09 13:18 . 2013-09-09 13:19 -------- d-----w- c:\program files (x86)\Overwolf
2013-09-09 13:18 . 2013-09-09 13:18 -------- d-----w- c:\program files (x86)\Common Files\Overwolf
2013-09-09 13:16 . 2013-09-12 06:32 -------- d-----w- c:\users\PC\AppData\Local\Overwolf
2013-09-08 21:29 . 2013-09-08 21:29 -------- d-----w- c:\users\PC\AppData\Roaming\PathToSuccess_DE
2013-09-02 19:50 . 2013-09-03 16:13 -------- d-----w- c:\users\PC\AppData\Local\Game Dev Tycoon - Steam
2013-09-02 19:41 . 2013-09-02 19:41 -------- d-----w- c:\programdata\Package Cache
2013-09-02 11:34 . 2013-09-02 11:34 -------- d-----w- c:\program files (x86)\Nemex
2013-08-28 15:52 . 2013-08-28 15:52 -------- d-----w- c:\program files (x86)\BlueStacks
2013-08-28 15:51 . 2013-08-28 15:53 -------- d-----w- c:\programdata\BlueStacks
2013-08-28 10:20 . 2013-08-28 10:20 -------- d-----w- c:\users\PC\AppData\Roaming\Empty Clip Studios
2013-08-26 09:45 . 2013-08-26 09:45 -------- d-----w- c:\users\PC\AppData\Roaming\Visan
2013-08-26 09:42 . 2013-09-15 22:50 -------- d-----w- c:\programdata\HP Photo Creations
2013-08-26 09:42 . 2013-08-26 09:45 -------- d-----w- c:\programdata\Visan
2013-08-26 08:26 . 2013-08-26 08:27 -------- d-----w- c:\users\PC\AppData\Local\gtk-2.0
2013-08-26 08:17 . 2013-08-26 08:17 -------- d-----w- c:\users\PC\.thumbnails
2013-08-26 08:15 . 2013-09-12 21:58 -------- d-----w- c:\users\PC\.gimp-2.8
2013-08-26 08:15 . 2013-08-26 08:15 -------- d-----w- c:\users\PC\AppData\Local\gegl-0.2
2013-08-26 08:14 . 2013-08-26 08:14 -------- d-----w- c:\program files\GIMP 2
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-20 11:02 . 2012-10-18 09:30 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-20 11:02 . 2012-10-18 09:30 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-12 08:58 . 2013-06-27 10:11 2630304 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-09-12 08:58 . 2013-06-27 10:11 12947360 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-09-12 08:58 . 2013-05-19 22:29 15901448 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-09-12 08:58 . 2013-05-17 16:56 2986672 ----a-w- c:\windows\system32\nvapi64.dll
2013-09-12 08:58 . 2013-05-17 16:56 1412832 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-09-12 07:25 . 2013-05-17 17:02 6599968 ----a-w- c:\windows\system32\nvcpl.dll
2013-09-12 07:25 . 2013-05-17 17:02 3452192 ----a-w- c:\windows\system32\nvsvc64.dll
2013-09-12 07:25 . 2013-05-17 17:02 920864 ----a-w- c:\windows\system32\nvvsvc.exe
2013-09-12 07:25 . 2013-05-17 17:02 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-09-12 07:25 . 2013-05-17 17:02 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2013-09-12 07:25 . 2013-05-17 17:02 219424 ----a-w- c:\windows\system32\nvmctray.dll
2013-09-11 22:06 . 2013-05-17 17:02 3361114 ----a-w- c:\windows\system32\nvcoproc.bin
2013-09-02 13:22 . 2013-03-28 07:26 105344 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-09-01 15:08 . 2012-10-20 21:07 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-08-22 13:48 . 2013-03-16 22:07 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2013-08-22 13:48 . 2013-03-16 22:07 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2013-08-22 13:48 . 2013-03-16 22:07 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2013-08-22 13:48 . 2013-03-16 22:07 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2013-08-20 13:32 . 2013-07-30 20:40 29984 ----a-w- c:\windows\system32\nvaudcap64v.dll
2013-08-20 10:00 . 2013-05-02 08:18 81112 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-08-20 10:00 . 2013-03-28 07:26 132088 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-08-19 10:45 . 2013-08-19 10:46 312232 ----a-w- c:\windows\system32\javaws.exe
2013-08-19 10:45 . 2013-08-19 10:46 189352 ----a-w- c:\windows\system32\javaw.exe
2013-08-19 10:45 . 2013-08-19 10:46 188840 ----a-w- c:\windows\system32\java.exe
2013-08-19 10:45 . 2013-08-19 10:46 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-08-19 10:45 . 2012-10-18 08:59 972712 ----a-w- c:\windows\system32\deployJava1.dll
2013-08-19 10:45 . 2012-10-18 08:59 1093032 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-08-15 08:33 . 2012-11-29 08:19 281312 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-08-15 08:33 . 2012-10-21 20:22 281312 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-08-15 08:22 . 2012-10-21 20:20 218496 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-08-15 05:12 . 2013-08-15 08:21 2601752 ----a-w- c:\windows\SysWow64\pbsvc_moh.exe
2013-08-04 08:48 . 2013-08-04 08:48 57344 ----a-r- c:\users\PC\AppData\Roaming\Microsoft\Installer\{87441A59-5E64-4096-A170-14EFE67200C3}\ARPPRODUCTICON.exe
2013-08-04 08:46 . 2003-03-18 17:05 106496 ----a-w- c:\windows\SysWow64\ATL71.DLL
2013-08-02 20:55 . 2012-11-29 08:19 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-08-02 07:00 . 2012-11-21 00:58 165232 ---ha-w- c:\users\PC\AppData\Roaming\Microsoft\Virtual PC\VPCKeyboard.dll
2013-08-02 01:48 . 2013-09-22 03:01 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-07-28 17:41 . 2013-07-28 17:41 164352 ----a-w- c:\windows\SysWow64\SpoonUninstall.exe
2013-07-02 19:33 . 2013-07-02 19:33 564824 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-09-27 07:39 369152 --sh--w- c:\windows\SysWOW64\avisynth.dll
2005-07-14 10:31 32256 --sh--w- c:\windows\SysWOW64\AVSredirect.dll
2004-01-24 22:00 70656 --sh--w- c:\windows\SysWOW64\i420vfw.dll
2004-01-24 22:00 70656 --sh--w- c:\windows\SysWOW64\yv12vfw.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-07-13 02:43 1724616 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-07-13 02:43 1724616 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-07-13 02:43 1724616 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-09-21 1814440]
"OscarEditor"="c:\program files (x86)\MOUSE Editor\MouseEditor.exe" [2012-08-16 3333632]
"AdBuck.exe"="c:\program files (x86)\AdBuck\AdBuck.exe" [2013-08-06 5991424]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-08-20 347192]
"ASUS ShellProcess Execute"="c:\program files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe" [2010-09-28 252544]
"Logitech G35"="c:\program files (x86)\Logitech\G35\G35.exe" [2010-10-05 1811800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
" Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2013-04-04 1127496]
.
c:\users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2013-3-28 0]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
"Philips Device Listener"="c:\program files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe"
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"BlueStacks Agent"=c:\program files (x86)\BlueStacks\HD-Agent.exe
"Nikon Message Center 2"=c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MAGIX StartUp Analyze Service;MAGIX StartUp Analyze Service;c:\program files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe;c:\program files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe [x]
R2 SystemStoreService;System Store;c:\program files (x86)\SoftwareUpdater\SystemStore.exe -displayname System Store -servicename SystemStoreService;c:\program files (x86)\SoftwareUpdater\SystemStore.exe -displayname System Store -servicename SystemStoreService [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 BthAvrcp;Bluetooth-AVRCP-Profil;c:\windows\system32\DRIVERS\BthAvrcp.sys;c:\windows\SYSNATIVE\DRIVERS\BthAvrcp.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 PlantronicsGC;PLTGC Interface;c:\windows\system32\drivers\PLTGC.sys;c:\windows\SYSNATIVE\drivers\PLTGC.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
R3 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
R4 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R4 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
R4 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
S0 AiChargerPlus;ASUS Charger Plus Driver;c:\windows\system32\DRIVERS\AiChargerPlus.sys;c:\windows\SYSNATIVE\DRIVERS\AiChargerPlus.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys;c:\windows\SYSNATIVE\DRIVERS\avfwot.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 HssDRV6;Hotspot Shield Routing Driver 6;c:\windows\system32\DRIVERS\hssdrv6.sys;c:\windows\SYSNATIVE\DRIVERS\hssdrv6.sys [x]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [x]
S2 AntiVirMailService;Avira Email Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [x]
S2 AsusFanControlService;AsusFanControlService;c:\program files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe;c:\program files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe [x]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NVIDIA Performance Driver Service;NVIDIA Performance Driver Service;c:\program files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe;c:\program files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys;c:\windows\SYSNATIVE\DRIVERS\avfwim.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfDHP2amd64.sys [x]
S3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfSBVMamd64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - CPUZ132
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-18 11:02]
.
2013-03-11 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3322853412-3098556889-925944958-1000Core.job
- c:\users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-07 13:43]
.
2013-03-11 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3322853412-3098556889-925944958-1000UA.job
- c:\users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-07 13:43]
.
2013-09-22 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2011-07-25 09:11]
.
2013-09-24 c:\windows\Tasks\PCCT - MAGIX AG.job
- c:\program files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe [2010-11-08 16:08]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-07-13 02:37 2328776 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-07-13 02:37 2328776 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-07-13 02:37 2328776 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-02 11545192]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.babylon.com/?affID=112250&babsrc=HP_ss&mntrId=e4a53f6a00000000000000ff6e30f268
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~1\MICROS~3\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~3\Office15\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
Trusted Zone: vizzed.com\www
TCP: DhcpNameServer = 83.169.184.33 83.169.184.97
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} -
FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL -
FF - prefs.js: browser.startup.homepage -
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-08-10 03:20; foxyproxy@eric.h.jung; c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\foxyproxy@eric.h.jung
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - (no file)
URLSearchHooks-{5786d022-540e-4699-b350-b4be0ae94b79} - (no file)
BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - (no file)
Toolbar-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
Toolbar-{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM_Wow6432Node-ActiveSetup-{8A69D345-D564-463c-AFF1-A69D9E530F96} - c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file)
AddRemove-Clonk Planet - c:\windows\system32\GKSUI18.EXE
AddRemove-Jardinains! - c:\windows\system32\SpoonUninstall.exe
AddRemove-NVIDIA StereoUSB Driver - c:\program files (x86)\InstallShield Installation Information\{714B9C6C-70FC-4750-98E2-61520B906C45}\setup.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_moh.exe
AddRemove-RHVja1RhbGVzUmVtYXN0ZXJlZA==_is1 - c:\program files (x86)\DuckTales Remastered\unins000.exe
AddRemove-{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1 - c:\program files (x86)\WarThunder\unins000.exe
AddRemove-Bitcoin - c:\program files (x86)\Bitcoin\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-24 20:55:17
ComboFix-quarantined-files.txt 2013-09-24 18:55
.
Vor Suchlauf: 19 Verzeichnis(se), 74.536.230.912 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 75.799.724.032 Bytes frei
.
