Hallo..

Es kommt immer die Meldung, dass Windows nicht mehr reagiert..

Ich hatte auch schon alles mögliche auf dem PC, sogar ein Sality

FRST:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02
Ran by ME (administrator) on ME-PC on 01-10-2013 16:08:05
Running from C:\Users\ME\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\AsScrPro.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2278504 2011-10-14] (Realtek Semiconductor)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35256 2013-08-22] (Overwolf)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
Startup: C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PC App Store Uninstall 3.8.8.1435.lnk
ShortcutTarget: PC App Store Uninstall 3.8.8.1435.lnk -> C:\Users\ME\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\Uninstall\PC App Store Uninstall\0\InstallUtility.dll", _OpenUrl -run "PC App Store Uninstall" -ini "OpenUrl.ini (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.search.us.com/v/2/?guid={C8E76512-612F-4984-AA3C-F2059A645F86}&serpv=5
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://asus.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9F718E515EB4CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {1FECC5D6-8DF2-479D-9E03-759A06C78B8E} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10557
SearchScopes: HKCU - {EDD60B3D-928B-4642-8BA4-F921D2DA1EFA} URL = hxxp://search.us.com/serp?guid={C8E76512-612F-4984-AA3C-F2059A645F86}&action=default_search&serpv=5&k={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://start.search.us.com/v/2/?guid={C8E76512-612F-4984-AA3C-F2059A645F86}&serpv=5
CHR RestoreOnStartup: "hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Extension: (Google Docs) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.5_0
CHR Extension: (Google Search) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-05-25] (Advanced Micro Devices, Inc.)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd)

