|
Plagegeister aller Art und deren Bekämpfung: cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
18.10.2013, 04:05 | #1 |
| cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! Hi! Wie im Titel dieses Themas steht, öffnet sich bei mir bei PC Start die cmg.exe mehrmals. Jedoch unbemerkt bis sich bei PC-Spielen oder bei anderen Programmen der Rechner langsamer anfüllt. Ich hab bemerkt das sich halt diese cmg.exe mehrmals öffnet. Ebenso hab ich eine Timeserver.exe und eine WindowsTime.exe dessen Ursprung unklar ist und die ebenfalls viel CPU verbrauchen. Ich hab gegoogelt und bin dabei mehrmals auf das Wort Virus und Malware gekommen. Nunja und somit bin ich auch hier auf das Forum gekommen und hoffe ihr könnt mir weiterhelfen da ich keine wirklichen Lösungen für das Problem im Internet gefunden habe. Hab als Antivirus Programm Microsoft Security Essentials und dieser gibt mir keine Hinweise. (Weiß hier aber auch nicht wie ich eine Log File bekomme). Hoffe ihr könnt mir helfen. Werde hier echt Paranoid! Gruß, Serplex! |
18.10.2013, 07:34 | #2 |
/// the machine /// TB-Ausbilder | cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
18.10.2013, 14:14 | #3 |
| cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! Ok hier die FRST. Logfile
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Ossiel (administrator) on NO_RE_PLAY on 18-10-2013 15:07:17 Running from C:\Users\Ossiel\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft) C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Users\Ossiel\AppData\Roaming\Java\jushed.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-08-12] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [zASRockInstantBoot] - [x] HKCU\...\Run: [ASRockXTU] - [x] HKCU\...\Run: [DAEMON Tools Lite] - E:\Daemon Tools\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd) HKCU\...\Run: [ALLUpdate] - "F:\OpenSubtitlesPlayer\ALLUpdate.exe" "sleep" HKCU\...\Run: [AdobeBridge] - [x] HKCU\...\Run: [OracleMicrosystems] - C:\Users\Ossiel\AppData\Roaming\Java\jushed.exe [835584 2013-05-03] () HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe -silent HKCU\...\Run: [idle32] - C:\Users\Ossiel\Documents\wincmd.exe [ ] () MountPoints2: {0e94c27a-1037-11e2-afe0-806e6f6e6963} - G:\ASRSetup.exe MountPoints2: {d15d3d46-13f5-11e2-9c7c-bc5ff45cff19} - J:\autorun.exe HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.) HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2012-09-25] (Brother Industries, Ltd.) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH) AppInit_DLLs: C:\Windows\system32\nvinitx.dll [266448 2013-06-21] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [214448 2013-06-21] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xABF5CE7F13A4CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Chrome: ======= CHR RestoreOnStartup: "hxxp://google.de/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Extension: (ProxTube) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0 CHR Extension: (YouTube) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (YouTube Unblocker) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.5_0 CHR Extension: (Gmail) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] () R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-08-12] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-08-12] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-10-17] () R2 Time; C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe [10752 2013-09-22] (Microsoft) ==================== Drivers (Whitelisted) ==================== R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-12] (DT Soft Ltd) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-18 15:06 - 2013-10-18 15:06 - 00000000 ____D C:\FRST 2013-10-18 15:04 - 2013-10-18 15:04 - 01954124 _____ (Farbar) C:\Users\Ossiel\Downloads\FRST64.exe 2013-10-18 04:41 - 2013-10-18 04:41 - 05134711 _____ (Swearware) C:\Users\Ossiel\Downloads\ComboFix.exe 2013-10-17 21:28 - 2013-10-17 21:28 - 00056041 _____ C:\Users\Ossiel\Downloads\Belphegor.nzb 2013-10-17 21:27 - 2013-10-17 21:27 - 00012053 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod (1).nzb 2013-10-17 21:25 - 2013-10-17 21:25 - 00030898 _____ C:\Users\Ossiel\Downloads\Behemoth Apostasy.nzb 2013-10-17 21:22 - 2013-10-17 21:22 - 00031379 _____ C:\Users\Ossiel\Downloads\Behemoth Evangelion.nzb 2013-10-17 21:21 - 2013-10-17 21:21 - 00041194 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod.nzb 2013-10-17 21:18 - 2013-10-17 21:18 - 00013932 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter der weg (1).nzb 2013-10-17 21:15 - 2013-10-17 21:15 - 00021330 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter Der weg.nzb 2013-10-17 21:14 - 2013-10-17 21:14 - 00014156 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter samurai.nzb 2013-10-17 21:13 - 2013-10-17 21:13 - 00020519 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter moral.nzb 2013-10-17 21:11 - 2013-10-17 21:11 - 00016496 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (2).nzb 2013-10-17 21:09 - 2013-10-17 21:09 - 00008107 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (1).nzb 2013-10-17 21:08 - 2013-10-17 21:08 - 00040428 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter licht.nzb 2013-10-17 21:07 - 2013-10-17 21:07 - 00016682 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede.nzb 2013-10-17 20:56 - 2013-10-17 20:56 - 00091197 _____ C:\Users\Ossiel\Downloads\Heidevolk.nzb 2013-10-17 20:56 - 2013-10-17 20:56 - 00088475 _____ C:\Users\Ossiel\Downloads\Heidevolk Batavi.nzb 2013-10-17 20:53 - 2013-10-17 20:53 - 01141328 _____ (BitTorrent Inc.) C:\Users\Ossiel\Downloads\utorrent3.3.2.exe 2013-10-17 20:53 - 2013-10-17 20:53 - 00030788 _____ C:\Users\Ossiel\Downloads\[kickass.to]folkstone.sgangogatt.torrent 2013-10-17 20:51 - 2013-10-17 21:02 - 127094903 _____ C:\Users\Ossiel\Downloads\Folk_Stone-Il_Confine-2012.rar 2013-10-17 20:47 - 2013-10-17 20:47 - 00026747 _____ C:\Users\Ossiel\Downloads\sgangogatt.nzb 2013-10-17 20:40 - 2013-10-17 20:40 - 00000676 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom (1).nzb 2013-10-17 20:39 - 2013-10-17 20:39 - 00008639 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom.nzb 2013-10-17 20:38 - 2013-10-17 20:38 - 00040073 _____ C:\Users\Ossiel\Downloads\kataklysm in the arms.nzb 2013-10-17 20:35 - 2013-10-17 20:35 - 00042451 _____ C:\Users\Ossiel\Downloads\kataklysm prevail.nzb 2013-10-17 20:33 - 2013-10-17 20:33 - 00048822 _____ C:\Users\Ossiel\Downloads\kataklysm victim.nzb 2013-10-17 20:15 - 2013-10-17 20:15 - 00648242 _____ C:\Users\Ossiel\Downloads\kataklysm.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00130233 _____ C:\Users\Ossiel\Downloads\Satyricon Satyricon.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00013139 _____ C:\Users\Ossiel\Downloads\Satyricon The Age.nzb 2013-10-17 20:04 - 2013-10-17 20:04 - 00488663 _____ C:\Users\Ossiel\Downloads\Amon Amarth.nzb 2013-10-17 20:03 - 2013-10-17 20:08 - 15532032 _____ C:\Users\Ossiel\Downloads\0013.rar 2013-10-17 19:58 - 2013-10-17 19:58 - 00033821 _____ C:\Users\Ossiel\Downloads\Krbholz.nzb 2013-10-17 19:52 - 2013-10-17 19:52 - 00027385 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala (1).nzb 2013-10-17 19:41 - 2013-10-17 19:41 - 00010608 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala.nzb 2013-10-17 19:37 - 2013-10-17 19:37 - 00064474 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis (1).nzb 2013-10-17 19:35 - 2013-10-17 19:35 - 00030872 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis .nzb 2013-10-17 19:34 - 2013-10-17 19:34 - 00152931 _____ C:\Users\Ossiel\Downloads\Korpiklaani.nzb 2013-10-17 07:47 - 2013-10-17 07:47 - 00000465 _____ C:\Users\Ossiel\Desktop\AC3SP - Verknüpfung.lnk 2013-10-17 07:11 - 2013-10-17 07:29 - 00005117 _____ C:\Users\Ossiel\Documents\TombRaider.log 2013-10-17 06:04 - 2013-10-17 06:04 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2013-10-17 05:34 - 2013-10-17 05:34 - 00000649 _____ C:\Users\Ossiel\Downloads\Assassins Creed III crack.nzb 2013-10-17 05:33 - 2013-10-17 05:33 - 00000000 ____D C:\Users\Ossiel\Documents\cgnew 2013-10-17 05:32 - 2013-10-17 05:32 - 00859652 _____ C:\Users\Ossiel\Documents\thumbscl.exe 2013-10-17 05:32 - 2013-10-17 05:32 - 00254468 _____ C:\Users\Ossiel\Documents\dwm.exe 2013-10-17 05:32 - 2013-06-12 15:15 - 00245795 _____ C:\Users\Ossiel\Documents\libcurl.dll 2013-10-17 05:32 - 2013-06-12 15:15 - 00119888 _____ (Open Source Software community LGPL) C:\Users\Ossiel\Documents\pthreadGC2.dll 2013-10-17 05:32 - 2013-06-12 15:15 - 00100864 _____ C:\Users\Ossiel\Documents\zlib1.dll 2013-10-17 05:31 - 2013-10-17 05:33 - 07684100 _____ C:\Users\Ossiel\Documents\uninx84.exe 2013-10-17 05:31 - 2013-10-17 05:31 - 00009480 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack (1).nzb 2013-10-17 05:31 - 2013-10-17 05:31 - 00000582 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack.nzb 2013-10-17 05:29 - 2013-10-17 05:29 - 00000641 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack (1).nzb 2013-10-17 05:29 - 2013-05-11 20:20 - 89639428 _____ C:\Users\Ossiel\Documents\wincmd.exe 2013-10-17 05:27 - 2013-10-17 07:43 - 00000000 ____D C:\Users\Ossiel\Documents\Assassin's Creed III 2013-10-17 05:27 - 2013-10-17 06:30 - 00000000 ____D C:\Users\Ossiel\AppData\Local\Ubisoft Game Launcher 2013-10-17 05:27 - 2013-10-17 05:27 - 00000661 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack.nzb 2013-10-17 05:13 - 2013-10-17 06:04 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-10-17 03:04 - 2013-10-17 03:04 - 06474236 _____ C:\Users\Ossiel\Downloads\Tomb Raider.nzb 2013-10-17 03:02 - 2013-10-17 03:02 - 05547319 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 (1).nzb 2013-10-17 02:44 - 2013-10-17 02:44 - 03990374 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW.nzb 2013-10-17 01:50 - 2013-10-17 01:50 - 03271014 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 SKIDROW.nzb 2013-10-17 00:59 - 2013-10-17 01:00 - 00810624 _____ C:\Users\Ossiel\Downloads\Official Playstation 3 Emulator v3.7.531 by RELOADED_updated 09-30-2013.zip 2013-10-17 00:54 - 2013-10-17 00:55 - 07214454 _____ C:\Users\Ossiel\Downloads\PSeMu3.zip 2013-10-17 00:43 - 2013-10-17 00:43 - 00000598 _____ C:\Users\Ossiel\Desktop\CINEMA 4D 64 Bit.lnk 2013-10-17 00:19 - 2013-10-17 00:19 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-17 00:12 - 2013-10-17 00:12 - 00000588 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15 Keygen.nzb 2013-10-16 22:23 - 2013-10-16 22:23 - 03584901 _____ C:\Users\Ossiel\Downloads\Video Copilot.nzb 2013-10-16 22:20 - 2013-10-16 22:20 - 02210271 _____ C:\Users\Ossiel\Downloads\Adobe Creative.nzb 2013-10-16 22:07 - 2013-10-16 22:07 - 02749734 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15.nzb 2013-10-16 21:59 - 2013-10-16 22:00 - 00000000 ____D C:\Users\Ossiel\Desktop\Magnis Gaming 2013-10-15 23:42 - 2013-10-16 00:08 - 00000000 ____D C:\Program Files\CCleaner 2013-10-15 22:56 - 2013-10-15 22:56 - 00130907 _____ C:\Users\Ossiel\Downloads\binkw32.zip 2013-10-15 22:42 - 2013-10-17 07:11 - 00000000 ____D C:\Users\Ossiel\AppData\Local\AppName 2013-10-15 22:42 - 2013-10-17 07:11 - 00000000 ____D C:\Temporary 2013-10-15 22:42 - 2013-10-15 22:42 - 00000000 ____D C:\Program Files (x86)\AppName 2013-10-15 22:09 - 2013-10-15 22:09 - 04643745 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 German.nzb 2013-10-15 20:16 - 2013-10-15 20:16 - 03018598 _____ C:\Users\Ossiel\Downloads\Tomb raider 2013.nzb 2013-10-13 12:15 - 2013-10-13 12:15 - 00079303 _____ C:\Users\Ossiel\Downloads\Dxtory.nzb 2013-10-13 05:59 - 2013-10-13 05:59 - 00001267 _____ C:\Users\Public\Desktop\DreadOut