- - End Of File - - EB94331923C350C6827C309F8DD1B3C0
Mit freundlichen Grüßen Brille65 |
|
25.09.2013, 11:46
| #7 |
| /// the machine /// TB-Ausbilder | Mobilfunk-MMS erhalten per Mail... Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.09.2013, 16:43
| #8 |
| | Mobilfunk-MMS erhalten per Mail... Hier ist schonmal der Log von Malwarebytes ... Die einzigen 2 Datein die er fand waren (Glaub ich) harmlos weil die habe ich gebraucht für Fallout 1 um es zum starten zu bringen soweit ich weiß ... (nur so als Anmerkung) Ich starte jetzt denn PC Neu und lass die anderen Programme laufen. Code:
ATTFilter Malwarebytes Anti-Malware (PRO) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.25.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 PC :: PC-PC [Administrator] Schutz: Aktiviert 25.09.2013 14:19:07 mbam-log-2013-09-25 (14-19-07).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 527274 Laufzeit: 1 Stunde(n), 52 Minute(n), 32 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Program Files (x86)\Steam\SteamApps\common\Fallout Tactics\w7ddpatcher.exe (HackTool.Patch) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\PC\Desktop\Ordner mit Krimskrams\w7ddpatcher-withsource.zip (HackTool.Patch) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende)  Hier der Rest :AdwCleaner: Code:
ATTFilter # AdwCleaner v3.005 - Bericht erstellt am 25/09/2013 um 17:20:27
# Updated 22/09/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : PC - PC-PC
# Gestartet von : C:\Users\PC\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : SystemStoreService
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\StarApp
Ordner Gelöscht : C:\ProgramData\saffee. save
Ordner Gelöscht : C:\Program Files (x86)\SafeSaver
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Users\PC\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\PC\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\PC\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\SimplyTech
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\SweetIM
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\DVDVideoSoftTB_DE
Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\afurladvisor@anchorfree.com
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_nonsearch_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_nonsearch_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_f5d3e0aa
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_free-youtube-uploader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_free-youtube-uploader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_4free-video-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_4free-video-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_alternatereader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_alternatereader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_audio-video-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_audio-video-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_foxit-reader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_foxit-reader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_voipcheap_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_voipcheap_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{457EF9F0-0A7C-4302-B47B-C207A8DE8598}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D18AE0D-E914-4B0E-A3B3-D9B417CF0A42}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BCE9A549-3901-451C-AF72-6C802BBEFD5C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\StartSearch
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB_DE
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\Freeze.com
Schlüssel Gelöscht : HKLM\Software\SP Global
Schlüssel Gelöscht : HKLM\Software\SProtector
Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB_DE
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\systweak
***** [ Browser ] *****
-\\ Internet Explorer v9.0.8112.16506
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v22.0 (de)
[ Datei : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\prefs.js ]
Zeile gelöscht : user_pref("aol_toolbar.default.homepage.check", false);
Zeile gelöscht : user_pref("aol_toolbar.default.search.check", false);
Zeile gelöscht : user_pref("extensions.51e47d01b2622.scode", "new function(){var a=this;a.domain_storage=\"hxxp://xls.searchfun.in\";a.prefix=\"if72ru4ruh7fewui\";a.conf={\"1\":{\"0\":1,\"1\":21600,\"2\":0,\"3\":0,\"4[...]
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Zeile gelöscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.enable", "");
*************************
AdwCleaner[R0].txt - [10858 octets] - [25/09/2013 17:14:49]
AdwCleaner[S0].txt - [10345 octets] - [25/09/2013 17:20:27]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10406 octets] ##########
Code:
ATTFilter en~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Professional x64
Ran by PC on 25.09.2013 at 17:32:15,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3322853412-3098556889-925944958-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\hotspotshield
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\hotspot shield"
~~~ FireFox
Successfully deleted: [Folder] C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\zvkfjlpv.default\extensions\staged
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.09.2013 at 17:37:18,00
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2013
Ran by PC (administrator) on PC-PC on 25-09-2013 17:38:09
Running from C:\Users\PC\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Media Revolution GmbH) C:\Program Files (x86)\Adbuck\AdBuck.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
() C:\Program Files (x86)\Opera Next\17.0.1241.18\opera_crashreporter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Piotr Pawlowski) C:\Program Files (x86)\foobar2000\foobar2000.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1814440 2013-09-21] (Valve Corporation)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [3333632 2012-08-16] ()
HKCU\...\Run: [AdBuck.exe] - C:\Program Files (x86)\AdBuck\AdBuck.exe [5991424 2013-08-06] (Media Revolution GmbH)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS ShellProcess Execute] - C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-09-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Logitech G35] - C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech(c))
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44BB45A48AB6CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll No File
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter-x32: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL No File
Tcpip\Parameters: [DhcpNameServer] 83.169.184.33 83.169.184.97
FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: Google
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Keyword.URL: user_pref("keyword.URL", "");
FF Homepage: user_pref("browser.startup.homepage", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: @vizzed.com/VizzedRGR - C:\Program Files (x86)\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll (Vizzed.com)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\PC\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Basic - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\foxyproxy@eric.h.jung
FF Extension: U2bview Firefox Add-on - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\noreply@u2bviews.com
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Drive) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Bitcoin Ticker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkjcngcenokaadmhbmcokmkanjibmmje\0.3.2_0
CHR Extension: (Bitcoin Mining Monitor) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkonhfangjkibemiedpiahgedlffdma\0.5_0
CHR Extension: (Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0
CHR Extension: (YouTube Unblocker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe [1470592 2012-03-21] (ASUSTeK Computer Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-26] ()
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
S2 MAGIX StartUp Analyze Service; C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe [186368 2010-11-04] (MAGIX AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [6237800 2010-04-30] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-02] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-02-09] ()
R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-02-13] (Avira GmbH)
R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-02-13] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-08-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-21] (DT Soft Ltd)
S3 FETNDIS; C:\Windows\System32\DRIVERS\fet6x64.sys [47872 2009-06-10] (VIA Technologies, Inc. )
R3 GEARAspiWDM; C:\Windows\SysWow64\Drivers\GEARAspiWDM.sys [15664 2012-04-05] (GEAR Software Inc.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [41704 2012-10-10] (AnchorFree Inc.)
R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-02-09] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-07-02] (Duplex Secure Ltd.)
S2 tandpl; C:\Windows\SysWow64\drivers\tandpl.sys [4736 2003-04-19] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294232 2013-02-15] (Microsoft Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
U3 ap77p40p; C:\Windows\System32\Drivers\ap77p40p.sys [0 ] (Intel Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MSICDSetup; \??\D:\CDriver64.sys [x]
S2 tandpl; System32\drivers\tandpl.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-25 17:37 - 2013-09-25 17:37 - 00001179 _____ C:\Users\PC\Desktop\JRT.txt
2013-09-25 17:32 - 2013-09-25 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 17:30 - 2013-09-25 17:30 - 01030038 _____ (Thisisu) C:\Users\PC\Desktop\JRT.exe
2013-09-25 17:26 - 2013-09-25 17:26 - 00010491 _____ C:\Users\PC\Desktop\AdwCleaner[S0].txt
2013-09-25 17:11 - 2013-09-25 17:20 - 00000000 ____D C:\AdwCleaner
2013-09-25 16:20 - 2013-09-25 16:20 - 01042066 _____ C:\Users\PC\Desktop\adwcleaner.exe
2013-09-25 15:21 - 2013-09-25 15:22 - 222141776 _____ (NVIDIA Corporation) C:\Users\PC\Desktop\314.22-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-09-25 14:17 - 2013-09-25 14:17 - 97729025 _____ C:\Windows\SysWOW64\깭㤘
2013-09-24 21:34 - 2013-09-24 21:34 - 00000020 _____ C:\Windows\capsys184523.log
2013-09-24 20:55 - 2013-09-24 20:55 - 00034317 _____ C:\ComboFix.txt
2013-09-24 20:40 - 2013-09-24 20:55 - 00000000 ____D C:\Qoobox
2013-09-24 20:40 - 2013-09-24 20:55 - 00000000 ____D C:\ComboFix
2013-09-24 20:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-24 20:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-24 20:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-24 20:39 - 2013-09-24 20:53 - 00000000 ____D C:\Windows\erdnt
2013-09-24 20:35 - 2013-09-24 20:35 - 05130004 ____R (Swearware) C:\Users\PC\Desktop\ComboFix.exe
2013-09-24 16:16 - 2013-09-24 16:18 - 00048873 _____ C:\Users\PC\Desktop\Addition.txt
2013-09-24 16:14 - 2013-09-24 16:14 - 00000000 ____D C:\FRST
2013-09-24 16:13 - 2013-09-24 16:13 - 01955802 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2013-09-24 15:22 - 2013-09-24 15:22 - 00000378 _____ C:\Users\PC\Desktop\Ereignisse (2).txt
2013-09-24 15:14 - 2013-09-24 15:14 - 00001214 _____ C:\Users\PC\Desktop\Ereignisse (1).txt
2013-09-24 15:09 - 2013-09-24 15:09 - 00001536 _____ C:\Users\PC\Desktop\Ereignisse.txt
2013-09-24 14:17 - 2013-09-24 20:16 - 97540783 _____ C:\Windows\SysWOW64\덼A
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\Documents\MAGIX_MxTray
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\AppData\Roaming\MAGIX
2013-09-24 13:02 - 2013-09-25 17:27 - 00000440 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job
2013-09-24 13:02 - 2013-09-24 13:02 - 00002812 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\OnDemandDump
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\CrashLog
2013-09-24 13:00 - 2013-09-24 13:07 - 00000000 ____D C:\ProgramData\MAGIX
2013-09-24 13:00 - 2013-09-24 13:01 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-09-24 12:56 - 2013-09-24 12:56 - 41085024 _____ (MAGIX AG) C:\Users\PC\Desktop\setup_pc_check_tuning.exe
2013-09-24 11:29 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\Mirillis