==================== Drivers (Whitelisted) ====================

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [x]
S3 cleanhlp; \??\C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
S3 PCFApiUtil; \??\C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-01 16:07 - 2013-10-01 16:07 - 01953880 _____ (Farbar) C:\Users\ME\Downloads\FRST64.exe
2013-10-01 16:07 - 2013-10-01 16:07 - 00000000 ____D C:\FRST
2013-10-01 16:06 - 2013-10-01 16:06 - 01086873 _____ (Farbar) C:\Users\ME\Downloads\FRST.exe
2013-10-01 12:44 - 2013-10-01 12:44 - 00000000 ___RD C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-30 18:10 - 2013-09-30 18:10 - 00000000 ____D C:\Users\ME\Downloads\ZLYZZERBABO
2013-09-30 18:06 - 2013-09-30 18:06 - 00478302 _____ C:\Users\ME\Downloads\ZLYZZERBABO.rar
2013-09-30 16:59 - 2013-09-30 16:59 - 00000000 ____D C:\Users\ME\Downloads\y97y_lamborghinigallardo
2013-09-30 16:58 - 2013-09-30 16:58 - 01069925 _____ C:\Users\ME\Downloads\y97y_lamborghinigallardo.rar
2013-09-30 16:55 - 2013-09-30 16:55 - 05592034 _____ C:\Users\ME\Downloads\1375995919_Lamborghini Sesto Elemento 2011.zip
2013-09-30 16:55 - 2013-09-30 16:55 - 00000000 ____D C:\Users\ME\Downloads\1375995919_Lamborghini Sesto Elemento 2011
2013-09-30 13:07 - 2013-09-30 13:07 - 00000000 ____D C:\Users\ME\Downloads\Yaki-by-FreaKy_Stein-Salvatore_Costa- (1)
2013-09-30 13:05 - 2013-09-30 13:06 - 01792351 _____ C:\Users\ME\Downloads\Yaki-by-FreaKy_Stein-Salvatore_Costa- (1).rar
2013-09-26 13:24 - 2013-09-26 13:24 - 00000000 ____D C:\Users\ME\Downloads\siteM16
2013-09-26 13:23 - 2013-09-26 13:23 - 00000412 _____ C:\Users\ME\Downloads\siteM16.rar
2013-09-26 13:09 - 2013-09-26 13:09 - 00003356 _____ C:\Windows\System32\Tasks\Baidu PC Faster Update
2013-09-25 19:34 - 2013-09-25 19:34 - 00125819 _____ C:\Users\ME\Downloads\dgl-und-rifle.rar
2013-09-25 19:34 - 2013-09-25 19:34 - 00000000 ____D C:\Users\ME\Downloads\dgl-und-rifle
2013-09-25 15:02 - 2013-09-25 15:02 - 00000000 ____D C:\Users\ME\Desktop\skin--s
2013-09-25 15:01 - 2013-09-25 15:01 - 03939053 _____ C:\Users\ME\Downloads\skin--s.rar
2013-09-25 15:01 - 2013-09-25 15:01 - 00000000 ____D C:\Users\ME\Downloads\skin--s
2013-09-25 15:00 - 2013-09-25 15:00 - 00150328 _____ C:\Users\ME\Downloads\HITSOUNDS.rar
2013-09-25 14:59 - 2013-09-25 14:59 - 00000000 ____D C:\Users\ME\Downloads\HITSOUNDS
2013-09-24 14:49 - 2013-09-24 14:49 - 00547836 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-24 14_49_29.994312.dmp
2013-09-24 14:49 - 2013-09-24 14:49 - 00535319 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-24 14_49_26.596118.dmp
2013-09-24 14:45 - 2013-09-24 14:45 - 00000014 _____ C:\Users\ME\Desktop\ausweich ts.txt
2013-09-22 18:51 - 2013-10-01 12:51 - 00000000 ____D C:\Users\ME\AppData\Local\LogMeIn Hamachi
2013-09-22 18:51 - 2013-09-22 18:51 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-09-22 18:51 - 2009-03-18 18:35 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2013-09-22 18:50 - 2013-09-22 18:51 - 00000928 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-09-22 18:35 - 2013-09-22 18:36 - 04292608 _____ C:\Users\ME\Downloads\hamachi_2.1.0.362.msi
2013-09-18 15:31 - 2013-09-18 15:31 - 00117479 _____ C:\Users\ME\Downloads\fontsvonSLON.rar
2013-09-15 16:43 - 2013-09-15 16:43 - 00537057 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-15 16_43_49.182446.dmp
2013-09-15 16:43 - 2013-09-15 16:43 - 00000000 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-15 16_43_52.325626.dmp
2013-09-15 16:43 - 2013-09-15 16:43 - 00000000 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-15 16_43_52.309625.dmp
2013-09-15 15:29 - 2013-09-15 15:29 - 00237162 _____ C:\Users\ME\Desktop\Keybind.rar
2013-09-15 15:29 - 2013-09-15 15:29 - 00000000 ____D C:\Users\ME\Desktop\Keybind
2013-09-15 12:11 - 2013-09-15 12:11 - 01441942 _____ C:\Users\ME\Downloads\k.rar
2013-09-14 14:46 - 2013-09-14 14:46 - 03876758 _____ C:\Users\ME\Downloads\Infi-mod.rar
2013-09-14 14:46 - 2013-09-14 14:46 - 00000000 ____D C:\Users\ME\Downloads\Infi-mod
2013-09-14 11:04 - 2013-09-14 11:04 - 00000000 ____D C:\Users\ME\AppData\Roaming\ATI
2013-09-14 11:04 - 2013-09-14 11:04 - 00000000 ____D C:\Users\ME\AppData\Local\ATI
2013-09-14 11:04 - 2013-09-14 11:04 - 00000000 ____D C:\ProgramData\ATI
2013-09-13 11:25 - 2013-09-13 11:25 - 00000000 ____D C:\Users\ME\Downloads\Cali-Kartell-Skin-by-Luca_Dipierro
2013-09-12 20:06 - 2013-09-12 20:06 - 00071082 _____ C:\Users\ME\Downloads\ENB-by-BlooDWiinG.rar
2013-09-12 20:06 - 2013-09-12 20:06 - 00000000 ____D C:\Users\ME\Downloads\ENB-by-BlooDWiinG
2013-09-12 16:23 - 2013-09-12 16:23 - 00001973 _____ C:\Users\Public\Desktop\Overwolf.lnk
2013-09-12 16:23 - 2013-09-12 16:23 - 00000000 ____D C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-12 16:22 - 2013-09-12 16:23 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-12 16:20 - 2013-10-01 12:45 - 00000000 ____D C:\Users\ME\AppData\Local\Overwolf
2013-09-12 15:53 - 2013-09-12 15:54 - 04712647 _____ C:\Users\ME\Downloads\SyXchos Billabong.zip
2013-09-12 12:46 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 12:46 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 12:46 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-12 12:46 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 12:46 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 12:46 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-12 12:46 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-12 12:46 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 12:46 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 12:46 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 12:46 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 12:46 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 12:46 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-12 12:46 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 17:17 - 2013-09-11 17:17 - 00000973 _____ C:\Windows\DirectX.log
2013-09-11 16:58 - 2013-09-11 16:58 - 09265106 _____ C:\Users\ME\Desktop\Cro - Jeder Tag.mp4
2013-09-11 16:57 - 2013-09-11 16:57 - 03489118 _____ C:\Users\ME\Desktop\Böser Mario [Comedy] [Super Mario Verarschung] BY Kentuckyx9.mp4
2013-09-11 16:46 - 2013-09-11 16:46 - 00073095 _____ C:\Users\ME\Downloads\Cali-Kartell-Skin-by-Luca_Dipierro.rar
2013-09-11 15:45 - 2013-09-11 15:45 - 00000000 ____D C:\Users\ME\Desktop\vcdeluxeteam_vcdeluxev1
2013-09-11 15:35 - 2013-09-11 15:42 - 160834869 _____ C:\Users\ME\Desktop\vcdeluxeteam_vcdeluxev1.rar
2013-09-11 15:29 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 15:29 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 15:29 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 15:29 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 15:29 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 15:29 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 15:29 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 15:29 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 15:29 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 15:29 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 15:29 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 15:29 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 15:29 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 15:29 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 15:29 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 15:29 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 15:29 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 15:29 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 15:29 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 15:29 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 15:29 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 15:29 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 15:29 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 15:29 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 15:29 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 15:29 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 15:29 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 16:03 - 2013-09-10 20:21 - 00201828 _____ C:\Users\ME\Desktop\GTAVCsf8.b
2013-09-10 15:38 - 2013-09-10 15:38 - 00000000 ____D C:\Users\ME\AppData\Local\{A7204325-9AF4-49D6-BB18-971B56C07D52}
2013-09-08 10:45 - 2013-10-01 12:44 - 00002959 _____ C:\Windows\setupact.log
2013-09-08 10:45 - 2013-09-27 11:14 - 00004506 _____ C:\Windows\PFRO.log
2013-09-08 10:45 - 2013-09-08 10:45 - 00000000 _____ C:\Windows\setuperr.log
2013-09-07 15:47 - 2013-09-26 13:08 - 00000000 ____D C:\ProgramData\Baidu Security
2013-09-07 15:46 - 2013-09-26 13:10 - 00000000 ____D C:\Users\Public\Documents\Baidu Security
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\Users\ME\AppData\Roaming\Baidu Security
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\Users\ME\AppData\Roaming\Baidu
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\ProgramData\Baidu
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\Program Files (x86)\Baidu Security
2013-09-07 15:43 - 2013-09-07 15:45 - 40996776 _____ (Baidu, Inc.) C:\Users\ME\Downloads\PC_Faster_Setup_GL_3.6.0.38508.exe
2013-09-07 15:38 - 2013-09-07 15:38 - 00002080 _____ C:\Users\ME\Desktop\TeamSpeak 3 (64 Bit) Setup.lnk
2013-09-07 12:28 - 2013-09-07 12:28 - 00131429 _____ C:\Users\ME\Downloads\MIRaWHACK.rar
2013-09-07 12:28 - 2013-09-07 12:28 - 00000000 ____D C:\Users\ME\Downloads\MIRaWHACK
2013-09-07 11:03 - 2013-09-07 11:04 - 00000000 ____D C:\Users\ME\Downloads\minecraftforge-universal-1.5.2-7.8.1.738
2013-09-07 11:03 - 2013-09-07 11:03 - 02033732 _____ C:\Users\ME\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-09-06 17:24 - 2013-09-06 17:24 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-09-06 17:22 - 2013-09-06 17:23 - 07876512 _____ (Adobe Systems Inc.) C:\Users\ME\Downloads\Shockwave_Installer_Slim.exe
2013-09-06 14:53 - 2013-09-06 14:53 - 00000106 _____ C:\Users\ME\Desktop\Neues Textdokument.txt
2013-09-06 13:59 - 2013-09-06 14:00 - 22883343 _____ C:\Users\ME\Desktop\Ilya - What's Good (2012) (HD_HQ).mp4
2013-09-05 19:44 - 2013-09-11 16:43 - 00000000 ____D C:\ProgramData\Avira
2013-09-05 19:28 - 2013-09-05 19:29 - 02092792 _____ C:\Users\ME\Downloads\avira_free_4052_antivirus.exe
2013-09-05 19:24 - 2013-09-05 19:24 - 12247350 _____ C:\Users\ME\Desktop\HitmanPro_3.7.7.205.zip
2013-09-05 19:24 - 2013-09-05 19:24 - 00000000 ____D C:\Users\ME\Desktop\HitmanPro_3.7.7.205
2013-09-05 19:22 - 2013-09-05 19:24 - 12247350 _____ C:\Users\ME\Downloads\HitmanPro_3.7.7.205.zip
2013-09-05 19:11 - 2013-09-05 19:11 - 00223728 _____ C:\Users\ME\Downloads\THALSTROEM Weaponsicons v.1.1.rar
2013-09-05 19:11 - 2013-09-05 19:11 - 00000000 ____D C:\Users\ME\Downloads\THALSTROEM Weaponsicons v.1.1
2013-09-05 18:30 - 2013-09-05 18:31 - 00110160 _____ C:\Users\ME\Downloads\sound_003 (1).wav
2013-09-05 17:23 - 2013-09-05 17:23 - 00000000 ____D C:\Users\ME\AppData\Local\TNT2
2013-09-05 17:22 - 2013-09-05 17:22 - 00577141 _____ C:\Users\ME\Downloads\hotspotshield-setup-3.13.exe
2013-09-05 15:49 - 2013-09-05 15:49 - 01576395 _____ C:\Users\ME\Downloads\minecraftforge-universal-1.4.5-6.4.1.426.zip
2013-09-05 15:46 - 2013-09-05 15:46 - 00031112 _____ C:\Users\ME\Downloads\Shaders By ZanderPlays.zip
2013-09-04 18:05 - 2013-09-04 18:06 - 00019227 _____ C:\Users\ME\Downloads\Sphax PureBDcraft 128x MC15.zip.yhf6tbp.partial
2013-09-03 14:44 - 2013-09-03 14:44 - 00486064 _____ (Aeria Games & Entertainment) C:\Users\ME\Downloads\ava_de_downloader.exe
2013-09-03 14:44 - 2013-09-03 14:44 - 00000000 ____D C:\AeriaGames
2013-09-03 13:16 - 2013-09-03 13:16 - 00000000 ____D C:\Users\ME\Downloads\Lamborgini
2013-09-03 13:12 - 2013-09-03 13:13 - 04481513 _____ C:\Users\ME\Downloads\Lamborgini.rar
2013-09-03 12:12 - 2013-09-03 12:12 - 00000000 ____D C:\Users\ME\Downloads\1k-Abo-Modpack---caTaLdi
2013-09-03 12:06 - 2013-09-03 12:07 - 06401255 _____ C:\Users\ME\Downloads\1k-Abo-Modpack---caTaLdi.rar
2013-09-02 20:23 - 2013-09-02 20:24 - 00000000 ____D C:\Users\ME\Downloads\nadinethebraaiiiiiiiiiiin
2013-09-01 16:52 - 2013-09-01 16:52 - 00182327 _____ C:\Users\ME\Downloads\nadinethebraaiiiiiiiiiiin.rar
2013-09-01 15:42 - 2013-09-01 15:43 - 28394345 _____ C:\Users\ME\Desktop\Major Lazer - Watch Out For This (Bumaye) (Dimitri Vegas & Like Mike Tomorrowland Remix).mp4