Demo.lnk 2013-10-13 05:58 - 2013-10-13 05:58 - 00000000 ____D C:\Program Files (x86)\DIGITAL HAPPINESS 2013-10-12 21:25 - 2013-10-16 22:01 - 00000000 ____D C:\Users\Ossiel\Desktop\RM Infinity 2013-10-11 20:31 - 2013-10-11 20:31 - 00272349 _____ C:\Users\Ossiel\Downloads\Slender The Arrival.nzb 2013-10-11 19:28 - 2013-10-11 19:29 - 01086283 _____ C:\Users\Ossiel\Downloads\The Walking Dead Survival Instinct .nzb 2013-10-10 06:19 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-10 06:19 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-10 06:19 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-10 06:19 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-10 06:19 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-10 06:19 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-10 06:19 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-10 06:19 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-10 06:19 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-10 06:19 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-09 22:15 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-09 22:15 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-09 22:15 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-09 22:15 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-09 22:15 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-09 22:15 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-09 22:15 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-09 22:15 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-09 22:15 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-09 22:15 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-09 22:15 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-09 22:15 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-09 22:15 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-09 22:15 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-09 22:15 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-09 22:15 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-09 22:15 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-09 22:15 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-09 22:15 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-09 22:15 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-09 22:15 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-09 22:15 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 22:15 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 22:15 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-09 22:15 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-09 22:15 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2013-10-09 22:15 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-09 22:15 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-09 22:15 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-09 22:15 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-09 22:15 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-09 22:15 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-09 22:15 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-09 22:15 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-09 22:15 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-09 22:15 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 22:15 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-09 22:15 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-09 22:15 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-09 22:15 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-09 22:15 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-09 22:15 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-09 22:15 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-09 22:15 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-09 22:15 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-09 22:15 