2013-09-24 11:28 - 2013-09-24 11:28 - 00001995 _____ C:\Users\Public\Desktop\Action!.lnk
2013-09-24 11:26 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Local\Mirillis
2013-09-24 10:50 - 2013-09-24 10:50 - 35017373 _____ C:\Users\PC\Desktop\Mirillis-Action-1.16.2.0_PlusCrack.com.rar
2013-09-23 16:36 - 2013-09-23 16:58 - 00000000 ____D C:\Users\PC\AppData\Local\PAYDAY 2
2013-09-23 16:36 - 2013-09-23 16:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-23 16:21 - 2013-09-24 04:21 - 98840431 _____ C:\Windows\SysWOW64\簾
2013-09-23 14:26 - 2013-09-23 14:26 - 98646441 _____ C:\Windows\SysWOW64\డ柦d
2013-09-22 21:07 - 2013-09-22 21:07 - 98597466 _____ C:\Windows\SysWOW64\侽
2013-09-22 18:30 - 2013-09-12 10:58 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-22 18:30 - 2013-09-12 10:58 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-22 05:14 - 2013-09-22 05:19 - 00000000 ____D C:\Windows\system32\MRT
2013-09-22 05:14 - 2013-07-31 15:29 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-22 05:14 - 2013-07-31 15:20 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-22 05:14 - 2013-07-31 15:19 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-22 05:14 - 2013-07-31 15:18 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-22 05:14 - 2013-07-31 15:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-22 05:14 - 2013-07-31 15:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-22 05:14 - 2013-07-31 15:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-22 05:14 - 2013-07-31 15:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-22 05:14 - 2013-07-31 15:13 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-22 05:14 - 2013-07-31 15:11 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-22 05:14 - 2013-07-31 15:11 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 05:14 - 2013-07-31 15:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-22 05:14 - 2013-07-31 15:08 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-22 05:14 - 2013-07-31 15:05 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-22 05:14 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-22 05:14 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-22 05:14 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 05:14 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-22 05:14 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-22 05:14 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-22 05:14 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-22 05:14 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-22 05:14 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-22 05:14 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-22 05:14 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-22 05:14 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-22 05:14 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-22 05:14 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-22 05:14 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-22 05:13 - 2013-07-31 16:17 - 17833472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-22 05:13 - 2013-07-31 15:42 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-22 05:13 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-22 05:01 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-22 05:01 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-22 05:01 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-22 05:01 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-22 05:01 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-22 05:01 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-22 05:01 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-22 05:01 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-22 05:01 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-22 05:01 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-22 05:01 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-22 05:01 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-22 05:01 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-22 05:01 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-22 05:01 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-22 05:01 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-22 05:01 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-22 05:01 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-22 05:01 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-22 05:01 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-22 05:01 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-22 05:01 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-22 05:01 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-22 05:01 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-22 05:01 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-09-22 05:01 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-09-22 05:01 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-09-22 05:01 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-09-22 05:01 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-09-22 05:01 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-09-22 05:01 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-09-22 05:01 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-09-22 05:01 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-22 05:00 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-21 14:17 - 2013-09-21 20:17 - 98547399 _____ C:\Windows\SysWOW64\죏颧[
2013-09-20 19:25 - 2013-09-20 21:24 - 98498750 _____ C:\Windows\SysWOW64\X
2013-09-20 15:26 - 2013-09-20 15:26 - 00189683 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_16.853042.dmp
2013-09-20 15:26 - 2013-09-20 15:26 - 00183059 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_03.853298.dmp
2013-09-20 13:34 - 2013-09-20 13:35 - 00675988 _____ C:\Users\PC\Desktop\Minecraft.exe
2013-09-19 23:42 - 2013-09-19 23:42 - 00189187 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-19 23_42_20.036083.dmp
2013-09-19 21:14 - 2013-09-19 21:14 - 03684312 _____ C:\Users\PC\Desktop\rgnlauncher0.9.6.exe
2013-09-19 20:30 - 2013-09-19 20:30 - 00000000 ____D C:\Users\PC\Documents\Westcoast Launcher
2013-09-19 13:38 - 2013-09-20 01:51 - 98428185 _____ C:\Windows\SysWOW64\⓻[
2013-09-18 11:04 - 2013-09-18 11:04 - 00184959 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-18 11_04_09.325110.dmp
2013-09-18 09:26 - 2013-09-12 10:58 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-18 09:26 - 2013-09-12 10:58 - 00022814 _____ C:\Windows\system32\nvinfo.pb
2013-09-18 09:26 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll
2013-09-18 09:26 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll
2013-09-18 09:26 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-09-18 09:26 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-09-18 09:17 - 2013-09-21 04:19 - 00003350 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000
2013-09-18 08:59 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-09-18 08:59 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-17 14:02 - 2013-09-18 00:00 - 98071447 _____ C:\Windows\SysWOW64\ⱐ㐿
2013-09-16 19:52 - 2013-09-16 19:53 - 00000000 ____D C:\Users\PC\AppData\Roaming\MTE
2013-09-16 18:54 - 2013-09-24 15:47 - 00000000 ____D C:\Program Files (x86)\Minecraft Texturepack Editor
2013-09-16 18:54 - 2013-09-16 18:54 - 00001076 _____ C:\Users\UpdatusUser\Desktop\Minecraft Texturepack Editor.lnk
2013-09-15 00:45 - 2013-09-15 00:45 - 00215544 _____ C:\Users\PC\Youtube Kacke_Peter Lustig Collab.mp3.sfk
2013-09-14 13:55 - 2013-09-14 21:55 - 97600188 _____ C:\Windows\SysWOW64\씴�V
2013-09-13 16:02 - 2013-09-20 13:02 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-13 14:51 - 2013-09-13 20:51 - 97503480 _____ C:\Windows\SysWOW64\俭㜀”
2013-09-13 00:19 - 2013-09-13 00:19 - 97412816 _____ C:\Windows\SysWOW64\䩾„
2013-09-12 23:57 - 2013-09-12 23:57 - 00003246 _____ C:\Users\PC\AppData\Local\recently-used.xbel
2013-09-12 15:55 - 2013-09-12 15:55 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.GroupEventArgs.resizer_settings
2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-11 19:30 - 2013-09-11 21:29 - 97171315 _____ C:\Windows\SysWOW64\ꂘc
2013-09-11 13:30 - 2013-09-11 13:30 - 97124766 _____ C:\Windows\SysWOW64\칍㺲—
2013-09-11 06:00 - 2013-09-11 06:00 - 00000000 ____D C:\Users\PC\Documents\ANNO 1404 Venedig
2013-09-09 15:19 - 2013-09-09 15:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-09 15:18 - 2013-09-09 15:19 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-09 15:16 - 2013-09-12 08:32 - 00000000 ____D C:\Users\PC\AppData\Local\Overwolf
2013-09-09 14:43 - 2013-09-10 00:42 - 96851172 _____ C:\Windows\SysWOW64\�ゆ‡
2013-09-09 10:11 - 2013-09-09 10:11 - 00000000 ____D C:\Users\PC\Documents\Alpha Protocol
2013-09-09 01:17 - 2013-09-09 01:18 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-09 01_17_18.095630.dmp
2013-09-08 23:34 - 2013-09-18 08:43 - 00000000 ____D C:\Users\PC\Desktop\redsn0w_win_0.9.15b3
2013-09-08 23:29 - 2013-09-08 23:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\PathToSuccess_DE
2013-09-08 22:42 - 2013-09-09 08:42 - 96601965 _____ C:\Windows\SysWOW64\퉼浘Š
2013-09-08 01:53 - 2013-09-08 01:53 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-08 01_53_11.539379.dmp
2013-09-07 14:42 - 2013-09-08 10:42 - 96533415 _____ C:\Windows\SysWOW64\╀’
2013-09-07 12:58 - 2013-09-07 12:58 - 00000000 ____D C:\Users\PC\Desktop\Anno Trainer
2013-09-07 06:02 - 2013-09-07 06:02 - 00000000 ____D C:\Users\PC\Documents\Anno 1404
2013-09-06 16:50 - 2013-09-06 16:50 - 00184656 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_50_15.882892.dmp
2013-09-06 16:11 - 2013-09-06 16:11 - 00183400 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_11_18.257187.dmp
2013-09-06 00:43 - 2013-09-06 00:43 - 00002069 _____ C:\Users\UpdatusUser\Desktop\American Conquest Fight Back.lnk
2013-09-06 00:10 - 2013-09-06 00:10 - 00001926 _____ C:\Users\UpdatusUser\Desktop\American Conquest.lnk
2013-09-05 18:14 - 2013-09-06 00:15 - 96269118 _____ C:\Windows\SysWOW64\谑ᜊ”
2013-09-04 14:11 - 2013-09-04 22:10 - 95956132 _____ C:\Windows\SysWOW64\颧ˆ
2013-09-04 00:04 - 2013-08-28 17:53 - 00001815 _____ C:\Users\PC\Desktop\Apps.lnk
2013-09-03 22:02 - 2013-09-03 22:02 - 00179360 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-03 22_02_10.360328.dmp
2013-09-03 19:11 - 2013-09-03 19:11 - 00018712 _____ C:\Users\PC\Downloads\YouTube-Unblocker-045.crx
2013-09-02 21:50 - 2013-09-03 18:13 - 00000000 ____D C:\Users\PC\AppData\Local\Game Dev Tycoon - Steam
2013-09-02 21:41 - 2013-09-02 21:41 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-02 21:26 - 2013-09-02 21:27 - 00168615 _____ C:\Users\PC\bluuuuuuuuuuuuuuuuuuuuuuuuuubb
2013-09-02 18:32 - 2013-09-02 18:34 - 00132441 _____ C:\Users\PC\ficken
2013-09-02 13:34 - 2013-09-02 13:34 - 00000000 ____D C:\Program Files (x86)\Nemex
2013-09-01 15:41 - 2013-09-01 19:41 - 95199041 _____ C:\Windows\SysWOW64\ꃰ쟁—
2013-08-31 23:58 - 2013-08-31 23:58 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-08-31 23_58_13.220319.dmp
2013-08-31 15:19 - 2013-08-31 21:18 - 95128664 _____ C:\Windows\SysWOW64\✤搴–
2013-08-30 14:52 - 2013-08-30 20:51 - 94985858 _____ C:\Windows\SysWOW64\樵ﱳ’
2013-08-29 18:45 - 2013-08-29 18:45 - 00011264 ___SH C:\Users\PC\Thumbs.db
2013-08-29 15:02 - 2013-08-29 21:02 - 94663095 _____ C:\Windows\SysWOW64\던ꫪ”
2013-08-28 17:52 - 2013-08-28 17:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-08-28 17:51 - 2013-08-28 17:53 - 00000000 ____D C:\ProgramData\BlueStacks
2013-08-28 14:54 - 2013-08-28 22:54 - 101091881 _____ C:\Windows\SysWOW64\說㹬P
2013-08-28 12:20 - 2013-08-28 12:20 - 00000000 ____D C:\Users\PC\AppData\Roaming\Empty Clip Studios
2013-08-27 19:21 - 2013-08-27 21:21 - 100458977 _____ C:\Windows\SysWOW64\崑義‘
2013-08-26 13:40 - 2013-08-26 21:40 - 100279224 _____ C:\Windows\SysWOW64\뜇ꍺ
2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ___RD C:\Users\PC\Documents\HP Photo Creations
2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ____D C:\Users\PC\AppData\Roaming\Visan