==================== One Month Modified Files and Folders =======

2013-10-01 16:07 - 2013-10-01 16:07 - 01953880 _____ (Farbar) C:\Users\ME\Downloads\FRST64.exe
2013-10-01 16:07 - 2013-10-01 16:07 - 00000000 ____D C:\FRST
2013-10-01 16:07 - 2013-06-28 23:36 - 00000000 ____D C:\Users\ME\AppData\Roaming\TS3Client
2013-10-01 16:06 - 2013-10-01 16:06 - 01086873 _____ (Farbar) C:\Users\ME\Downloads\FRST.exe
2013-10-01 15:52 - 2011-04-13 04:33 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-01 15:40 - 2013-07-09 23:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-01 15:23 - 2013-06-29 03:19 - 01814553 _____ C:\Windows\WindowsUpdate.log
2013-10-01 12:51 - 2013-09-22 18:51 - 00000000 ____D C:\Users\ME\AppData\Local\LogMeIn Hamachi
2013-10-01 12:51 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-01 12:51 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-01 12:47 - 2013-06-28 23:33 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-10-01 12:45 - 2013-09-12 16:20 - 00000000 ____D C:\Users\ME\AppData\Local\Overwolf
2013-10-01 12:44 - 2013-10-01 12:44 - 00000000 ___RD C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-10-01 12:44 - 2013-09-08 10:45 - 00002959 _____ C:\Windows\setupact.log
2013-10-01 12:44 - 2013-06-28 19:30 - 00000000 ___RD C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-01 12:44 - 2013-06-28 19:29 - 00000000 ___HD C:\ASUS.DAT
2013-10-01 12:44 - 2011-04-13 04:33 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-01 12:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-30 18:30 - 2013-06-30 14:44 - 00000000 ____D C:\Users\ME\AppData\Local\CrashDumps
2013-09-30 18:10 - 2013-09-30 18:10 - 00000000 ____D C:\Users\ME\Downloads\ZLYZZERBABO
2013-09-30 18:06 - 2013-09-30 18:06 - 00478302 _____ C:\Users\ME\Downloads\ZLYZZERBABO.rar
2013-09-30 16:59 - 2013-09-30 16:59 - 00000000 ____D C:\Users\ME\Downloads\y97y_lamborghinigallardo
2013-09-30 16:58 - 2013-09-30 16:58 - 01069925 _____ C:\Users\ME\Downloads\y97y_lamborghinigallardo.rar
2013-09-30 16:55 - 2013-09-30 16:55 - 05592034 _____ C:\Users\ME\Downloads\1375995919_Lamborghini Sesto Elemento 2011.zip
2013-09-30 16:55 - 2013-09-30 16:55 - 00000000 ____D C:\Users\ME\Downloads\1375995919_Lamborghini Sesto Elemento 2011
2013-09-30 16:29 - 2013-06-29 18:14 - 00000000 ____D C:\Users\ME\AppData\Roaming\streamWriter
2013-09-30 16:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-30 13:07 - 2013-09-30 13:07 - 00000000 ____D C:\Users\ME\Downloads\Yaki-by-FreaKy_Stein-Salvatore_Costa- (1)
2013-09-30 13:06 - 2013-09-30 13:05 - 01792351 _____ C:\Users\ME\Downloads\Yaki-by-FreaKy_Stein-Salvatore_Costa- (1).rar
2013-09-27 11:14 - 2013-09-08 10:45 - 00004506 _____ C:\Windows\PFRO.log
2013-09-26 16:36 - 2013-07-17 18:28 - 00000000 ____D C:\Users\ME\AppData\Roaming\vlc
2013-09-26 15:28 - 2013-09-26 15:25 - 01006622 _____ C:\Users\ME\Desktop\#MUSIK.MAIN - WWW.RAUTEMUSIK.FM - 24H TOP 40 POP HITS 80S 90S DANCE HOUSE ROCK R (4).aac
2013-09-26 13:24 - 2013-09-26 13:24 - 00000000 ____D C:\Users\ME\Downloads\siteM16
2013-09-26 13:23 - 2013-09-26 13:23 - 00000412 _____ C:\Users\ME\Downloads\siteM16.rar
2013-09-26 13:10 - 2013-09-07 15:46 - 00000000 ____D C:\Users\Public\Documents\Baidu Security
2013-09-26 13:09 - 2013-09-26 13:09 - 00003356 _____ C:\Windows\System32\Tasks\Baidu PC Faster Update
2013-09-26 13:08 - 2013-09-07 15:47 - 00000000 ____D C:\ProgramData\Baidu Security
2013-09-25 19:34 - 2013-09-25 19:34 - 00125819 _____ C:\Users\ME\Downloads\dgl-und-rifle.rar
2013-09-25 19:34 - 2013-09-25 19:34 - 00000000 ____D C:\Users\ME\Downloads\dgl-und-rifle
2013-09-25 15:02 - 2013-09-25 15:02 - 00000000 ____D C:\Users\ME\Desktop\skin--s
2013-09-25 15:01 - 2013-09-25 15:01 - 03939053 _____ C:\Users\ME\Downloads\skin--s.rar
2013-09-25 15:01 - 2013-09-25 15:01 - 00000000 ____D C:\Users\ME\Downloads\skin--s
2013-09-25 15:00 - 2013-09-25 15:00 - 00150328 _____ C:\Users\ME\Downloads\HITSOUNDS.rar
2013-09-25 14:59 - 2013-09-25 14:59 - 00000000 ____D C:\Users\ME\Downloads\HITSOUNDS
2013-09-25 13:59 - 2013-09-25 13:35 - 08701546 _____ C:\Users\ME\Desktop\#MUSIK.CLUB - WWW.RAUTEMUSIK.FM - 24H MIXED HANDS UP TRANCE DANCE TECHNO HARDSTY (13).aac
2013-09-24 14:49 - 2013-09-24 14:49 - 00547836 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-24 14_49_29.994312.dmp
2013-09-24 14:49 - 2013-09-24 14:49 - 00535319 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-24 14_49_26.596118.dmp
2013-09-24 14:45 - 2013-09-24 14:45 - 00000014 _____ C:\Users\ME\Desktop\ausweich ts.txt
2013-09-23 15:24 - 2013-09-23 15:23 - 29791761 _____ C:\Users\ME\Desktop\Martin Garrix - Animals.mp4
2013-09-23 15:16 - 2013-06-29 03:53 - 00002056 _____ C:\Windows\system32\AutoRunFilter.ini
2013-09-23 15:16 - 2013-06-29 03:53 - 00001469 _____ C:\Windows\system32\ServiceFilter.ini
2013-09-22 18:51 - 2013-09-22 18:51 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-09-22 18:51 - 2013-09-22 18:50 - 00000928 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-09-22 18:36 - 2013-09-22 18:35 - 04292608 _____ C:\Users\ME\Downloads\hamachi_2.1.0.362.msi
2013-09-21 15:00 - 2013-06-29 15:40 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-20 19:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-19 18:51 - 2013-07-09 23:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-19 18:51 - 2013-07-09 23:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-19 18:51 - 2013-07-09 23:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 11:03 - 2013-07-12 22:45 - 00000000 ____D C:\Users\ME\Documents\VirtualDJ
2013-09-18 15:31 - 2013-09-18 15:31 - 00117479 _____ C:\Users\ME\Downloads\fontsvonSLON.rar
2013-09-15 16:43 - 2013-09-15 16:43 - 00537057 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-15 16_43_49.182446.dmp
2013-09-15 16:43 - 2013-09-15 16:43 - 00000000 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-15 16_43_52.325626.dmp
2013-09-15 16:43 - 2013-09-15 16:43 - 00000000 _____ C:\Users\ME\Documents\ts3_clientui-win64-1378715177-2013-09-15 16_43_52.309625.dmp
2013-09-15 15:29 - 2013-09-15 15:29 - 00237162 _____ C:\Users\ME\Desktop\Keybind.rar
2013-09-15 15:29 - 2013-09-15 15:29 - 00000000 ____D C:\Users\ME\Desktop\Keybind
2013-09-15 12:11 - 2013-09-15 12:11 - 01441942 _____ C:\Users\ME\Downloads\k.rar
2013-09-14 14:46 - 2013-09-14 14:46 - 03876758 _____ C:\Users\ME\Downloads\Infi-mod.rar
2013-09-14 14:46 - 2013-09-14 14:46 - 00000000 ____D C:\Users\ME\Downloads\Infi-mod
2013-09-14 11:04 - 2013-09-14 11:04 - 00000000 ____D C:\Users\ME\AppData\Roaming\ATI
2013-09-14 11:04 - 2013-09-14 11:04 - 00000000 ____D C:\Users\ME\AppData\Local\ATI
2013-09-14 11:04 - 2013-09-14 11:04 - 00000000 ____D C:\ProgramData\ATI
2013-09-14 10:14 - 2013-09-14 10:14 - 07247108 _____ C:\Users\ME\Desktop\Example - Midnight Run (Flux Pavilion Remix).mp4
2013-09-14 10:08 - 2009-07-14 07:08 - 00032544 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-13 11:25 - 2013-09-13 11:25 - 00000000 ____D C:\Users\ME\Downloads\Cali-Kartell-Skin-by-Luca_Dipierro
2013-09-13 10:56 - 2013-06-28 19:30 - 00000000 ___RD C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 10:56 - 2013-06-28 19:29 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-09-13 10:55 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-09-13 10:55 - 2009-07-14 06:45 - 00271064 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 20:06 - 2013-09-12 20:06 - 00071082 _____ C:\Users\ME\Downloads\ENB-by-BlooDWiinG.rar
2013-09-12 20:06 - 2013-09-12 20:06 - 00000000 ____D C:\Users\ME\Downloads\ENB-by-BlooDWiinG