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 22:14 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-09 21:21 - 2013-10-09 23:50 - 00000000 ____D C:\Users\Ossiel\Desktop\Bewerbung 2013-10-09 21:14 - 2013-10-09 21:14 - 00000000 ____D C:\Users\Ossiel\AppData\Local\PDF24 2013-10-09 21:13 - 2013-10-09 21:14 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-10-09 21:11 - 2013-10-09 21:11 - 15911976 _____ (Geek Software GmbH ) C:\Users\Ossiel\Downloads\pdf24-creator-5.7.0.exe 2013-10-09 12:29 - 2013-10-09 12:29 - 00000000 _____ C:\Users\Ossiel\Sti_Trace.log 2013-10-07 02:31 - 2013-10-07 02:31 - 00001456 _____ C:\Users\Ossiel\AppData\Local\Adobe Save for Web 12.0 Prefs 2013-10-06 17:46 - 2013-10-06 17:47 - 00066231 _____ C:\Users\Ossiel\Downloads\523fc8aa5b1180c5857c7470b1e43bbb 2013-10-06 02:46 - 2013-10-06 02:46 - 00450668 _____ C:\Users\Ossiel\Downloads\The Fighters German.nzb 2013-10-06 02:32 - 2013-10-06 02:32 - 00428374 _____ C:\Users\Ossiel\Downloads\Never Back Down German.nzb 2013-10-06 00:06 - 2013-10-06 00:06 - 00027456 _____ C:\Users\Ossiel\Downloads\avengers_ac3d_720p-Westerwelle.nzb 2013-10-05 22:34 - 2013-10-05 22:34 - 01917732 _____ C:\Users\Ossiel\Downloads\Avengers 2012 German.nzb 2013-10-01 20:39 - 2013-10-01 20:42 - 06848589 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 02 - City of Ashes.[pdf.rtf.epub.jpg].rar 2013-10-01 16:48 - 2013-10-01 16:48 - 00001282 _____ C:\Users\Ossiel\Desktop\Snip.lnk 2013-09-29 20:58 - 2013-09-29 20:59 - 00000000 ____D C:\Users\Ossiel\Desktop\Mama Bilder 2013-09-28 22:53 - 2013-09-28 22:54 - 00000000 ____D C:\Users\Ossiel\Desktop\irgend ein müll ey 2013-09-27 06:24 - 2013-09-27 06:24 - 03428168 _____ C:\Users\Ossiel\Downloads\Killer Joe German.nzb 2013-09-27 06:19 - 2013-09-27 06:19 - 02729721 _____ C:\Users\Ossiel\Downloads\Ruby Sparks German.nzb 2013-09-27 06:17 - 2013-09-27 06:17 - 01752657 _____ C:\Users\Ossiel\Downloads\Spring Breakers German.nzb 2013-09-27 06:13 - 2013-09-27 06:13 - 01075430 _____ C:\Users\Ossiel\Downloads\Silver Linings German.nzb 2013-09-27 06:05 - 2013-09-27 06:05 - 02721136 _____ C:\Users\Ossiel\Downloads\Alex Cross German.nzb 2013-09-27 06:00 - 2013-09-27 06:00 - 02537396 _____ C:\Users\Ossiel\Downloads\The Place beyond the pines German.nzb 2013-09-27 05:52 - 2013-09-27 05:52 - 00629236 _____ C:\Users\Ossiel\Downloads\Der nLchste bitte.nzb 2013-09-27 05:45 - 2013-09-27 05:45 - 00756447 _____ C:\Users\Ossiel\Downloads\Cold Blood Kein Ausweg German.nzb 2013-09-27 05:35 - 2013-09-27 05:35 - 01087254 _____ C:\Users\Ossiel\Downloads\Argo 2012 German.nzb 2013-09-27 05:34 - 2013-09-27 05:34 - 01080916 _____ C:\Users\Ossiel\Downloads\Gangster Squad German.nzb 2013-09-27 05:27 - 2013-09-27 05:27 - 01518241 _____ C:\Users\Ossiel\Downloads\Zero Dark Thirty German.nzb 2013-09-27 05:24 - 2013-09-27 05:24 - 00892296 _____ C:\Users\Ossiel\Downloads\Red Dawn German.nzb 2013-09-27 00:38 - 2012-03-19 11:07 - 00023256 _____ C:\Users\Ossiel\Downloads\Basica solo letras para dafont lista__.ttf 2013-09-27 00:24 - 2013-09-27 00:24 - 00009439 _____ C:\Users\Ossiel\Downloads\basica_oxcer.zip 2013-09-24 23:49 - 2013-09-24 23:49 - 03375769 _____ C:\Users\Ossiel\Downloads\overlaymagnisgaming.psd 2013-09-22 02:08 - 2013-09-22 02:08 - 00003196 _____ C:\Users\Ossiel\Downloads\Outlast Crack.nzb 2013-09-22 02:07 - 2013-09-22 02:07 - 00000563 _____ C:\Users\Public\Desktop\Outlast.lnk 2013-09-22 01:41 - 2013-09-22 01:41 - 02861525 _____ C:\Users\Ossiel\Downloads\picozip-recovery-tool_13451.exe 2013-09-22 01:41 - 2013-09-22 01:41 - 00000000 ____D C:\Program Files (x86)\PicoZipRT 2013-09-22 01:36 - 2013-09-22 01:36 - 01376768 _____ C:\Users\Ossiel\Downloads\7z920-x64.msi 2013-09-22 01:36 - 2013-09-22 01:36 - 00000000 ____D C:\Program Files\7-Zip 2013-09-21 21:03 - 2013-09-21 21:03 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2013-09-21 20:50 - 2013-09-21 