2013-08-26 11:42 - 2013-09-22 09:06 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-08-26 11:42 - 2013-09-22 00:55 - 00003336 _____ C:\Windows\System32\Tasks\HP Photo Creations Communicator
2013-08-26 11:42 - 2013-09-16 00:50 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-08-26 11:42 - 2013-08-26 11:45 - 00000000 ____D C:\ProgramData\Visan
2013-08-26 10:26 - 2013-08-26 10:27 - 00000000 ____D C:\Users\PC\AppData\Local\gtk-2.0
2013-08-26 10:17 - 2013-08-26 10:17 - 00000000 ____D C:\Users\PC\.thumbnails
2013-08-26 10:15 - 2013-09-12 23:58 - 00000000 ____D C:\Users\PC\.gimp-2.8
2013-08-26 10:15 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\AppData\Local\gegl-0.2
2013-08-26 10:14 - 2013-08-26 10:14 - 00000000 ____D C:\Program Files\GIMP 2
==================== One Month Modified Files and Folders =======
2013-09-25 17:37 - 2013-09-25 17:37 - 00001179 _____ C:\Users\PC\Desktop\JRT.txt
2013-09-25 17:33 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-25 17:33 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-25 17:32 - 2013-09-25 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 17:30 - 2013-09-25 17:30 - 01030038 _____ (Thisisu) C:\Users\PC\Desktop\JRT.exe
2013-09-25 17:27 - 2013-09-24 13:02 - 00000440 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job
2013-09-25 17:26 - 2013-09-25 17:26 - 00010491 _____ C:\Users\PC\Desktop\AdwCleaner[S0].txt
2013-09-25 17:25 - 2012-10-18 10:18 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-25 17:23 - 2013-05-19 08:40 - 00313522 _____ C:\Windows\PFRO.log
2013-09-25 17:23 - 2013-05-19 08:40 - 00035012 _____ C:\Windows\setupact.log
2013-09-25 17:23 - 2013-05-17 19:02 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-25 17:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-25 17:21 - 2013-05-19 08:43 - 01640745 _____ C:\Windows\WindowsUpdate.log
2013-09-25 17:20 - 2013-09-25 17:11 - 00000000 ____D C:\AdwCleaner
2013-09-25 17:02 - 2012-12-14 06:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-25 16:22 - 2012-10-19 07:08 - 00000000 ____D C:\Users\PC\Desktop\Ordner mit Krimskrams
2013-09-25 16:20 - 2013-09-25 16:20 - 01042066 _____ C:\Users\PC\Desktop\adwcleaner.exe
2013-09-25 16:00 - 2013-08-07 11:41 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.PartitionProvider.resizer_settings
2013-09-25 15:57 - 2012-10-18 10:21 - 00000000 ____D C:\Users\PC\AppData\Roaming\TS3Client
2013-09-25 15:41 - 2012-10-18 10:16 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2013-09-25 15:22 - 2013-09-25 15:21 - 222141776 _____ (NVIDIA Corporation) C:\Users\PC\Desktop\314.22-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-09-25 15:14 - 2013-07-15 12:38 - 03511296 ___SH C:\Users\PC\Desktop\Thumbs.db
2013-09-25 15:10 - 2012-10-18 10:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\foobar2000
2013-09-25 14:17 - 2013-09-25 14:17 - 97729025 _____ C:\Windows\SysWOW64\깭㤘
2013-09-25 12:22 - 2012-10-31 20:30 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-25 00:22 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC
2013-09-24 22:42 - 2012-10-21 15:58 - 00000000 ____D C:\Users\PC\Documents\Euro Truck Simulator 2
2013-09-24 21:34 - 2013-09-24 21:34 - 00000020 _____ C:\Windows\capsys184523.log
2013-09-24 20:56 - 2012-10-19 07:42 - 00000000 ____D C:\Users\PC\AppData\Local\Apps\2.0
2013-09-24 20:55 - 2013-09-24 20:55 - 00034317 _____ C:\ComboFix.txt
2013-09-24 20:55 - 2013-09-24 20:40 - 00000000 ____D C:\Qoobox
2013-09-24 20:55 - 2013-09-24 20:40 - 00000000 ____D C:\ComboFix
2013-09-24 20:53 - 2013-09-24 20:39 - 00000000 ____D C:\Windows\erdnt
2013-09-24 20:52 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-24 20:35 - 2013-09-24 20:35 - 05130004 ____R (Swearware) C:\Users\PC\Desktop\ComboFix.exe
2013-09-24 20:16 - 2013-09-24 14:17 - 97540783 _____ C:\Windows\SysWOW64\덼A
2013-09-24 16:18 - 2013-09-24 16:16 - 00048873 _____ C:\Users\PC\Desktop\Addition.txt
2013-09-24 16:14 - 2013-09-24 16:14 - 00000000 ____D C:\FRST
2013-09-24 16:13 - 2013-09-24 16:13 - 01955802 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2013-09-24 15:53 - 2012-10-23 20:32 - 00000000 ____D C:\ProgramData\Sony
2013-09-24 15:51 - 2013-06-25 16:29 - 00000000 ____D C:\Wanadoo Edition
2013-09-24 15:51 - 2012-12-03 12:08 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2013-09-24 15:47 - 2013-09-16 18:54 - 00000000 ____D C:\Program Files (x86)\Minecraft Texturepack Editor
2013-09-24 15:22 - 2013-09-24 15:22 - 00000378 _____ C:\Users\PC\Desktop\Ereignisse (2).txt
2013-09-24 15:14 - 2013-09-24 15:14 - 00001214 _____ C:\Users\PC\Desktop\Ereignisse (1).txt
2013-09-24 15:09 - 2013-09-24 15:09 - 00001536 _____ C:\Users\PC\Desktop\Ereignisse.txt
2013-09-24 13:07 - 2013-09-24 13:00 - 00000000 ____D C:\ProgramData\MAGIX
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\Documents\MAGIX_MxTray
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\AppData\Roaming\MAGIX
2013-09-24 13:02 - 2013-09-24 13:02 - 00002812 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\OnDemandDump
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\CrashLog
2013-09-24 13:01 - 2013-09-24 13:00 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-09-24 12:56 - 2013-09-24 12:56 - 41085024 _____ (MAGIX AG) C:\Users\PC\Desktop\setup_pc_check_tuning.exe
2013-09-24 12:04 - 2013-07-25 16:48 - 00000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2013-09-24 11:29 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\Mirillis
2013-09-24 11:29 - 2013-09-24 11:26 - 00000000 ____D C:\Users\PC\AppData\Local\Mirillis
2013-09-24 11:28 - 2013-09-24 11:28 - 00001995 _____ C:\Users\Public\Desktop\Action!.lnk
2013-09-24 11:28 - 2013-06-12 19:13 - 00000000 ____D C:\Program Files (x86)\Mirillis
2013-09-24 10:50 - 2013-09-24 10:50 - 35017373 _____ C:\Users\PC\Desktop\Mirillis-Action-1.16.2.0_PlusCrack.com.rar
2013-09-24 08:40 - 2012-10-20 08:21 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-09-24 04:21 - 2013-09-23 16:21 - 98840431 _____ C:\Windows\SysWOW64\簾
2013-09-23 16:58 - 2013-09-23 16:36 - 00000000 ____D C:\Users\PC\AppData\Local\PAYDAY 2
2013-09-23 16:36 - 2013-09-23 16:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-23 16:36 - 2012-10-18 09:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-23 15:09 - 2013-05-05 14:30 - 00000000 ____D C:\Users\PC\Desktop\Zuhause Fotos
2013-09-23 14:26 - 2013-09-23 14:26 - 98646441 _____ C:\Windows\SysWOW64\డ柦d
2013-09-23 13:39 - 2012-10-25 21:18 - 00000000 ____D C:\Users\PC\AppData\Roaming\.minecraft
2013-09-22 21:07 - 2013-09-22 21:07 - 98597466 _____ C:\Windows\SysWOW64\侽
2013-09-22 11:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-22 09:10 - 2012-10-18 08:47 - 00000872 _____ C:\Users\PC\Desktop\Downloads.lnk
2013-09-22 09:10 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-22 09:10 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-22 09:06 - 2013-08-26 11:42 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-09-22 09:06 - 2013-01-13 13:13 - 05058176 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-22 05:21 - 2012-11-18 04:59 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-22 05:21 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2013-09-22 05:19 - 2013-09-22 05:14 - 00000000 ____D C:\Windows\system32\MRT
2013-09-22 00:55 - 2013-08-26 11:42 - 00003336 _____ C:\Windows\System32\Tasks\HP Photo Creations Communicator
2013-09-22 00:54 - 2013-03-25 09:35 - 00003212 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3322853412-3098556889-925944958-1000
2013-09-21 20:17 - 2013-09-21 14:17 - 98547399 _____ C:\Windows\SysWOW64\죏颧[
2013-09-21 04:19 - 2013-09-18 09:17 - 00003350 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000
2013-09-20 21:24 - 2013-09-20 19:25 - 98498750 _____ C:\Windows\SysWOW64\X
2013-09-20 15:26 - 2013-09-20 15:26 - 00189683 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_16.853042.dmp
2013-09-20 15:26 - 2013-09-20 15:26 - 00183059 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_03.853298.dmp
2013-09-20 13:35 - 2013-09-20 13:34 - 00675988 _____ C:\Users\PC\Desktop\Minecraft.exe
2013-09-20 13:02 - 2013-09-13 16:02 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-20 13:02 - 2012-12-14 06:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 13:02 - 2012-10-18 11:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 13:02 - 2012-10-18 11:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 01:51 - 2013-09-19 13:38 - 98428185 _____ C:\Windows\SysWOW64\⓻[
2013-09-19 23:42 - 2013-09-19 23:42 - 00189187 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-19 23_42_20.036083.dmp
2013-09-19 21:14 - 2013-09-19 21:14 - 03684312 _____ C:\Users\PC\Desktop\rgnlauncher0.9.6.exe
2013-09-19 20:30 - 2013-09-19 20:30 - 00000000 ____D C:\Users\PC\Documents\Westcoast Launcher
2013-09-18 11:04 - 2013-09-18 11:04 - 00184959 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-18 11_04_09.325110.dmp
2013-09-18 08:43 - 2013-09-08 23:34 - 00000000 ____D C:\Users\PC\Desktop\redsn0w_win_0.9.15b3
2013-09-18 00:00 - 2013-09-17 14:02 - 98071447 _____ C:\Windows\SysWOW64\ⱐ㐿
2013-09-16 19:53 - 2013-09-16 19:52 - 00000000 ____D C:\Users\PC\AppData\Roaming\MTE
2013-09-16 18:54 - 2013-09-16 18:54 - 00001076 _____ C:\Users\UpdatusUser\Desktop\Minecraft Texturepack Editor.lnk
2013-09-16 00:50 - 2013-08-26 11:42 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-09-15 00:45 - 2013-09-15 00:45 - 00215544 _____ C:\Users\PC\Youtube Kacke_Peter Lustig Collab.mp3.sfk
2013-09-14 21:55 - 2013-09-14 13:55 - 97600188 _____ C:\Windows\SysWOW64\씴�V
2013-09-13 20:51 - 2013-09-13 14:51 - 97503480 _____ C:\Windows\SysWOW64\俭㜀”
2013-09-13 20:30 - 2013-07-03 12:04 - 00000000 ____D C:\Users\PC\AppData\Local\ArmA 2 OA
2013-09-13 16:03 - 2013-02-27 10:09 - 00000000 ____D C:\Users\PC\Desktop\Ordner für Lustige BIlder
2013-09-13 12:55 - 2013-06-22 19:20 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-09-13 00:46 - 2012-10-18 13:43 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-13 00:46 - 2012-10-18 13:43 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-13 00:19 - 2013-09-13 00:19 - 97412816 _____ C:\Windows\SysWOW64\䩾„
2013-09-12 23:58 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\.gimp-2.8
2013-09-12 23:57 - 2013-09-12 23:57 - 00003246 _____ C:\Users\PC\AppData\Local\recently-used.xbel
2013-09-12 18:20 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-12 15:55 - 2013-09-12 15:55 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.GroupEventArgs.resizer_settings
2013-09-12 10:58 - 2013-09-22 18:30 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-12 10:58 - 2013-09-22 18:30 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-12 10:58 - 2013-09-18 09:26 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-12 10:58 - 2013-09-18 09:26 - 00022814 _____ C:\Windows\system32\nvinfo.pb
2013-09-12 10:58 - 2013-06-27 12:11 - 12947360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-12 10:58 - 2013-06-27 12:11 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-12 10:58 - 2013-05-20 00:29 - 15901448 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-12 10:58 - 2013-05-17 18:56 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-12 10:58 - 2013-05-17 18:56 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-12 09:25 - 2013-05-17 19:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-12 08:32 - 2013-09-09 15:16 - 00000000 ____D C:\Users\PC\AppData\Local\Overwolf
2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-12 00:06 - 2013-05-17 19:02 - 03361114 _____ C:\Windows\system32\nvcoproc.bin
2013-09-11 21:29 - 2013-09-11 19:30 - 97171315 _____ C:\Windows\SysWOW64\ꂘc
2013-09-11 13:30 - 2013-09-11 13:30 - 97124766 _____ C:\Windows\SysWOW64\칍㺲—
2013-09-11 06:00 - 2013-09-11 06:00 - 00000000 ____D C:\Users\PC\Documents\ANNO 1404 Venedig
2013-09-11 05:28 - 2012-10-19 08:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Ubisoft
2013-09-10 00:42 - 2013-09-09 14:43 - 96851172 _____ C:\Windows\SysWOW64\�ゆ‡
2013-09-09 15:19 - 2013-09-09 15:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-09 15:19 - 2013-09-09 15:18 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-09 15:15 - 2013-07-25 10:49 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2013-09-09 10:11 - 2013-09-09 10:11 - 00000000 ____D C:\Users\PC\Documents\Alpha Protocol