2013-09-12 16:23 - 2013-09-12 16:23 - 00001973 _____ C:\Users\Public\Desktop\Overwolf.lnk
2013-09-12 16:23 - 2013-09-12 16:23 - 00000000 ____D C:\Users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2013-09-12 16:23 - 2013-09-12 16:22 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-12 15:54 - 2013-09-12 15:53 - 04712647 _____ C:\Users\ME\Downloads\SyXchos Billabong.zip
2013-09-12 12:45 - 2013-08-14 15:34 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 12:40 - 2013-07-14 21:31 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 17:17 - 2013-09-11 17:17 - 00000973 _____ C:\Windows\DirectX.log
2013-09-11 17:17 - 2013-08-03 15:09 - 00000000 ____D C:\Users\ME\Documents\GTA Vice City User Files
2013-09-11 17:12 - 2013-06-29 03:29 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-11 16:58 - 2013-09-11 16:58 - 09265106 _____ C:\Users\ME\Desktop\Cro - Jeder Tag.mp4
2013-09-11 16:57 - 2013-09-11 16:57 - 03489118 _____ C:\Users\ME\Desktop\Böser Mario [Comedy] [Super Mario Verarschung] BY Kentuckyx9.mp4
2013-09-11 16:46 - 2013-09-11 16:46 - 00073095 _____ C:\Users\ME\Downloads\Cali-Kartell-Skin-by-Luca_Dipierro.rar
2013-09-11 16:43 - 2013-09-05 19:44 - 00000000 ____D C:\ProgramData\Avira
2013-09-11 15:45 - 2013-09-11 15:45 - 00000000 ____D C:\Users\ME\Desktop\vcdeluxeteam_vcdeluxev1
2013-09-11 15:42 - 2013-09-11 15:35 - 160834869 _____ C:\Users\ME\Desktop\vcdeluxeteam_vcdeluxev1.rar
2013-09-10 20:21 - 2013-09-10 16:03 - 00201828 _____ C:\Users\ME\Desktop\GTAVCsf8.b
2013-09-10 15:38 - 2013-09-10 15:38 - 00000000 ____D C:\Users\ME\AppData\Local\{A7204325-9AF4-49D6-BB18-971B56C07D52}
2013-09-09 20:05 - 2013-07-07 17:21 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-09-08 10:45 - 2013-09-08 10:45 - 00000000 _____ C:\Windows\setuperr.log
2013-09-07 22:46 - 2011-02-19 06:18 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-07 22:46 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-09-07 22:46 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-09-07 22:46 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-09-07 22:46 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-09-07 22:46 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-09-07 22:46 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-09-07 22:46 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-09-07 22:46 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-07 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-09-07 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-09-07 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-09-07 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-09-07 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-09-07 22:44 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\system32\winrm
2013-09-07 22:44 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\system32\WCN
2013-09-07 22:44 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\system32\slmgr
2013-09-07 22:44 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-09-07 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2013-09-07 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com
2013-09-07 22:41 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-07 22:41 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-09-07 22:41 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-09-07 22:41 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-07 22:41 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-07 22:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-09-07 22:38 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-09-07 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME
2013-09-07 16:55 - 2011-02-19 06:24 - 00665578 _____ C:\Windows\system32\perfh007.dat
2013-09-07 16:55 - 2011-02-19 06:24 - 00133758 _____ C:\Windows\system32\perfc007.dat
2013-09-07 16:55 - 2009-07-14 07:13 - 04862260 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-07 15:47 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-09-07 15:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\Users\ME\AppData\Roaming\Baidu Security
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\Users\ME\AppData\Roaming\Baidu
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\ProgramData\Baidu
2013-09-07 15:46 - 2013-09-07 15:46 - 00000000 ____D C:\Program Files (x86)\Baidu Security
2013-09-07 15:45 - 2013-09-07 15:43 - 40996776 _____ (Baidu, Inc.) C:\Users\ME\Downloads\PC_Faster_Setup_GL_3.6.0.38508.exe
2013-09-07 15:38 - 2013-09-07 15:38 - 00002080 _____ C:\Users\ME\Desktop\TeamSpeak 3 (64 Bit) Setup.lnk
2013-09-07 12:28 - 2013-09-07 12:28 - 00131429 _____ C:\Users\ME\Downloads\MIRaWHACK.rar
2013-09-07 12:28 - 2013-09-07 12:28 - 00000000 ____D C:\Users\ME\Downloads\MIRaWHACK
2013-09-07 11:04 - 2013-09-07 11:03 - 00000000 ____D C:\Users\ME\Downloads\minecraftforge-universal-1.5.2-7.8.1.738
2013-09-07 11:03 - 2013-09-07 11:03 - 02033732 _____ C:\Users\ME\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-09-06 17:24 - 2013-09-06 17:24 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-09-06 17:23 - 2013-09-06 17:22 - 07876512 _____ (Adobe Systems Inc.) C:\Users\ME\Downloads\Shockwave_Installer_Slim.exe
2013-09-06 14:53 - 2013-09-06 14:53 - 00000106 _____ C:\Users\ME\Desktop\Neues Textdokument.txt
2013-09-05 19:31 - 2013-08-20 17:24 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2013-09-05 19:31 - 2013-08-12 22:33 - 00000000 ____D C:\Users\ME\Desktop\SAVV-Keybinder-by-Fresh_Taylor
2013-09-05 19:29 - 2013-09-05 19:28 - 02092792 _____ C:\Users\ME\Downloads\avira_free_4052_antivirus.exe
2013-09-05 19:24 - 2013-09-05 19:24 - 12247350 _____ C:\Users\ME\Desktop\HitmanPro_3.7.7.205.zip
2013-09-05 19:24 - 2013-09-05 19:24 - 00000000 ____D C:\Users\ME\Desktop\HitmanPro_3.7.7.205
2013-09-05 19:24 - 2013-09-05 19:22 - 12247350 _____ C:\Users\ME\Downloads\HitmanPro_3.7.7.205.zip
2013-09-05 19:11 - 2013-09-05 19:11 - 00223728 _____ C:\Users\ME\Downloads\THALSTROEM Weaponsicons v.1.1.rar
2013-09-05 19:11 - 2013-09-05 19:11 - 00000000 ____D C:\Users\ME\Downloads\THALSTROEM Weaponsicons v.1.1
2013-09-05 18:31 - 2013-09-05 18:30 - 00110160 _____ C:\Users\ME\Downloads\sound_003 (1).wav
2013-09-05 17:23 - 2013-09-05 17:23 - 00000000 ____D C:\Users\ME\AppData\Local\TNT2
2013-09-05 17:22 - 2013-09-05 17:22 - 00577141 _____ C:\Users\ME\Downloads\hotspotshield-setup-3.13.exe
2013-09-05 17:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-09-05 15:49 - 2013-09-05 15:49 - 01576395 _____ C:\Users\ME\Downloads\minecraftforge-universal-1.4.5-6.4.1.426.zip
2013-09-05 15:46 - 2013-09-05 15:46 - 00031112 _____ C:\Users\ME\Downloads\Shaders By ZanderPlays.zip
2013-09-04 18:06 - 2013-09-04 18:05 - 00019227 _____ C:\Users\ME\Downloads\Sphax PureBDcraft 128x MC15.zip.yhf6tbp.partial
2013-09-03 14:44 - 2013-09-03 14:44 - 00486064 _____ (Aeria Games & Entertainment) C:\Users\ME\Downloads\ava_de_downloader.exe
2013-09-03 14:44 - 2013-09-03 14:44 - 00000000 ____D C:\AeriaGames
2013-09-03 13:16 - 2013-09-03 13:16 - 00000000 ____D C:\Users\ME\Downloads\Lamborgini
2013-09-03 13:13 - 2013-09-03 13:12 - 04481513 _____ C:\Users\ME\Downloads\Lamborgini.rar
2013-09-03 12:12 - 2013-09-03 12:12 - 00000000 ____D C:\Users\ME\Downloads\1k-Abo-Modpack---caTaLdi
2013-09-03 12:07 - 2013-09-03 12:06 - 06401255 _____ C:\Users\ME\Downloads\1k-Abo-Modpack---caTaLdi.rar
2013-09-02 20:24 - 2013-09-02 20:23 - 00000000 ____D C:\Users\ME\Downloads\nadinethebraaiiiiiiiiiiin
2013-09-01 16:52 - 2013-09-01 16:52 - 00182327 _____ C:\Users\ME\Downloads\nadinethebraaiiiiiiiiiiin.rar