20:51 - 13901152 _____ (Disc Soft Ltd) C:\Users\Ossiel\Downloads\DTLite4471-0333.exe 2013-09-21 19:39 - 2013-09-21 19:39 - 01388163 _____ C:\Users\Ossiel\Downloads\Pitch Perfect German.nzb 2013-09-21 17:57 - 2013-09-21 17:57 - 02792711 _____ C:\Users\Ossiel\Downloads\Life of Pi German.nzb 2013-09-21 17:51 - 2013-09-21 17:51 - 01582690 _____ C:\Users\Ossiel\Downloads\Killing them Softly German.nzb 2013-09-21 17:47 - 2013-09-21 17:47 - 00556972 _____ C:\Users\Ossiel\Downloads\John Carter German.nzb 2013-09-21 17:44 - 2013-09-21 17:44 - 02119308 _____ C:\Users\Ossiel\Downloads\Hotel Transsilvanien German.nzb 2013-09-21 17:40 - 2013-09-21 17:40 - 00985822 _____ C:\Users\Ossiel\Downloads\Hit and Run German.nzb 2013-09-21 17:32 - 2013-09-21 17:32 - 01311987 _____ C:\Users\Ossiel\Downloads\Outlast.nzb 2013-09-21 17:31 - 2013-09-21 17:31 - 01171752 _____ C:\Users\Ossiel\Downloads\Frankenweenie German.nzb 2013-09-21 17:26 - 2013-09-21 17:26 - 03752867 _____ C:\Users\Ossiel\Downloads\Dark Shadows German.nzb 2013-09-21 17:25 - 2013-09-21 17:25 - 00747384 _____ C:\Users\Ossiel\Downloads\dark_shadows_2012_rerip_720p_bluray_x264-amiable.nzb 2013-09-21 17:17 - 2013-09-21 17:17 - 01153955 _____ C:\Users\Ossiel\Downloads\Cold Light of day German.nzb 2013-09-21 17:14 - 2013-09-21 17:14 - 03693519 _____ C:\Users\Ossiel\Downloads\Cloud Atlas German.nzb 2013-09-21 17:06 - 2013-09-21 17:06 - 02253467 _____ C:\Users\Ossiel\Downloads\Das Bourne VermLchtnis.nzb 2013-09-21 17:01 - 2013-09-21 17:01 - 02986013 _____ C:\Users\Ossiel\Downloads\Hnsel und Gretel-Hexenjger 2013 1080p AVCHD.nzb 2013-09-21 16:57 - 2013-09-21 16:57 - 01764581 _____ C:\Users\Ossiel\Downloads\Kick Ass German 2010.nzb 2013-09-21 16:56 - 2013-09-21 16:56 - 04341556 _____ C:\Users\Ossiel\Downloads\Kick Ass 2010.nzb 2013-09-21 16:54 - 2013-09-21 16:54 - 02401634 _____ C:\Users\Ossiel\Downloads\Sinister German.nzb 2013-09-21 16:51 - 2013-09-21 16:51 - 01085965 _____ C:\Users\Ossiel\Downloads\MAMA german 2013.nzb 2013-09-21 16:47 - 2013-09-21 16:47 - 01480310 _____ C:\Users\Ossiel\Downloads\Apparition German.nzb 2013-09-21 16:42 - 2013-09-21 16:42 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt (1).nzb 2013-09-21 16:40 - 2013-09-21 16:40 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt.nzb 2013-09-21 06:35 - 2013-09-21 06:37 - 04913399 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 01 - City of Bones.[pdf.epub.jpg].rar 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore.torrent 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore (1).torrent ==================== One Month Modified Files and Folders ======= 2013-10-18 15:06 - 2013-10-18 15:06 - 00000000 ____D C:\FRST 2013-10-18 15:04 - 2013-10-18 15:04 - 01954124 _____ (Farbar) C:\Users\Ossiel\Downloads\FRST64.exe 2013-10-18 15:04 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-18 15:04 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-18 15:02 - 2011-04-12 09:43 - 09962168 _____ C:\Windows\system32\perfh007.dat 2013-10-18 15:02 - 2011-04-12 09:43 - 03037044 _____ C:\Windows\system32\perfc007.dat 2013-10-18 15:02 - 2009-07-14 07:13 - 00006212 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-18 15:00 - 2012-10-07 00:34 - 02091563 _____ C:\Windows\WindowsUpdate.log 2013-10-18 14:57 - 2013-08-16 20:47 - 00000000 ____D C:\ProgramData\NVIDIA 2013-10-18 14:57 - 2012-10-07 00:54 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-18 14:57 - 2012-10-07 00:49 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2013-10-18 14:57 - 2010-11-21 05:47 - 00010560 _____ C:\Windows\PFRO.log 2013-10-18 14:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-18 14:57 - 2009-07-14 06:51 - 00117338 _____ C:\Windows\setupact.log 2013-10-18 08:34 - 2012-10-07 00:54 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-18 04:41 - 2013-10-18 04:41 - 05134711 _____ (Swearware) C:\Users\Ossiel\Downloads\ComboFix.exe 