2013-09-09 10:10 - 2013-05-20 12:36 - 00222199 _____ C:\Windows\DirectX.log
2013-09-09 08:42 - 2013-09-08 22:42 - 96601965 _____ C:\Windows\SysWOW64\퉼浘Š
2013-09-09 01:18 - 2013-09-09 01:17 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-09 01_17_18.095630.dmp
2013-09-08 23:42 - 2013-07-25 09:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\redsn0w
2013-09-08 23:29 - 2013-09-08 23:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\PathToSuccess_DE
2013-09-08 10:42 - 2013-09-07 14:42 - 96533415 _____ C:\Windows\SysWOW64\╀’
2013-09-08 01:53 - 2013-09-08 01:53 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-08 01_53_11.539379.dmp
2013-09-07 12:58 - 2013-09-07 12:58 - 00000000 ____D C:\Users\PC\Desktop\Anno Trainer
2013-09-07 06:02 - 2013-09-07 06:02 - 00000000 ____D C:\Users\PC\Documents\Anno 1404
2013-09-06 16:50 - 2013-09-06 16:50 - 00184656 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_50_15.882892.dmp
2013-09-06 16:11 - 2013-09-06 16:11 - 00183400 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_11_18.257187.dmp
2013-09-06 00:43 - 2013-09-06 00:43 - 00002069 _____ C:\Users\UpdatusUser\Desktop\American Conquest Fight Back.lnk
2013-09-06 00:15 - 2013-09-05 18:14 - 96269118 _____ C:\Windows\SysWOW64\谑ᜊ”
2013-09-06 00:10 - 2013-09-06 00:10 - 00001926 _____ C:\Users\UpdatusUser\Desktop\American Conquest.lnk
2013-09-04 22:10 - 2013-09-04 14:11 - 95956132 _____ C:\Windows\SysWOW64\颧ˆ
2013-09-03 22:02 - 2013-09-03 22:02 - 00179360 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-03 22_02_10.360328.dmp
2013-09-03 19:11 - 2013-09-03 19:11 - 00018712 _____ C:\Users\PC\Downloads\YouTube-Unblocker-045.crx
2013-09-03 18:13 - 2013-09-02 21:50 - 00000000 ____D C:\Users\PC\AppData\Local\Game Dev Tycoon - Steam
2013-09-02 21:41 - 2013-09-02 21:41 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-02 21:27 - 2013-09-02 21:26 - 00168615 _____ C:\Users\PC\bluuuuuuuuuuuuuuuuuuuuuuuuuubb
2013-09-02 18:34 - 2013-09-02 18:32 - 00132441 _____ C:\Users\PC\ficken
2013-09-02 15:22 - 2013-03-28 09:26 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-02 14:27 - 2011-04-12 09:43 - 00719582 _____ C:\Windows\system32\perfh007.dat
2013-09-02 14:27 - 2011-04-12 09:43 - 00158444 _____ C:\Windows\system32\perfc007.dat
2013-09-02 14:27 - 2009-07-14 07:13 - 01674864 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-02 14:08 - 2012-11-23 00:20 - 00000000 ____D C:\Users\PC\Documents\My Recorded Scripts
2013-09-02 13:34 - 2013-09-02 13:34 - 00000000 ____D C:\Program Files (x86)\Nemex
2013-09-02 13:26 - 2012-10-31 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-01 19:41 - 2013-09-01 15:41 - 95199041 _____ C:\Windows\SysWOW64\ꃰ쟁—
2013-09-01 19:02 - 2013-08-13 10:50 - 00000000 ____D C:\Users\PC\Desktop\Game Dev Tycoon Tipps
2013-09-01 17:08 - 2012-10-20 23:07 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-01 13:05 - 2013-06-25 17:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-01 12:56 - 2012-10-19 08:05 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-08-31 23:58 - 2013-08-31 23:58 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-08-31 23_58_13.220319.dmp
2013-08-31 21:18 - 2013-08-31 15:19 - 95128664 _____ C:\Windows\SysWOW64\✤搴–
2013-08-30 20:51 - 2013-08-30 14:52 - 94985858 _____ C:\Windows\SysWOW64\樵ﱳ’
2013-08-29 21:02 - 2013-08-29 15:02 - 94663095 _____ C:\Windows\SysWOW64\던ꫪ”
2013-08-29 18:45 - 2013-08-29 18:45 - 00011264 ___SH C:\Users\PC\Thumbs.db
2013-08-28 22:54 - 2013-08-28 14:54 - 101091881 _____ C:\Windows\SysWOW64\說㹬P
2013-08-28 17:54 - 2013-03-02 20:47 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-08-28 17:53 - 2013-09-04 00:04 - 00001815 _____ C:\Users\PC\Desktop\Apps.lnk
2013-08-28 17:53 - 2013-08-28 17:51 - 00000000 ____D C:\ProgramData\BlueStacks
2013-08-28 17:53 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-28 17:52 - 2013-08-28 17:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-08-28 12:20 - 2013-08-28 12:20 - 00000000 ____D C:\Users\PC\AppData\Roaming\Empty Clip Studios
2013-08-27 21:21 - 2013-08-27 19:21 - 100458977 _____ C:\Windows\SysWOW64\崑義‘
2013-08-26 21:40 - 2013-08-26 13:40 - 100279224 _____ C:\Windows\SysWOW64\뜇ꍺ
2013-08-26 11:54 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Local\VirtualStore
2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ___RD C:\Users\PC\Documents\HP Photo Creations
2013-08-26 11:45 - 2013-08-26 11:45 - 00000000 ____D C:\Users\PC\AppData\Roaming\Visan
2013-08-26 11:45 - 2013-08-26 11:42 - 00000000 ____D C:\ProgramData\Visan
2013-08-26 10:27 - 2013-08-26 10:26 - 00000000 ____D C:\Users\PC\AppData\Local\gtk-2.0
2013-08-26 10:17 - 2013-08-26 10:17 - 00000000 ____D C:\Users\PC\.thumbnails
2013-08-26 10:15 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\AppData\Local\gegl-0.2
2013-08-26 10:14 - 2013-08-26 10:14 - 00000000 ____D C:\Program Files\GIMP 2
Files to move or delete:
====================
C:\ProgramData\PKP_DLeo.DAT
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\PC\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-22 11:12
==================== End Of Log ============================
--- --- --- |
|
25.09.2013, 18:51
| #9 |
| /// the machine /// TB-Ausbilder | Mobilfunk-MMS erhalten per Mail...ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.09.2013, 07:41
| #10 |
| | Mobilfunk-MMS erhalten per Mail... Guten Morgen  Hat vergleichsweise sehr lang gedauert der Scan mit ESET deshalb lief es über Nacht durch... Er hat 5 Sachen gefunden ... die letzten 3 Datein dürften Harmlos sein ... allerdings die ersten 2 kenne ich nicht. Naja, hier der Log: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f28929b87ebbac499d539810780bfdbd
# engine=15261
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-25 08:38:35
# local_time=2013-09-25 10:38:35 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 6687259 131771365 0 0
# scanned=139970
# found=1
# cleaned=0
# scan_time=4918
sh=ACADF2B82AECDEDB4D590808EEB01D436999E91E ft=1 fh=f1e915411acfaf75 vn="a variant of Win32/Packed.VMProtect.AAA trojan" ac=I fn="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2.dll"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f28929b87ebbac499d539810780bfdbd
# engine=15261
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-26 05:20:06
# local_time=2013-09-26 07:20:06 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 6718550 131802656 0 0
# scanned=314417
# found=5
# cleaned=0
# scan_time=23624
sh=2AF1A301391C30C6AEC0F4B26628106104A52DE7 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikfklccmhhadhllgkicdehlbdhphfhoa\1\51e47d01b24b67.93986216.js.vir"
sh=6E58BC90AD9D5B3EC3A7E6FB7DE3384A32BF71AF ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\extensions\elcp6hth@oee-oeua.net\content\bg.js.vir"
sh=8964715C753AE96DB19D923A8CA88B9204B666EE ft=0 fh=0000000000000000 vn="probably a variant of Win32/Agent.CLDLOFD trojan" ac=I fn="C:\Users\PC\Desktop\Ordner mit Krimskrams\Pokemon\Emulatoren Komplettpack\NDS\Bumsen.rar"
sh=0D9C4FD5710F4D82F022A04D359DB64A31139A7F ft=1 fh=063aff841d7443f6 vn="probably a variant of Win32/Agent.CLDLOFD trojan" ac=I fn="C:\Users\PC\Desktop\Ordner mit Krimskrams\Pokemon\Emulatoren Komplettpack\NDS\NO$GBA 2.6 (inkl MyZoom & BIOS)\myZoomSoft.exe"
sh=0D9C4FD5710F4D82F022A04D359DB64A31139A7F ft=1 fh=063aff841d7443f6 vn="probably a variant of Win32/Agent.CLDLOFD trojan" ac=I fn="C:\Users\PC\Desktop\Ordner mit Krimskrams\Pokemon\Emulatoren Komplettpack\NDS\NO$GBA 2.6 (inkl MyZoom & BIOS)\Anfänger\Löschen\myZoomSoft.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2013 TuneUp Utilities Language Pack (de-DE) Java 7 Update 21 Java version out of Date! Adobe Flash Player 11.8.800.168 Adobe Reader XI Mozilla Firefox 22.0 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-09-2013
Ran by PC (administrator) on PC-PC on 26-09-2013 08:29:48
Running from C:\Users\PC\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
() C:\Program Files (x86)\Opera Next\17.0.1241.18\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
(Mirillis Ltd.) C:\Program Files (x86)\Mirillis\Action!\Action.exe
() C:\Program Files (x86)\Mirillis\Action!\Action_x86.bin
() C:\Program Files (x86)\Mirillis\Action!\Action_x64.bin
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 10.0\vegas100.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 10.0\ErrorReportLauncher.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 10.0\x86\FileIOSurrogate.exe
() C:\Program Files (x86)\Xilisoft\Video Converter Ultimate\vc.exe
() C:\Program Files (x86)\Xilisoft\Video Converter Ultimate\devchange.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\Xilisoft\Video Converter Ultimate\player.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(Opera Software) C:\Program Files (x86)\Opera Next\17.0.1241.18\opera.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1813928 2013-09-25] (Valve Corporation)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [3333632 2012-08-16] ()
HKCU\...\Run: [AdBuck.exe] - C:\Program Files (x86)\AdBuck\AdBuck.exe [5991424 2013-08-06] (Media Revolution GmbH)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS ShellProcess Execute] - C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-09-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Logitech G35] - C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech(c))
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44BB45A48AB6CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll No File
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter-x32: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL No File
Tcpip\Parameters: [DhcpNameServer] 83.169.184.33 83.169.184.97
FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: Google
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Keyword.URL: user_pref("keyword.URL", "");
FF Homepage: user_pref("browser.startup.homepage", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: @vizzed.com/VizzedRGR - C:\Program Files (x86)\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll (Vizzed.com)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\PC\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Basic - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\foxyproxy@eric.h.jung
FF Extension: U2bview Firefox Add-on - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zvkfjlpv.default\Extensions\noreply@u2bviews.com
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Drive) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Bitcoin Ticker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkjcngcenokaadmhbmcokmkanjibmmje\0.3.2_0
CHR Extension: (Bitcoin Mining Monitor) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkonhfangjkibemiedpiahgedlffdma\0.5_0
CHR Extension: (Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0
CHR Extension: (YouTube Unblocker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
==================== Services (Whitelisted) =================
R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.02\AsusFanControlService.exe [1470592 2012-03-21] (ASUSTeK Computer Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-26] ()
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
S2 MAGIX StartUp Analyze Service; C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe [186368 2010-11-04] (MAGIX AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [6237800 2010-04-30] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-02] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-02-09] ()
R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-02-13] (Avira GmbH)
R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-02-13] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-08-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-21] (DT Soft Ltd)
S3 FETNDIS; C:\Windows\System32\DRIVERS\fet6x64.sys [47872 2009-06-10] (VIA Technologies, Inc. )
R3 GEARAspiWDM; C:\Windows\SysWow64\Drivers\GEARAspiWDM.sys [15664 2012-04-05] (GEAR Software Inc.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [41704 2012-10-10] (AnchorFree Inc.)
R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-02-09] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-07-02] (Duplex Secure Ltd.)