Some content of TEMP:
====================
C:\Users\ME\AppData\Local\Temp\avast_free_antivirus_setup.exe
C:\Users\ME\AppData\Local\Temp\i4jdel0.exe
C:\Users\ME\AppData\Local\Temp\i4jdel1.exe
C:\Users\ME\AppData\Local\Temp\i4jdel2.exe
C:\Users\ME\AppData\Local\Temp\sfamcc00001.dll
C:\Users\ME\AppData\Local\Temp\sfextra.dll
C:\Users\ME\AppData\Local\Temp\SRLDetectionLibrary3115809753539755007.dll
C:\Users\ME\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\ME\AppData\Local\Temp\vcredist_x86.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-22 10:18

==================== End Of Log ============================
         

--- --- ---


--- --- ---


Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-09-2013 02
Ran by ME at 2013-10-01 16:10:40
Running from C:\Users\ME\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133)
AMD APP SDK Runtime (Version: 2.4.650.9)
AMD Fuel (Version: 2011.0524.2352.41027)
AMD Media Foundation Decoders (Version: 1.0.60524.2309)
AMD VISION Engine Control Center (x32 Version: 2011.0524.2352.41027)
Arctic Combat (x32 Version: 1.0.0.1)
ASUS AI Recovery (x32 Version: 1.0.13)
ASUS FancyStart (x32 Version: 1.1.0)
ASUS LifeFrame3 (x32 Version: 3.0.27)
ASUS Live Update (x32 Version: 3.0.8)
ASUS Power4Gear Hybrid (Version: 1.1.50)
ASUS SmartLogon (x32 Version: 1.0.0011)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0033)
ASUS Virtual Camera (x32 Version: 1.0.21)
ASUS WebStorage (x32 Version: 3.0.84.161)
ASUS_Screensaver (x32)
AsusVibe2.0 (x32 Version: 2.0.4.617)
Atheros Client Installation Program (x32 Version: 7.0)
ATI Catalyst Install Manager (Version: 3.0.829.0)
ATK Package (x32 Version: 1.0.0010)
Battlefield 2(TM) Demo (x32)
Bing Bar (x32 Version: 7.2.241.0)
BlackShot (x32)
Bluetooth Win7 Suite (64) (Version: 7.2.0.65)
Catalyst Control Center InstallProxy (x32 Version: 2011.0524.2352.41027)
Catalyst Control Center Localization All (x32 Version: 2011.0524.2352.41027)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0524.2352.41027)
CCC Help Chinese Standard (x32 Version: 2011.0524.2351.41027)
CCC Help Chinese Traditional (x32 Version: 2011.0524.2351.41027)
CCC Help Czech (x32 Version: 2011.0524.2351.41027)
CCC Help Danish (x32 Version: 2011.0524.2351.41027)
CCC Help Dutch (x32 Version: 2011.0524.2351.41027)
CCC Help English (x32 Version: 2011.0524.2351.41027)
CCC Help Finnish (x32 Version: 2011.0524.2351.41027)
CCC Help French (x32 Version: 2011.0524.2351.41027)
CCC Help German (x32 Version: 2011.0524.2351.41027)
CCC Help Greek (x32 Version: 2011.0524.2351.41027)
CCC Help Hungarian (x32 Version: 2011.0524.2351.41027)
CCC Help Italian (x32 Version: 2011.0524.2351.41027)
CCC Help Japanese (x32 Version: 2011.0524.2351.41027)
CCC Help Korean (x32 Version: 2011.0524.2351.41027)
CCC Help Norwegian (x32 Version: 2011.0524.2351.41027)
CCC Help Polish (x32 Version: 2011.0524.2351.41027)
CCC Help Portuguese (x32 Version: 2011.0524.2351.41027)
CCC Help Russian (x32 Version: 2011.0524.2351.41027)
CCC Help Spanish (x32 Version: 2011.0524.2351.41027)
CCC Help Swedish (x32 Version: 2011.0524.2351.41027)
CCC Help Thai (x32 Version: 2011.0524.2351.41027)
CCC Help Turkish (x32 Version: 2011.0524.2351.41027)
ccc-utility64 (Version: 2011.0524.2352.41027)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
Cooking Dash (x32)
CyberLink LabelPrint (x32 Version: 2.5.1908)
CyberLink Power2Go (x32 Version: 6.1.3602c)
D3DX10 (x32 Version: 15.4.2368.0902)
ETDWare PS/2-X64 8.0.5.1_WHQL (Version: 8.0.5.1)
Fast Boot (Version: 1.0.9)
Fraps (remove only) (x32)
Free YouTube Download version 3.2.7.711 (x32 Version: 3.2.7.711)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Game Park Console (x32 Version: 6.2.1.1)
Google Chrome (x32 Version: 29.0.1547.76)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
Governor of Poker (x32)
Grand Theft Auto San Andreas (x32 Version: 1.00.00001)
Grand Theft Auto Vice City (x32 Version: 1.00.000)
Hotel Dash Suite Success (x32)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Jewel Quest 3 (x32)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LogMeIn Hamachi (x32 Version: 2.1.0.374)
Luxor 3 (x32)
Mahjongg dimensions (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MTA:SA v1.3.1 (x32 Version: v1.3.1)
Neverwinter (x32)
Nuance PDF Reader (x32 Version: 6.00.0041)
Overwolf (x32 Version: 0.44.256)
Pando Media Booster (x32 Version: 2.6.0.9)
Plants vs Zombies (x32)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (x32 Version: 7.42.304.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30127)
Search.us.com (HKCU)
SpeedFan (remove only) (x32)
streamWriter (x32)
swMSM (x32 Version: 12.0.0.1)
syncables desktop SE (x32 Version: 5.5.746.11492)
System Requirements Lab CYRI (x32 Version: 6.0.7.0)
TeamSpeak 3 Client (Version: 3.0.13)
UltraUXThemePatcher (x32 Version: 2.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VirtualDJ Home FREE (x32 Version: 7.4)
VLC media player 2.0.7 (Version: 2.0.7)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Family Safety (Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
WinFlash (x32 Version: 2.31.1)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Wireless Console 3 (x32 Version: 3.0.21)
World of Goo (x32)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2)
بريد Windows Live (x32 Version: 15.4.3502.0922)
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================

11-09-2013 15:10:49 Entfernt Grand Theft Auto Vice City
11-09-2013 15:12:17 Installiert Grand Theft Auto Vice City
11-09-2013 15:17:00 DirectX wurde installiert
12-09-2013 10:29:41 Windows Update
13-09-2013 08:59:05 Windows Update
20-09-2013 17:43:00 Geplanter Prüfpunkt
22-09-2013 16:48:30 Installed LogMeIn Hamachi