S2 tandpl; C:\Windows\SysWow64\drivers\tandpl.sys [4736 2003-04-19] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294232 2013-02-15] (Microsoft Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
U3 arz9xgja; C:\Windows\System32\Drivers\arz9xgja.sys [0 ] (Intel Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MSICDSetup; \??\D:\CDriver64.sys [x]
S2 tandpl; System32\drivers\tandpl.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-26 08:28 - 2013-09-26 08:29 - 01956432 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2013-09-26 08:27 - 2013-09-26 08:27 - 00001081 _____ C:\Users\PC\Desktop\checkup.txt
2013-09-26 08:17 - 2013-09-26 08:17 - 00891144 _____ C:\Users\PC\Desktop\SecurityCheck.exe
2013-09-25 22:30 - 2013-09-25 22:30 - 00000000 ____D C:\Users\PC\Desktop\Application Files
2013-09-25 22:30 - 2013-09-25 22:30 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SweetFX Configurator
2013-09-25 22:30 - 2012-11-08 21:58 - 00428544 _____ () C:\Users\PC\Desktop\setup.exe
2013-09-25 22:30 - 2012-11-08 21:58 - 00002023 _____ C:\Users\PC\Desktop\SweetFX_config.application
2013-09-25 22:29 - 2013-09-25 22:29 - 00492398 _____ C:\Users\PC\Desktop\SweetFX-Configurator_1.3.3.zip
2013-09-25 21:15 - 2013-09-25 21:15 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-25 21:12 - 2013-09-25 21:12 - 02347384 _____ (ESET) C:\Users\PC\Desktop\esetsmartinstaller_enu.exe
2013-09-25 19:49 - 2013-09-25 19:49 - 00000000 ____D C:\Users\Public\Documents\GTA3 User Files
2013-09-25 18:16 - 2013-09-26 00:16 - 97892804 _____ C:\Windows\SysWOW64\傚’
2013-09-25 17:37 - 2013-09-25 17:37 - 00001179 _____ C:\Users\PC\Desktop\JRT.txt
2013-09-25 17:32 - 2013-09-25 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 17:30 - 2013-09-25 17:30 - 01030038 _____ (Thisisu) C:\Users\PC\Desktop\JRT.exe
2013-09-25 17:26 - 2013-09-25 17:26 - 00010491 _____ C:\Users\PC\Desktop\AdwCleaner[S0].txt
2013-09-25 17:11 - 2013-09-25 17:20 - 00000000 ____D C:\AdwCleaner
2013-09-25 16:20 - 2013-09-25 16:20 - 01042066 _____ C:\Users\PC\Desktop\adwcleaner.exe
2013-09-25 15:21 - 2013-09-25 15:22 - 222141776 _____ (NVIDIA Corporation) C:\Users\PC\Desktop\314.22-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-09-25 14:17 - 2013-09-25 14:17 - 97729025 _____ C:\Windows\SysWOW64\깭㤘
2013-09-24 21:34 - 2013-09-25 18:12 - 00000020 _____ C:\Windows\capsys184523.log
2013-09-24 20:55 - 2013-09-24 20:55 - 00034317 _____ C:\ComboFix.txt
2013-09-24 20:40 - 2013-09-24 20:55 - 00000000 ____D C:\Qoobox
2013-09-24 20:40 - 2013-09-24 20:55 - 00000000 ____D C:\ComboFix
2013-09-24 20:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-24 20:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-24 20:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-24 20:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-24 20:39 - 2013-09-24 20:53 - 00000000 ____D C:\Windows\erdnt
2013-09-24 20:35 - 2013-09-24 20:35 - 05130004 ____R (Swearware) C:\Users\PC\Desktop\ComboFix.exe
2013-09-24 16:16 - 2013-09-24 16:18 - 00048873 _____ C:\Users\PC\Desktop\Addition.txt
2013-09-24 16:14 - 2013-09-24 16:14 - 00000000 ____D C:\FRST
2013-09-24 15:22 - 2013-09-24 15:22 - 00000378 _____ C:\Users\PC\Desktop\Ereignisse (2).txt
2013-09-24 15:14 - 2013-09-24 15:14 - 00001214 _____ C:\Users\PC\Desktop\Ereignisse (1).txt
2013-09-24 15:09 - 2013-09-24 15:09 - 00001536 _____ C:\Users\PC\Desktop\Ereignisse.txt
2013-09-24 14:17 - 2013-09-24 20:16 - 97540783 _____ C:\Windows\SysWOW64\덼A
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\Documents\MAGIX_MxTray
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\AppData\Roaming\MAGIX
2013-09-24 13:02 - 2013-09-25 21:14 - 00000440 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job
2013-09-24 13:02 - 2013-09-24 13:02 - 00002812 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\OnDemandDump
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\CrashLog
2013-09-24 13:00 - 2013-09-24 13:07 - 00000000 ____D C:\ProgramData\MAGIX
2013-09-24 13:00 - 2013-09-24 13:01 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-09-24 12:56 - 2013-09-24 12:56 - 41085024 _____ (MAGIX AG) C:\Users\PC\Desktop\setup_pc_check_tuning.exe
2013-09-24 11:29 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\Mirillis
2013-09-24 11:28 - 2013-09-24 11:28 - 00001995 _____ C:\Users\Public\Desktop\Action!.lnk
2013-09-24 11:26 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Local\Mirillis
2013-09-24 10:50 - 2013-09-24 10:50 - 35017373 _____ C:\Users\PC\Desktop\Mirillis-Action-1.16.2.0_PlusCrack.com.rar
2013-09-23 16:36 - 2013-09-23 16:58 - 00000000 ____D C:\Users\PC\AppData\Local\PAYDAY 2
2013-09-23 16:36 - 2013-09-23 16:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-23 16:21 - 2013-09-24 04:21 - 98840431 _____ C:\Windows\SysWOW64\簾
2013-09-23 14:26 - 2013-09-23 14:26 - 98646441 _____ C:\Windows\SysWOW64\డ柦d
2013-09-22 21:07 - 2013-09-22 21:07 - 98597466 _____ C:\Windows\SysWOW64\侽
2013-09-22 18:30 - 2013-09-12 10:58 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-22 18:30 - 2013-09-12 10:58 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-22 18:30 - 2013-09-12 10:58 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-22 05:14 - 2013-09-22 05:19 - 00000000 ____D C:\Windows\system32\MRT
2013-09-22 05:14 - 2013-07-31 15:29 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-22 05:14 - 2013-07-31 15:20 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-22 05:14 - 2013-07-31 15:19 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-22 05:14 - 2013-07-31 15:18 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-22 05:14 - 2013-07-31 15:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-22 05:14 - 2013-07-31 15:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-22 05:14 - 2013-07-31 15:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-22 05:14 - 2013-07-31 15:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-22 05:14 - 2013-07-31 15:13 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-22 05:14 - 2013-07-31 15:11 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-22 05:14 - 2013-07-31 15:11 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 05:14 - 2013-07-31 15:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-22 05:14 - 2013-07-31 15:08 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-22 05:14 - 2013-07-31 15:05 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-22 05:14 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-22 05:14 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-22 05:14 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 05:14 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-22 05:14 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-22 05:14 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-22 05:14 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-22 05:14 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-22 05:14 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-22 05:14 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-22 05:14 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-22 05:14 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-22 05:14 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-22 05:14 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-22 05:14 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-22 05:13 - 2013-07-31 16:17 - 17833472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-22 05:13 - 2013-07-31 15:42 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-22 05:13 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-22 05:01 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-22 05:01 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-22 05:01 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-22 05:01 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-22 05:01 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-22 05:01 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-22 05:01 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-22 05:01 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-22 05:01 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-22 05:01 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-22 05:01 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-22 05:01 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-22 05:01 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-22 05:01 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-22 05:01 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-22 05:01 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-22 05:01 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-22 05:01 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-22 05:01 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-22 05:01 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-22 05:01 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-22 05:01 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-22 05:01 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-22 05:01 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-22 05:01 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-22 05:01 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-22 05:01 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-09-22 05:01 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-09-22 05:01 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-09-22 05:01 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-09-22 05:01 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-09-22 05:01 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-09-22 05:01 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-09-22 05:01 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-09-22 05:01 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-09-22 05:01 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-09-22 05:01 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-22 05:00 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-21 14:17 - 2013-09-21 20:17 - 98547399 _____ C:\Windows\SysWOW64\죏颧[
2013-09-20 19:25 - 2013-09-20 21:24 - 98498750 _____ C:\Windows\SysWOW64\X
2013-09-20 15:26 - 2013-09-20 15:26 - 00189683 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_16.853042.dmp
2013-09-20 15:26 - 2013-09-20 15:26 - 00183059 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_03.853298.dmp
2013-09-20 13:34 - 2013-09-20 13:35 - 00675988 _____ C:\Users\PC\Desktop\Minecraft.exe
2013-09-19 23:42 - 2013-09-19 23:42 - 00189187 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-19 23_42_20.036083.dmp
2013-09-19 21:14 - 2013-09-19 21:14 - 03684312 _____ C:\Users\PC\Desktop\rgnlauncher0.9.6.exe
2013-09-19 20:30 - 2013-09-19 20:30 - 00000000 ____D C:\Users\PC\Documents\Westcoast Launcher
2013-09-19 13:38 - 2013-09-20 01:51 - 98428185 _____ C:\Windows\SysWOW64\⓻[
2013-09-18 11:04 - 2013-09-18 11:04 - 00184959 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-18 11_04_09.325110.dmp
2013-09-18 09:26 - 2013-09-12 10:58 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-18 09:26 - 2013-09-12 10:58 - 00022814 _____ C:\Windows\system32\nvinfo.pb
2013-09-18 09:26 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll
2013-09-18 09:26 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll
2013-09-18 09:26 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-09-18 09:26 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-09-18 09:17 - 2013-09-21 04:19 - 00003350 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000
2013-09-18 08:59 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-09-18 08:59 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-17 14:02 - 2013-09-18 00:00 - 98071447 _____ C:\Windows\SysWOW64\ⱐ㐿