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1F48D395-15C8-4E67-9736-1F5959462FD7} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {20D9D51C-D7EA-4D5D-8FAC-A4252DEF6031} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2011-11-15] (ASUS)
Task: {2E7EBD30-02FA-452E-8DB1-8EDBF9F276C4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-19] (Adobe Systems Incorporated)
Task: {60F398C6-F009-4FEB-B4EF-955537F134F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.)
Task: {84A77F86-B445-48DE-B57F-B89B693CD5C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.)
Task: {93F9A502-88AD-4863-B3E1-ECDE447934DB} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-11-17] (ASUSTeK Computer Inc.)
Task: {CB0055DD-951E-4AE2-A400-E1B47201BD17} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {D70CDB32-C7FE-421E-BD40-8DE23C8BD024} - System32\Tasks\Baidu PC Faster Update => $szInstallingDir\Updater.exe
Task: {DB2D2CF1-B063-4BA7-B2CE-59B073673A2C} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2011-05-30] (ASUS)
Task: {F07C1E27-1D76-4A40-9719-45B79D22430D} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-07-14 16:11 - 2010-07-14 16:11 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2011-11-17 11:33 - 2011-11-17 11:33 - 00209920 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll
2011-05-30 13:48 - 2011-05-30 13:48 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-09-21 15:00 - 2013-09-17 05:20 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\libglesv2.dll
2013-09-21 15:00 - 2013-09-17 05:20 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\libegl.dll
2013-09-21 15:00 - 2013-09-17 05:21 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll
2013-09-21 15:00 - 2013-09-17 05:21 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll
2013-09-21 15:00 - 2013-09-17 05:20 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\ME\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\ME\AppData\Roaming:NT

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/01/2013 00:45:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x6a8
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (09/30/2013 06:44:50 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (09/30/2013 06:30:03 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: gta_sa.exe, Version: 0.0.0.0, Zeitstempel: 0x437101ca
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x67484d67
ID des fehlerhaften Prozesses: 0x1070
Startzeit der fehlerhaften Anwendung: 0xgta_sa.exe0
Pfad der fehlerhaften Anwendung: gta_sa.exe1
Pfad des fehlerhaften Moduls: gta_sa.exe2
Berichtskennung: gta_sa.exe3

Error: (09/30/2013 04:59:49 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (09/30/2013 04:55:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (09/30/2013 01:07:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/30/2013 01:07:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/30/2013 10:53:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x6e0
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (09/29/2013 11:29:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x678
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (09/28/2013 09:39:11 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ASUSWSShellExt64.dll, Version: 1.1.0.27, Zeitstempel: 0x4c7f631d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000051da
ID des fehlerhaften Prozesses: 0x6c0
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3


System errors:
=============
Error: (09/30/2013 10:02:10 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/29/2013 08:42:05 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/29/2013 11:29:44 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/28/2013 11:01:12 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/27/2013 09:25:51 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/26/2013 09:54:50 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/26/2013 03:23:33 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Baidu PC Faster Service 3.7.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/26/2013 01:09:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Baidu PC App Store Service 3.8.8.1435" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (09/26/2013 01:09:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Baidu PC Faster Service 3.7.0.0" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (09/26/2013 00:51:59 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (10/01/2013 00:45:17 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da6a801cebe933b43af07C:\Windows\Explorer.EXEC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll8f2178ca-2a86-11e3-aefa-d0df9a96ee73

Error: (09/30/2013 06:44:50 PM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da

Error: (09/30/2013 06:30:03 PM) (Source: Application Error)(User: )
Description: gta_sa.exe0.0.0.0437101caunknown0.0.0.000000000c000000567484d67107001cebdf7987e0515C:\Program Files (x86)\Rockstar Games\Grand Theft Auto San Andreas\gta_sa.exeunknown8e571d20-29ed-11e3-9604-d0df9a96ee73

Error: (09/30/2013 04:59:49 PM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da

Error: (09/30/2013 04:55:56 PM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da

Error: (09/30/2013 01:07:49 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\ME\Downloads\SoftonicDownloader_for_arctic-combat.exe

Error: (09/30/2013 01:07:49 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\ME\Downloads\SoftonicDownloader_fuer_battlefield-2.exe

Error: (09/30/2013 10:53:54 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da6e001cebdba8417a739C:\Windows\Explorer.EXEC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dlld5296b79-29ad-11e3-9604-d0df9a96ee73

Error: (09/29/2013 11:29:35 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da67801cebcf64f170505C:\Windows\Explorer.EXEC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dlla6abc868-28e9-11e3-a773-d0df9a96ee73

Error: (09/28/2013 09:39:11 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ASUSWSShellExt64.dll1.1.0.274c7f631dc000000500000000000051da6c001cebc1dc527ec5fC:\Windows\Explorer.EXEC:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll103326de-2811-11e3-a3c1-d0df9a96eba3


CodeIntegrity Errors:
===================================
  Date: 2013-06-29 17:57:05.040
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:57:03.433
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:56:08.454
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:56:06.802
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:55:14.645
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:55:12.800
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:54:54.456
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:54:52.491
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:54:07.469
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-29 17:54:05.634
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 19%
Total physical RAM: 8171.71 MB
Available physical RAM: 6542.19 MB
Total Pagefile: 16341.61 MB
Available Pagefile: 14491.64 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:440.76 GB) (Free:329.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (GTA Vice City) (CDROM) (Total:1.38 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E84434FC)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=441 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Ich habe ganz komische Sachen in der letzten Zeit, der PC macht sich selbständig, die Maus wird bewegt und ich tippe hin und wieder Sachen die ich gar nicht tippe..

MFG Allor

Ich hatte auch schon alles mögliche auf dem PC, sogar ein Sality

Was wurde da gemacht?

Ich, gar nichts der ist dann weg gegangen...

Der war dann einfach weg...

Ich habe mal mit Malwarebytes gescannt und so:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.10.01.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
ME :: ME-PC [Administrator]

01.10.2013 16:33:57
MBAM-log-2013-10-01 (16-42-05).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 205512
Laufzeit: 7 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Users\ME\Downloads\SoftonicDownloader_for_arctic-combat.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.
C:\Users\ME\Downloads\SoftonicDownloader_fuer_battlefield-2.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.

(Ende)
         

Aha....

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 13-10-01.03 - ME 01.10.2013  21:11:06.1.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8172.6213 [GMT 2:00]
ausgeführt von:: c:\users\ME\Downloads\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\ME\AppData\Local\Temp\OCS\Downloads\e7b149b41928e6405df9b406451b2729\5f91f94cf1b1dcc37898b6ca40c0db1c
c:\users\ME\AppData\Local\Temp\OCS\Downloads\e7b149b41928e6405df9b406451b2729\5f91f94cf1b1dcc37898b6ca40c0db1c\IE10-Windows6.1-de-de.exe .exe
c:\users\ME\AppData\Local\Temp\streamWriter\bass.dll
c:\users\ME\AppData\Local\Temp\streamWriter\bass_aac.dll
c:\windows\SysWow64\frapsvid.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-09-01 bis 2013-10-01  ))))))))))))))))))))))))))))))
.
.
2013-10-01 14:56 . 2013-09-29 02:34	118432	----a-w-	c:\windows\system32\drivers\Bprotect.sys
2013-10-01 14:56 . 2013-09-25 11:15	34624	----a-w-	c:\windows\system32\drivers\Bfmon.sys
2013-10-01 14:56 . 2013-09-25 11:15	52032	----a-w-	c:\windows\system32\drivers\Bfilter.sys
2013-10-01 14:33 . 2013-10-01 14:33	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-10-01 14:33 . 2013-04-04 12:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-10-01 14:07 . 2013-10-01 14:07	--------	d-----w-	C:\FRST
2013-09-27 03:01 . 2013-09-27 03:01	170344	----a-w-	c:\programdata\FileSplitUpLoad.dll
2013-09-22 16:51 . 2009-03-18 16:35	33856	---ha-w-	c:\windows\system32\hamachi.sys
2013-09-22 16:51 . 2013-09-22 16:51	--------	d-----w-	c:\program files (x86)\LogMeIn Hamachi
2013-09-22 16:51 . 2013-10-01 19:27	--------	d-----w-	c:\users\ME\AppData\Local\LogMeIn Hamachi
2013-09-20 13:23 . 2013-09-20 13:23	--------	d-----w-	c:\users\ME\AppData\Local\ElevatedDiagnostics
2013-09-14 09:04 . 2013-09-14 09:04	--------	d-----w-	c:\users\ME\AppData\Roaming\ATI
2013-09-14 09:04 . 2013-09-14 09:04	--------	d-----w-	c:\users\ME\AppData\Local\ATI
2013-09-14 09:04 . 2013-09-14 09:04	--------	d-----w-	c:\programdata\ATI
2013-09-12 14:22 . 2013-09-12 14:23	--------	d-----w-	c:\program files (x86)\Overwolf
2013-09-12 14:22 . 2013-09-12 14:23	--------	d-----w-	c:\program files (x86)\Common Files\Overwolf
2013-09-12 14:22 . 2013-09-12 14:22	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2013-09-12 14:20 . 2013-10-01 17:15	--------	d-----w-	c:\users\ME\AppData\Local\Overwolf
2013-09-11 15:12 . 2002-12-05 12:12	692224	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2013-09-11 15:12 . 2002-12-05 12:10	155648	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2013-09-11 15:12 . 2002-12-02 13:22	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2013-09-11 15:12 . 2002-12-02 11:33	57344	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2013-09-11 15:12 . 2002-12-02 11:33	237568	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2013-09-11 15:11 . 2013-09-11 15:11	282756	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2013-09-11 15:11 . 2013-09-11 15:11	163972	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2013-09-07 13:47 . 2013-09-26 11:08	--------	d-----w-	c:\programdata\Baidu Security
2013-09-07 13:46 . 2013-10-01 14:53	--------	d-----w-	c:\programdata\Baidu
2013-09-07 13:46 . 2013-09-07 13:46	--------	d-----w-	c:\users\ME\AppData\Roaming\Baidu
2013-09-07 13:46 . 2013-10-01 14:52	--------	d-----w-	c:\program files (x86)\Baidu Security
2013-09-07 13:46 . 2013-09-07 13:46	--------	d-----w-	c:\users\ME\AppData\Roaming\Baidu Security
2013-09-06 15:24 . 2013-09-06 15:24	--------	d-----w-	c:\windows\SysWow64\Adobe
2013-09-05 17:44 . 2013-09-11 14:43	--------	d-----w-	c:\programdata\Avira
2013-09-05 15:23 . 2013-09-05 15:23	--------	d-----w-	c:\users\ME\AppData\Local\TNT2
2013-09-03 12:44 . 2013-09-03 12:44	--------	d-----w-	C:\AeriaGames
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-01 19:26 . 2013-06-28 17:29	45056	----a-w-	c:\windows\system32\acovcnt.exe
2013-09-19 16:51 . 2013-07-09 21:21	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-19 16:51 . 2013-07-09 21:21	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-12 10:40 . 2013-07-14 19:31	79143768	----a-w-	c:\windows\system32\MRT.exe
2013-09-05 17:31 . 2013-08-20 15:24	12872	----a-w-	c:\windows\system32\bootdelete.exe
2013-08-12 23:10 . 2013-08-12 23:10	42184	----a-w-	c:\windows\system32\drivers\taphss6.sys
2013-08-03 13:48 . 2013-08-03 13:48	98304	----a-w-	c:\windows\SysWow64\CmdLineExt.dll
2013-08-02 01:48 . 2013-09-11 13:29	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-07-29 09:50 . 2009-07-13 23:54	44544	----a-w-	c:\windows\system32\themeservice.dll
2013-07-29 09:50 . 2011-02-18 19:49	2851840	----a-w-	c:\windows\system32\themeui.dll
2013-07-29 09:50 . 2009-07-13 23:55	332288	----a-w-	c:\windows\system32\uxtheme.dll
2013-07-25 09:25 . 2013-08-14 08:10	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-14 08:10	1620992	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-07-19 01:58 . 2013-08-14 08:10	2048	----a-w-	c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-14 08:10	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2013-07-09 05:52 . 2013-08-14 08:11	224256	----a-w-	c:\windows\system32\wintrust.dll
2013-07-09 05:51 . 2013-08-14 08:10	1217024	----a-w-	c:\windows\system32\rpcrt4.dll
2013-07-09 05:46 . 2013-08-14 08:11	1472512	----a-w-	c:\windows\system32\crypt32.dll
2013-07-09 05:46 . 2013-08-14 08:11	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-07-09 05:46 . 2013-08-14 08:11	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-07-09 04:52 . 2013-08-14 08:10	663552	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2013-07-09 04:52 . 2013-08-14 08:11	175104	----a-w-	c:\windows\SysWow64\wintrust.dll
2013-07-09 04:46 . 2013-08-14 08:11	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-07-09 04:46 . 2013-08-14 08:11	1166848	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-07-09 04:46 . 2013-08-14 08:11	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-07-07 15:57 . 2013-07-07 15:57	867240	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-07-07 15:57 . 2013-07-07 15:57	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-07-07 15:57 . 2013-07-07 15:57	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-06 06:03 . 2013-08-14 08:10	1910208	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
2013-07-23 00:46	1451680	----a-w-	c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-08-22 35256]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-08-17 5732992]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
.
c:\users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
PC App Store Uninstall 3.8.8.1435.lnk - c:\windows\System32\rundll32.exe "c:\users\ME\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\Uninstall\PC App Store Uninstall\0\InstallUtility.dll", _OpenUrl -run "PC App Store Uninstall" -ini "OpenUrl.ini" [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe /start [2011-4-13 548528]
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe -d [2013-6-29 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AutoUpdateDisableNotify"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [x]
R3 BprotectEx;Baidu ProtectEx;c:\windows\System32\drivers\BprotectEx.sys;c:\windows\SYSNATIVE\drivers\BprotectEx.sys [x]
R3 cleanhlp;cleanhlp;c:\program files (x86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys;c:\program files (x86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FairplayKD;FairplayKD;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 PCFApiUtil;PCFApiUtil;c:\program files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys;c:\program files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 Bfilter;Baidu Antivirus Minifilter Driver;c:\windows\System32\drivers\Bfilter.sys;c:\windows\SYSNATIVE\drivers\Bfilter.sys [x]
S1 Bfmon;Baidu FS Monitor Driver;c:\windows\System32\drivers\Bfmon.sys;c:\windows\SYSNATIVE\drivers\Bfmon.sys [x]
S1 Bprotect;Baidu Protect;c:\windows\System32\drivers\Bprotect.sys;c:\windows\SYSNATIVE\drivers\Bprotect.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-21 12:53	1177552	----a-w-	c:\program files (x86)\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-10-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-09 16:51]
.
2013-10-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13 02:33]
.
2013-10-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13 02:33]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2010-09-02 08:41	220160	----a-w-	c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2010-09-02 08:41	220160	----a-w-	c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-13 617120]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-13 379552]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-10-14 2278504]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\windows\AsScrPro.exe
c:\program files (x86)\ASUS\Splendid\ACMON.exe
c:\program files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-10-01  21:34:21 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-10-01 19:34
.
Vor Suchlauf: 13 Verzeichnis(se), 353.555.472.384 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 353.535.336.448 Bytes frei
.
- - End Of File - - 41409023C1238579648C6C52B54A6E7E
A36C5E4F47E84449FF07ED3517B43A31
         