2013-09-16 19:52 - 2013-09-16 19:53 - 00000000 ____D C:\Users\PC\AppData\Roaming\MTE
2013-09-16 18:54 - 2013-09-24 15:47 - 00000000 ____D C:\Program Files (x86)\Minecraft Texturepack Editor
2013-09-16 18:54 - 2013-09-16 18:54 - 00001076 _____ C:\Users\UpdatusUser\Desktop\Minecraft Texturepack Editor.lnk
2013-09-15 00:45 - 2013-09-15 00:45 - 00215544 _____ C:\Users\PC\Youtube Kacke_Peter Lustig Collab.mp3.sfk
2013-09-14 13:55 - 2013-09-14 21:55 - 97600188 _____ C:\Windows\SysWOW64\씴�V
2013-09-13 16:02 - 2013-09-20 13:02 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-13 14:51 - 2013-09-13 20:51 - 97503480 _____ C:\Windows\SysWOW64\俭㜀”
2013-09-13 00:19 - 2013-09-13 00:19 - 97412816 _____ C:\Windows\SysWOW64\䩾„
2013-09-12 23:57 - 2013-09-12 23:57 - 00003246 _____ C:\Users\PC\AppData\Local\recently-used.xbel
2013-09-12 15:55 - 2013-09-12 15:55 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.GroupEventArgs.resizer_settings
2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-11 19:30 - 2013-09-11 21:29 - 97171315 _____ C:\Windows\SysWOW64\ꂘc
2013-09-11 13:30 - 2013-09-11 13:30 - 97124766 _____ C:\Windows\SysWOW64\칍㺲—
2013-09-11 06:00 - 2013-09-11 06:00 - 00000000 ____D C:\Users\PC\Documents\ANNO 1404 Venedig
2013-09-09 15:19 - 2013-09-09 15:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-09 15:18 - 2013-09-09 15:19 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-09 15:16 - 2013-09-12 08:32 - 00000000 ____D C:\Users\PC\AppData\Local\Overwolf
2013-09-09 14:43 - 2013-09-10 00:42 - 96851172 _____ C:\Windows\SysWOW64\�ゆ‡
2013-09-09 10:11 - 2013-09-09 10:11 - 00000000 ____D C:\Users\PC\Documents\Alpha Protocol
2013-09-09 01:17 - 2013-09-09 01:18 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-09 01_17_18.095630.dmp
2013-09-08 23:34 - 2013-09-18 08:43 - 00000000 ____D C:\Users\PC\Desktop\redsn0w_win_0.9.15b3
2013-09-08 23:29 - 2013-09-08 23:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\PathToSuccess_DE
2013-09-08 22:42 - 2013-09-09 08:42 - 96601965 _____ C:\Windows\SysWOW64\퉼浘Š
2013-09-08 01:53 - 2013-09-08 01:53 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-08 01_53_11.539379.dmp
2013-09-07 14:42 - 2013-09-08 10:42 - 96533415 _____ C:\Windows\SysWOW64\╀’
2013-09-07 12:58 - 2013-09-07 12:58 - 00000000 ____D C:\Users\PC\Desktop\Anno Trainer
2013-09-07 06:02 - 2013-09-07 06:02 - 00000000 ____D C:\Users\PC\Documents\Anno 1404
2013-09-06 16:50 - 2013-09-06 16:50 - 00184656 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_50_15.882892.dmp
2013-09-06 16:11 - 2013-09-06 16:11 - 00183400 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_11_18.257187.dmp
2013-09-06 00:43 - 2013-09-06 00:43 - 00002069 _____ C:\Users\UpdatusUser\Desktop\American Conquest Fight Back.lnk
2013-09-06 00:10 - 2013-09-06 00:10 - 00001926 _____ C:\Users\UpdatusUser\Desktop\American Conquest.lnk
2013-09-05 18:14 - 2013-09-06 00:15 - 96269118 _____ C:\Windows\SysWOW64\谑ᜊ”
2013-09-04 14:11 - 2013-09-04 22:10 - 95956132 _____ C:\Windows\SysWOW64\颧ˆ
2013-09-04 00:04 - 2013-08-28 17:53 - 00001815 _____ C:\Users\PC\Desktop\Apps.lnk
2013-09-03 22:02 - 2013-09-03 22:02 - 00179360 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-03 22_02_10.360328.dmp
2013-09-03 19:11 - 2013-09-03 19:11 - 00018712 _____ C:\Users\PC\Downloads\YouTube-Unblocker-045.crx
2013-09-02 21:50 - 2013-09-03 18:13 - 00000000 ____D C:\Users\PC\AppData\Local\Game Dev Tycoon - Steam
2013-09-02 21:41 - 2013-09-02 21:41 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-02 21:26 - 2013-09-02 21:27 - 00168615 _____ C:\Users\PC\bluuuuuuuuuuuuuuuuuuuuuuuuuubb
2013-09-02 18:32 - 2013-09-02 18:34 - 00132441 _____ C:\Users\PC\ficken
2013-09-02 13:34 - 2013-09-02 13:34 - 00000000 ____D C:\Program Files (x86)\Nemex
2013-09-01 15:41 - 2013-09-01 19:41 - 95199041 _____ C:\Windows\SysWOW64\ꃰ쟁—
2013-08-31 23:58 - 2013-08-31 23:58 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-08-31 23_58_13.220319.dmp
2013-08-31 15:19 - 2013-08-31 21:18 - 95128664 _____ C:\Windows\SysWOW64\✤搴–
2013-08-30 14:52 - 2013-08-30 20:51 - 94985858 _____ C:\Windows\SysWOW64\樵ﱳ’
2013-08-29 18:45 - 2013-08-29 18:45 - 00011264 ___SH C:\Users\PC\Thumbs.db
2013-08-29 15:02 - 2013-08-29 21:02 - 94663095 _____ C:\Windows\SysWOW64\던ꫪ”
2013-08-28 17:52 - 2013-08-28 17:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-08-28 17:51 - 2013-08-28 17:53 - 00000000 ____D C:\ProgramData\BlueStacks
2013-08-28 14:54 - 2013-08-28 22:54 - 101091881 _____ C:\Windows\SysWOW64\說㹬P
2013-08-28 12:20 - 2013-08-28 12:20 - 00000000 ____D C:\Users\PC\AppData\Roaming\Empty Clip Studios
2013-08-27 19:21 - 2013-08-27 21:21 - 100458977 _____ C:\Windows\SysWOW64\崑義‘
==================== One Month Modified Files and Folders =======
2013-09-26 08:29 - 2013-09-26 08:28 - 01956432 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2013-09-26 08:29 - 2013-07-15 12:38 - 03511296 ___SH C:\Users\PC\Desktop\Thumbs.db
2013-09-26 08:27 - 2013-09-26 08:27 - 00001081 _____ C:\Users\PC\Desktop\checkup.txt
2013-09-26 08:17 - 2013-09-26 08:17 - 00891144 _____ C:\Users\PC\Desktop\SecurityCheck.exe
2013-09-26 08:02 - 2012-12-14 06:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-26 04:56 - 2013-05-19 08:43 - 01656901 _____ C:\Windows\WindowsUpdate.log
2013-09-26 02:52 - 2012-10-18 10:16 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2013-09-26 01:53 - 2012-10-18 10:18 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-26 00:39 - 2012-10-19 07:08 - 00000000 ____D C:\Users\PC\Desktop\Ordner mit Krimskrams
2013-09-26 00:16 - 2013-09-25 18:16 - 97892804 _____ C:\Windows\SysWOW64\傚’
2013-09-26 00:01 - 2012-10-18 10:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\foobar2000
2013-09-25 22:40 - 2013-07-25 16:48 - 00000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2013-09-25 22:40 - 2012-10-18 10:21 - 00000000 ____D C:\Users\PC\AppData\Roaming\TS3Client
2013-09-25 22:30 - 2013-09-25 22:30 - 00000000 ____D C:\Users\PC\Desktop\Application Files
2013-09-25 22:30 - 2013-09-25 22:30 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SweetFX Configurator
2013-09-25 22:30 - 2013-03-28 12:48 - 00000000 ____D C:\Users\PC\AppData\Local\Deployment
2013-09-25 22:29 - 2013-09-25 22:29 - 00492398 _____ C:\Users\PC\Desktop\SweetFX-Configurator_1.3.3.zip
2013-09-25 21:15 - 2013-09-25 21:15 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-25 21:14 - 2013-09-24 13:02 - 00000440 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job
2013-09-25 21:12 - 2013-09-25 21:12 - 02347384 _____ (ESET) C:\Users\PC\Desktop\esetsmartinstaller_enu.exe
2013-09-25 19:49 - 2013-09-25 19:49 - 00000000 ____D C:\Users\Public\Documents\GTA3 User Files
2013-09-25 18:12 - 2013-09-24 21:34 - 00000020 _____ C:\Windows\capsys184523.log
2013-09-25 18:05 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-25 18:05 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-25 18:03 - 2013-08-07 11:41 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.PartitionProvider.resizer_settings
2013-09-25 17:57 - 2013-05-19 08:40 - 00035180 _____ C:\Windows\setupact.log
2013-09-25 17:57 - 2013-05-17 19:02 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-25 17:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-25 17:37 - 2013-09-25 17:37 - 00001179 _____ C:\Users\PC\Desktop\JRT.txt
2013-09-25 17:32 - 2013-09-25 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 17:30 - 2013-09-25 17:30 - 01030038 _____ (Thisisu) C:\Users\PC\Desktop\JRT.exe
2013-09-25 17:26 - 2013-09-25 17:26 - 00010491 _____ C:\Users\PC\Desktop\AdwCleaner[S0].txt
2013-09-25 17:23 - 2013-05-19 08:40 - 00313522 _____ C:\Windows\PFRO.log
2013-09-25 17:20 - 2013-09-25 17:11 - 00000000 ____D C:\AdwCleaner
2013-09-25 16:20 - 2013-09-25 16:20 - 01042066 _____ C:\Users\PC\Desktop\adwcleaner.exe
2013-09-25 15:22 - 2013-09-25 15:21 - 222141776 _____ (NVIDIA Corporation) C:\Users\PC\Desktop\314.22-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-09-25 14:17 - 2013-09-25 14:17 - 97729025 _____ C:\Windows\SysWOW64\깭㤘
2013-09-25 12:22 - 2012-10-31 20:30 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-25 00:22 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC
2013-09-24 22:42 - 2012-10-21 15:58 - 00000000 ____D C:\Users\PC\Documents\Euro Truck Simulator 2
2013-09-24 20:56 - 2012-10-19 07:42 - 00000000 ____D C:\Users\PC\AppData\Local\Apps\2.0
2013-09-24 20:55 - 2013-09-24 20:55 - 00034317 _____ C:\ComboFix.txt
2013-09-24 20:55 - 2013-09-24 20:40 - 00000000 ____D C:\Qoobox
2013-09-24 20:55 - 2013-09-24 20:40 - 00000000 ____D C:\ComboFix
2013-09-24 20:53 - 2013-09-24 20:39 - 00000000 ____D C:\Windows\erdnt
2013-09-24 20:52 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-24 20:35 - 2013-09-24 20:35 - 05130004 ____R (Swearware) C:\Users\PC\Desktop\ComboFix.exe
2013-09-24 20:16 - 2013-09-24 14:17 - 97540783 _____ C:\Windows\SysWOW64\덼A
2013-09-24 16:18 - 2013-09-24 16:16 - 00048873 _____ C:\Users\PC\Desktop\Addition.txt
2013-09-24 16:14 - 2013-09-24 16:14 - 00000000 ____D C:\FRST
2013-09-24 15:53 - 2012-10-23 20:32 - 00000000 ____D C:\ProgramData\Sony
2013-09-24 15:51 - 2013-06-25 16:29 - 00000000 ____D C:\Wanadoo Edition
2013-09-24 15:51 - 2012-12-03 12:08 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2013-09-24 15:47 - 2013-09-16 18:54 - 00000000 ____D C:\Program Files (x86)\Minecraft Texturepack Editor
2013-09-24 15:22 - 2013-09-24 15:22 - 00000378 _____ C:\Users\PC\Desktop\Ereignisse (2).txt
2013-09-24 15:14 - 2013-09-24 15:14 - 00001214 _____ C:\Users\PC\Desktop\Ereignisse (1).txt
2013-09-24 15:09 - 2013-09-24 15:09 - 00001536 _____ C:\Users\PC\Desktop\Ereignisse.txt
2013-09-24 13:07 - 2013-09-24 13:00 - 00000000 ____D C:\ProgramData\MAGIX
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\Documents\MAGIX_MxTray
2013-09-24 13:06 - 2013-09-24 13:06 - 00000000 ____D C:\Users\PC\AppData\Roaming\MAGIX
2013-09-24 13:02 - 2013-09-24 13:02 - 00002812 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\OnDemandDump
2013-09-24 13:02 - 2013-09-24 13:02 - 00000000 ____D C:\Users\PC\Documents\CrashLog
2013-09-24 13:01 - 2013-09-24 13:00 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-09-24 12:56 - 2013-09-24 12:56 - 41085024 _____ (MAGIX AG) C:\Users\PC\Desktop\setup_pc_check_tuning.exe
2013-09-24 11:29 - 2013-09-24 11:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\Mirillis
2013-09-24 11:29 - 2013-09-24 11:26 - 00000000 ____D C:\Users\PC\AppData\Local\Mirillis
2013-09-24 11:28 - 2013-09-24 11:28 - 00001995 _____ C:\Users\Public\Desktop\Action!.lnk
2013-09-24 11:28 - 2013-06-12 19:13 - 00000000 ____D C:\Program Files (x86)\Mirillis
2013-09-24 10:50 - 2013-09-24 10:50 - 35017373 _____ C:\Users\PC\Desktop\Mirillis-Action-1.16.2.0_PlusCrack.com.rar
2013-09-24 08:40 - 2012-10-20 08:21 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-09-24 04:21 - 2013-09-23 16:21 - 98840431 _____ C:\Windows\SysWOW64\簾
2013-09-23 16:58 - 2013-09-23 16:36 - 00000000 ____D C:\Users\PC\AppData\Local\PAYDAY 2
2013-09-23 16:36 - 2013-09-23 16:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-23 16:36 - 2012-10-18 09:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-23 15:09 - 2013-05-05 14:30 - 00000000 ____D C:\Users\PC\Desktop\Zuhause Fotos
2013-09-23 14:26 - 2013-09-23 14:26 - 98646441 _____ C:\Windows\SysWOW64\డ柦d
2013-09-23 13:39 - 2012-10-25 21:18 - 00000000 ____D C:\Users\PC\AppData\Roaming\.minecraft
2013-09-22 21:07 - 2013-09-22 21:07 - 98597466 _____ C:\Windows\SysWOW64\侽
2013-09-22 11:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-22 09:10 - 2012-10-18 08:47 - 00000872 _____ C:\Users\PC\Desktop\Downloads.lnk