ComboFix 13-10-01.03 - ME 01.10.2013  21:11:06.1.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8172.6213 [GMT 2:00]
ausgeführt von:: c:\users\ME\Downloads\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\ME\AppData\Local\Temp\OCS\Downloads\e7b149b41928e6405df9b406451b2729\5f91f94cf1b1dcc37898b6ca40c0db1c
c:\users\ME\AppData\Local\Temp\OCS\Downloads\e7b149b41928e6405df9b406451b2729\5f91f94cf1b1dcc37898b6ca40c0db1c\IE10-Windows6.1-de-de.exe .exe
c:\users\ME\AppData\Local\Temp\streamWriter\bass.dll
c:\users\ME\AppData\Local\Temp\streamWriter\bass_aac.dll
c:\windows\SysWow64\frapsvid.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-09-01 bis 2013-10-01  ))))))))))))))))))))))))))))))
.
.
2013-10-01 14:56 . 2013-09-29 02:34	118432	----a-w-	c:\windows\system32\drivers\Bprotect.sys
2013-10-01 14:56 . 2013-09-25 11:15	34624	----a-w-	c:\windows\system32\drivers\Bfmon.sys
2013-10-01 14:56 . 2013-09-25 11:15	52032	----a-w-	c:\windows\system32\drivers\Bfilter.sys
2013-10-01 14:33 . 2013-10-01 14:33	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-10-01 14:33 . 2013-04-04 12:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-10-01 14:07 . 2013-10-01 14:07	--------	d-----w-	C:\FRST
2013-09-27 03:01 . 2013-09-27 03:01	170344	----a-w-	c:\programdata\FileSplitUpLoad.dll
2013-09-22 16:51 . 2009-03-18 16:35	33856	---ha-w-	c:\windows\system32\hamachi.sys
2013-09-22 16:51 . 2013-09-22 16:51	--------	d-----w-	c:\program files (x86)\LogMeIn Hamachi
2013-09-22 16:51 . 2013-10-01 19:27	--------	d-----w-	c:\users\ME\AppData\Local\LogMeIn Hamachi
2013-09-20 13:23 . 2013-09-20 13:23	--------	d-----w-	c:\users\ME\AppData\Local\ElevatedDiagnostics
2013-09-14 09:04 . 2013-09-14 09:04	--------	d-----w-	c:\users\ME\AppData\Roaming\ATI
2013-09-14 09:04 . 2013-09-14 09:04	--------	d-----w-	c:\users\ME\AppData\Local\ATI
2013-09-14 09:04 . 2013-09-14 09:04	--------	d-----w-	c:\programdata\ATI
2013-09-12 14:22 . 2013-09-12 14:23	--------	d-----w-	c:\program files (x86)\Overwolf
2013-09-12 14:22 . 2013-09-12 14:23	--------	d-----w-	c:\program files (x86)\Common Files\Overwolf
2013-09-12 14:22 . 2013-09-12 14:22	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2013-09-12 14:20 . 2013-10-01 17:15	--------	d-----w-	c:\users\ME\AppData\Local\Overwolf
2013-09-11 15:12 . 2002-12-05 12:12	692224	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2013-09-11 15:12 . 2002-12-05 12:10	155648	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2013-09-11 15:12 . 2002-12-02 13:22	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2013-09-11 15:12 . 2002-12-02 11:33	57344	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2013-09-11 15:12 . 2002-12-02 11:33	237568	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2013-09-11 15:11 . 2013-09-11 15:11	282756	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2013-09-11 15:11 . 2013-09-11 15:11	163972	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2013-09-07 13:47 . 2013-09-26 11:08	--------	d-----w-	c:\programdata\Baidu Security
2013-09-07 13:46 . 2013-10-01 14:53	--------	d-----w-	c:\programdata\Baidu
2013-09-07 13:46 . 2013-09-07 13:46	--------	d-----w-	c:\users\ME\AppData\Roaming\Baidu
2013-09-07 13:46 . 2013-10-01 14:52	--------	d-----w-	c:\program files (x86)\Baidu Security
2013-09-07 13:46 . 2013-09-07 13:46	--------	d-----w-	c:\users\ME\AppData\Roaming\Baidu Security
2013-09-06 15:24 . 2013-09-06 15:24	--------	d-----w-	c:\windows\SysWow64\Adobe
2013-09-05 17:44 . 2013-09-11 14:43	--------	d-----w-	c:\programdata\Avira
2013-09-05 15:23 . 2013-09-05 15:23	--------	d-----w-	c:\users\ME\AppData\Local\TNT2
2013-09-03 12:44 . 2013-09-03 12:44	--------	d-----w-	C:\AeriaGames
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-01 19:26 . 2013-06-28 17:29	45056	----a-w-	c:\windows\system32\acovcnt.exe
2013-09-19 16:51 . 2013-07-09 21:21	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-19 16:51 . 2013-07-09 21:21	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-12 10:40 . 2013-07-14 19:31	79143768	----a-w-	c:\windows\system32\MRT.exe
2013-09-05 17:31 . 2013-08-20 15:24	12872	----a-w-	c:\windows\system32\bootdelete.exe
2013-08-12 23:10 . 2013-08-12 23:10	42184	----a-w-	c:\windows\system32\drivers\taphss6.sys
2013-08-03 13:48 . 2013-08-03 13:48	98304	----a-w-	c:\windows\SysWow64\CmdLineExt.dll
2013-08-02 01:48 . 2013-09-11 13:29	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-07-29 09:50 . 2009-07-13 23:54	44544	----a-w-	c:\windows\system32\themeservice.dll
2013-07-29 09:50 . 2011-02-18 19:49	2851840	----a-w-	c:\windows\system32\themeui.dll
2013-07-29 09:50 . 2009-07-13 23:55	332288	----a-w-	c:\windows\system32\uxtheme.dll
2013-07-25 09:25 . 2013-08-14 08:10	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-14 08:10	1620992	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-07-19 01:58 . 2013-08-14 08:10	2048	----a-w-	c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-14 08:10	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2013-07-09 05:52 . 2013-08-14 08:11	224256	----a-w-	c:\windows\system32\wintrust.dll
2013-07-09 05:51 . 2013-08-14 08:10	1217024	----a-w-	c:\windows\system32\rpcrt4.dll
2013-07-09 05:46 . 2013-08-14 08:11	1472512	----a-w-	c:\windows\system32\crypt32.dll
2013-07-09 05:46 . 2013-08-14 08:11	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-07-09 05:46 . 2013-08-14 08:11	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-07-09 04:52 . 2013-08-14 08:10	663552	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2013-07-09 04:52 . 2013-08-14 08:11	175104	----a-w-	c:\windows\SysWow64\wintrust.dll
2013-07-09 04:46 . 2013-08-14 08:11	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-07-09 04:46 . 2013-08-14 08:11	1166848	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-07-09 04:46 . 2013-08-14 08:11	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-07-07 15:57 . 2013-07-07 15:57	867240	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-07-07 15:57 . 2013-07-07 15:57	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-07-07 15:57 . 2013-07-07 15:57	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-06 06:03 . 2013-08-14 08:10	1910208	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
2013-07-23 00:46	1451680	----a-w-	c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-08-22 35256]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-08-17 5732992]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
.
c:\users\ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
PC App Store Uninstall 3.8.8.1435.lnk - c:\windows\System32\rundll32.exe "c:\users\ME\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\Uninstall\PC App Store Uninstall\0\InstallUtility.dll", _OpenUrl -run "PC App Store Uninstall" -ini "OpenUrl.ini" [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe /start [2011-4-13 548528]
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe -d [2013-6-29 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AutoUpdateDisableNotify"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [x]
R3 BprotectEx;Baidu ProtectEx;c:\windows\System32\drivers\BprotectEx.sys;c:\windows\SYSNATIVE\drivers\BprotectEx.sys [x]
R3 cleanhlp;cleanhlp;c:\program files (x86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys;c:\program files (x86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FairplayKD;FairplayKD;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 PCFApiUtil;PCFApiUtil;c:\program files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys;c:\program files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 Bfilter;Baidu Antivirus Minifilter Driver;c:\windows\System32\drivers\Bfilter.sys;c:\windows\SYSNATIVE\drivers\Bfilter.sys [x]
S1 Bfmon;Baidu FS Monitor Driver;c:\windows\System32\drivers\Bfmon.sys;c:\windows\SYSNATIVE\drivers\Bfmon.sys [x]
S1 Bprotect;Baidu Protect;c:\windows\System32\drivers\Bprotect.sys;c:\windows\SYSNATIVE\drivers\Bprotect.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-21 12:53	1177552	----a-w-	c:\program files (x86)\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-10-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-09 16:51]
.
2013-10-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13 02:33]
.
2013-10-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13 02:33]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2010-09-02 08:41	220160	----a-w-	c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2010-09-02 08:41	220160	----a-w-	c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-13 617120]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-13 379552]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-10-14 2278504]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\windows\AsScrPro.exe
c:\program files (x86)\ASUS\Splendid\ACMON.exe
c:\program files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-10-01  21:34:21 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-10-01 19:34
.
Vor Suchlauf: 13 Verzeichnis(se), 353.555.472.384 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 353.535.336.448 Bytes frei
.
- - End Of File - - 41409023C1238579648C6C52B54A6E7E
A36C5E4F47E84449FF07ED3517B43A31
         

Es kommt immer noch die Fehlermeldungen, Windows reagiert nicht mehr.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.