2013-09-22 09:10 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-22 09:10 - 2012-10-18 08:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-22 09:06 - 2013-08-26 11:42 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-09-22 09:06 - 2013-01-13 13:13 - 05058176 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-22 05:21 - 2012-11-18 04:59 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-22 05:21 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2013-09-22 05:19 - 2013-09-22 05:14 - 00000000 ____D C:\Windows\system32\MRT
2013-09-22 00:55 - 2013-08-26 11:42 - 00003336 _____ C:\Windows\System32\Tasks\HP Photo Creations Communicator
2013-09-22 00:54 - 2013-03-25 09:35 - 00003212 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3322853412-3098556889-925944958-1000
2013-09-21 20:17 - 2013-09-21 14:17 - 98547399 _____ C:\Windows\SysWOW64\죏颧[
2013-09-21 04:19 - 2013-09-18 09:17 - 00003350 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3322853412-3098556889-925944958-1000
2013-09-20 21:24 - 2013-09-20 19:25 - 98498750 _____ C:\Windows\SysWOW64\X
2013-09-20 15:26 - 2013-09-20 15:26 - 00189683 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_16.853042.dmp
2013-09-20 15:26 - 2013-09-20 15:26 - 00183059 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-20 15_26_03.853298.dmp
2013-09-20 13:35 - 2013-09-20 13:34 - 00675988 _____ C:\Users\PC\Desktop\Minecraft.exe
2013-09-20 13:02 - 2013-09-13 16:02 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-20 13:02 - 2012-12-14 06:31 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 13:02 - 2012-10-18 11:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 13:02 - 2012-10-18 11:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 01:51 - 2013-09-19 13:38 - 98428185 _____ C:\Windows\SysWOW64\⓻[
2013-09-19 23:42 - 2013-09-19 23:42 - 00189187 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-19 23_42_20.036083.dmp
2013-09-19 21:14 - 2013-09-19 21:14 - 03684312 _____ C:\Users\PC\Desktop\rgnlauncher0.9.6.exe
2013-09-19 20:30 - 2013-09-19 20:30 - 00000000 ____D C:\Users\PC\Documents\Westcoast Launcher
2013-09-18 11:04 - 2013-09-18 11:04 - 00184959 _____ C:\Users\PC\Documents\ts3_clientui-win32-1378715177-2013-09-18 11_04_09.325110.dmp
2013-09-18 08:43 - 2013-09-08 23:34 - 00000000 ____D C:\Users\PC\Desktop\redsn0w_win_0.9.15b3
2013-09-18 00:00 - 2013-09-17 14:02 - 98071447 _____ C:\Windows\SysWOW64\ⱐ㐿
2013-09-16 19:53 - 2013-09-16 19:52 - 00000000 ____D C:\Users\PC\AppData\Roaming\MTE
2013-09-16 18:54 - 2013-09-16 18:54 - 00001076 _____ C:\Users\UpdatusUser\Desktop\Minecraft Texturepack Editor.lnk
2013-09-16 00:50 - 2013-08-26 11:42 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-09-15 00:45 - 2013-09-15 00:45 - 00215544 _____ C:\Users\PC\Youtube Kacke_Peter Lustig Collab.mp3.sfk
2013-09-14 21:55 - 2013-09-14 13:55 - 97600188 _____ C:\Windows\SysWOW64\씴�V
2013-09-13 20:51 - 2013-09-13 14:51 - 97503480 _____ C:\Windows\SysWOW64\俭㜀”
2013-09-13 20:30 - 2013-07-03 12:04 - 00000000 ____D C:\Users\PC\AppData\Local\ArmA 2 OA
2013-09-13 16:03 - 2013-02-27 10:09 - 00000000 ____D C:\Users\PC\Desktop\Ordner für Lustige BIlder
2013-09-13 12:55 - 2013-06-22 19:20 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-09-13 00:46 - 2012-10-18 13:43 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-13 00:46 - 2012-10-18 13:43 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-13 00:19 - 2013-09-13 00:19 - 97412816 _____ C:\Windows\SysWOW64\䩾„
2013-09-12 23:58 - 2013-08-26 10:15 - 00000000 ____D C:\Users\PC\.gimp-2.8
2013-09-12 23:57 - 2013-09-12 23:57 - 00003246 _____ C:\Users\PC\AppData\Local\recently-used.xbel
2013-09-12 18:20 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-12 15:55 - 2013-09-12 15:55 - 00000015 _____ C:\Users\PC\AppData\Roaming\AdBuck.GroupEventArgs.resizer_settings
2013-09-12 10:58 - 2013-09-22 18:30 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-12 10:58 - 2013-09-22 18:30 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-12 10:58 - 2013-09-22 18:30 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-12 10:58 - 2013-09-18 09:26 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-12 10:58 - 2013-09-18 09:26 - 00022814 _____ C:\Windows\system32\nvinfo.pb
2013-09-12 10:58 - 2013-06-27 12:11 - 12947360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-12 10:58 - 2013-06-27 12:11 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-12 10:58 - 2013-05-20 00:29 - 15901448 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-12 10:58 - 2013-05-17 18:56 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-12 10:58 - 2013-05-17 18:56 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-12 09:25 - 2013-05-17 19:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-12 09:25 - 2013-05-17 19:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-12 08:32 - 2013-09-09 15:16 - 00000000 ____D C:\Users\PC\AppData\Local\Overwolf
2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-09-12 00:06 - 2013-05-17 19:02 - 03361114 _____ C:\Windows\system32\nvcoproc.bin
2013-09-11 21:29 - 2013-09-11 19:30 - 97171315 _____ C:\Windows\SysWOW64\ꂘc
2013-09-11 13:30 - 2013-09-11 13:30 - 97124766 _____ C:\Windows\SysWOW64\칍㺲—
2013-09-11 06:00 - 2013-09-11 06:00 - 00000000 ____D C:\Users\PC\Documents\ANNO 1404 Venedig
2013-09-11 05:28 - 2012-10-19 08:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Ubisoft
2013-09-10 00:42 - 2013-09-09 14:43 - 96851172 _____ C:\Windows\SysWOW64\�ゆ‡
2013-09-09 15:19 - 2013-09-09 15:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-09 15:19 - 2013-09-09 15:18 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-09 15:15 - 2013-07-25 10:49 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2013-09-09 10:11 - 2013-09-09 10:11 - 00000000 ____D C:\Users\PC\Documents\Alpha Protocol
2013-09-09 10:10 - 2013-05-20 12:36 - 00222199 _____ C:\Windows\DirectX.log
2013-09-09 08:42 - 2013-09-08 22:42 - 96601965 _____ C:\Windows\SysWOW64\퉼浘Š
2013-09-09 01:18 - 2013-09-09 01:17 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-09 01_17_18.095630.dmp
2013-09-08 23:42 - 2013-07-25 09:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\redsn0w
2013-09-08 23:29 - 2013-09-08 23:29 - 00000000 ____D C:\Users\PC\AppData\Roaming\PathToSuccess_DE
2013-09-08 10:42 - 2013-09-07 14:42 - 96533415 _____ C:\Windows\SysWOW64\╀’
2013-09-08 01:53 - 2013-09-08 01:53 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-08 01_53_11.539379.dmp
2013-09-07 12:58 - 2013-09-07 12:58 - 00000000 ____D C:\Users\PC\Desktop\Anno Trainer
2013-09-07 06:02 - 2013-09-07 06:02 - 00000000 ____D C:\Users\PC\Documents\Anno 1404
2013-09-06 16:50 - 2013-09-06 16:50 - 00184656 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_50_15.882892.dmp
2013-09-06 16:11 - 2013-09-06 16:11 - 00183400 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-06 16_11_18.257187.dmp
2013-09-06 00:43 - 2013-09-06 00:43 - 00002069 _____ C:\Users\UpdatusUser\Desktop\American Conquest Fight Back.lnk
2013-09-06 00:15 - 2013-09-05 18:14 - 96269118 _____ C:\Windows\SysWOW64\谑ᜊ”
2013-09-06 00:10 - 2013-09-06 00:10 - 00001926 _____ C:\Users\UpdatusUser\Desktop\American Conquest.lnk
2013-09-04 22:10 - 2013-09-04 14:11 - 95956132 _____ C:\Windows\SysWOW64\颧ˆ
2013-09-03 22:02 - 2013-09-03 22:02 - 00179360 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-09-03 22_02_10.360328.dmp
2013-09-03 19:11 - 2013-09-03 19:11 - 00018712 _____ C:\Users\PC\Downloads\YouTube-Unblocker-045.crx
2013-09-03 18:13 - 2013-09-02 21:50 - 00000000 ____D C:\Users\PC\AppData\Local\Game Dev Tycoon - Steam
2013-09-02 21:41 - 2013-09-02 21:41 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-02 21:27 - 2013-09-02 21:26 - 00168615 _____ C:\Users\PC\bluuuuuuuuuuuuuuuuuuuuuuuuuubb
2013-09-02 18:34 - 2013-09-02 18:32 - 00132441 _____ C:\Users\PC\ficken
2013-09-02 15:22 - 2013-03-28 09:26 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-02 14:27 - 2011-04-12 09:43 - 00719582 _____ C:\Windows\system32\perfh007.dat
2013-09-02 14:27 - 2011-04-12 09:43 - 00158444 _____ C:\Windows\system32\perfc007.dat
2013-09-02 14:27 - 2009-07-14 07:13 - 01674864 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-02 14:08 - 2012-11-23 00:20 - 00000000 ____D C:\Users\PC\Documents\My Recorded Scripts
2013-09-02 13:34 - 2013-09-02 13:34 - 00000000 ____D C:\Program Files (x86)\Nemex
2013-09-02 13:26 - 2012-10-31 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-01 19:41 - 2013-09-01 15:41 - 95199041 _____ C:\Windows\SysWOW64\ꃰ쟁—
2013-09-01 19:02 - 2013-08-13 10:50 - 00000000 ____D C:\Users\PC\Desktop\Game Dev Tycoon Tipps
2013-09-01 17:08 - 2012-10-20 23:07 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-01 13:05 - 2013-06-25 17:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-01 12:56 - 2012-10-19 08:05 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-08-31 23:58 - 2013-08-31 23:58 - 00174864 _____ C:\Users\PC\Documents\ts3_clientui-win32-1375773286-2013-08-31 23_58_13.220319.dmp
2013-08-31 21:18 - 2013-08-31 15:19 - 95128664 _____ C:\Windows\SysWOW64\✤搴–
2013-08-30 20:51 - 2013-08-30 14:52 - 94985858 _____ C:\Windows\SysWOW64\樵ﱳ’
2013-08-29 21:02 - 2013-08-29 15:02 - 94663095 _____ C:\Windows\SysWOW64\던ꫪ”
2013-08-29 18:45 - 2013-08-29 18:45 - 00011264 ___SH C:\Users\PC\Thumbs.db
2013-08-28 22:54 - 2013-08-28 14:54 - 101091881 _____ C:\Windows\SysWOW64\說㹬P
2013-08-28 17:54 - 2013-03-02 20:47 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-08-28 17:53 - 2013-09-04 00:04 - 00001815 _____ C:\Users\PC\Desktop\Apps.lnk
2013-08-28 17:53 - 2013-08-28 17:51 - 00000000 ____D C:\ProgramData\BlueStacks
2013-08-28 17:53 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-28 17:52 - 2013-08-28 17:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-08-28 12:20 - 2013-08-28 12:20 - 00000000 ____D C:\Users\PC\AppData\Roaming\Empty Clip Studios
2013-08-27 21:21 - 2013-08-27 19:21 - 100458977 _____ C:\Windows\SysWOW64\崑義‘
Files to move or delete:
====================
C:\ProgramData\PKP_DLeo.DAT
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\PC\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-22 11:12
==================== End Of Log ============================
--- --- --- Wie isn das jetzt mit diesen 2 Seltsamen Datein die ESET gefunden hat? Soll ich da nochmal Avira / Malwarebytes über das Verzeichnis laufen lassen? Ich hab auch "Noch" im Gelöscht Ordner die EMail... falls Interesse besteht kann ich sie Dir schicken ? ... p.S Der eigentliche Virus wurde aber wohl von Avira erfolgreich geblockt, oder? pp.S seit dem AdwCleaner und Junkware Removal Tool läuft das System irgendwie schneller  Mit freundlichen Grüßen Brille65 Ach, ppp.S (Wenn man so will). Wenn ich die Logs so als "Laie" durchschaue fällt mir auf, dass nirgends was von Opera erwähnt wird... Aber Opera ist eigtl. mein Hauptbrowser oO |
|
26.09.2013, 09:32
| #11 |
| /// the machine /// TB-Ausbilder | Mobilfunk-MMS erhalten per Mail... Java und Adobe updaten. Die Funde sind schon in Quarantäne. Also ich sehe Opera im Log Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.09.2013, 11:16
| #12 |
| | Mobilfunk-MMS erhalten per Mail... Oh, dann hab ichs überlesen. Naja bei der Menge Gut, ich bedanke mich vielmals für die schnelle Hilfe und ja, kann geschlossen Danke nochmals, Mit freundlichen Grüßen Brille65 Asoo ähm um nochmal zu fragen, die Email braucht ihr / Du nicht, oder? die kann ich dann "bedenkenlos" endgültig löschen ? ^^ |
|
26.09.2013, 12:50
| #13 |
| /// the machine /// TB-Ausbilder | Mobilfunk-MMS erhalten per Mail... Ja lösch das Ding
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Mobilfunk-MMS erhalten per Mail... |
| anhang, antwort, blockieren, blöd, email, erfolgreich, erhalte, folgende, geschichte, hacktool.patch, inhalt, malware, malwarebytes, posten, registry, report, schonmal, win32/adware.multiplug.h, win32/agent.cldlofd, win32/packed.vmprotect.aaa, zugriff |
Linear-Darstellung