2013-10-18 03:05 - 2012-10-07 01:32 - 00000000 ____D C:\Users\Ossiel\AppData\Local\PMB Files 2013-10-18 03:05 - 2012-10-07 01:32 - 00000000 ____D C:\ProgramData\PMB Files 2013-10-17 21:28 - 2013-10-17 21:28 - 00056041 _____ C:\Users\Ossiel\Downloads\Belphegor.nzb 2013-10-17 21:27 - 2013-10-17 21:27 - 00012053 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod (1).nzb 2013-10-17 21:25 - 2013-10-17 21:25 - 00030898 _____ C:\Users\Ossiel\Downloads\Behemoth Apostasy.nzb 2013-10-17 21:22 - 2013-10-17 21:22 - 00031379 _____ C:\Users\Ossiel\Downloads\Behemoth Evangelion.nzb 2013-10-17 21:21 - 2013-10-17 21:21 - 00041194 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod.nzb 2013-10-17 21:18 - 2013-10-17 21:18 - 00013932 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter der weg (1).nzb 2013-10-17 21:15 - 2013-10-17 21:15 - 00021330 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter Der weg.nzb 2013-10-17 21:14 - 2013-10-17 21:14 - 00014156 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter samurai.nzb 2013-10-17 21:13 - 2013-10-17 21:13 - 00020519 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter moral.nzb 2013-10-17 21:11 - 2013-10-17 21:11 - 00016496 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (2).nzb 2013-10-17 21:09 - 2013-10-17 21:09 - 00008107 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (1).nzb 2013-10-17 21:08 - 2013-10-17 21:08 - 00040428 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter licht.nzb 2013-10-17 21:07 - 2013-10-17 21:07 - 00016682 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede.nzb 2013-10-17 21:02 - 2013-10-17 20:51 - 127094903 _____ C:\Users\Ossiel\Downloads\Folk_Stone-Il_Confine-2012.rar 2013-10-17 21:01 - 2012-10-07 01:16 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\vlc 2013-10-17 20:59 - 2012-10-18 17:59 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\uTorrent 2013-10-17 20:56 - 2013-10-17 20:56 - 00091197 _____ C:\Users\Ossiel\Downloads\Heidevolk.nzb 2013-10-17 20:56 - 2013-10-17 20:56 - 00088475 _____ C:\Users\Ossiel\Downloads\Heidevolk Batavi.nzb 2013-10-17 20:53 - 2013-10-17 20:53 - 01141328 _____ (BitTorrent Inc.) C:\Users\Ossiel\Downloads\utorrent3.3.2.exe 2013-10-17 20:53 - 2013-10-17 20:53 - 00030788 _____ C:\Users\Ossiel\Downloads\[kickass.to]folkstone.sgangogatt.torrent 2013-10-17 20:47 - 2013-10-17 20:47 - 00026747 _____ C:\Users\Ossiel\Downloads\sgangogatt.nzb 2013-10-17 20:40 - 2013-10-17 20:40 - 00000676 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom (1).nzb 2013-10-17 20:39 - 2013-10-17 20:39 - 00008639 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom.nzb 2013-10-17 20:38 - 2013-10-17 20:38 - 00040073 _____ C:\Users\Ossiel\Downloads\kataklysm in the arms.nzb 2013-10-17 20:35 - 2013-10-17 20:35 - 00042451 _____ C:\Users\Ossiel\Downloads\kataklysm prevail.nzb 2013-10-17 20:33 - 2013-10-17 20:33 - 00048822 _____ C:\Users\Ossiel\Downloads\kataklysm victim.nzb 2013-10-17 20:15 - 2013-10-17 20:15 - 00648242 _____ C:\Users\Ossiel\Downloads\kataklysm.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00130233 _____ C:\Users\Ossiel\Downloads\Satyricon Satyricon.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00013139 _____ C:\Users\Ossiel\Downloads\Satyricon The Age.nzb 2013-10-17 20:08 - 2013-10-17 20:03 - 15532032 _____ C:\Users\Ossiel\Downloads\0013.rar 2013-10-17 20:04 - 2013-10-17 20:04 - 00488663 _____ C:\Users\Ossiel\Downloads\Amon Amarth.nzb 2013-10-17 19:58 - 2013-10-17 19:58 - 00033821 _____ C:\Users\Ossiel\Downloads\Krbholz.nzb 2013-10-17 19:52 - 2013-10-17 19:52 - 00027385 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala (1).nzb 2013-10-17 19:41 - 2013-10-17 19:41 - 00010608 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala.nzb 2013-10-17 19:37 - 2013-10-17 19:37 - 00064474 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis (1).nzb 2013-10-17 19:35 - 2013-10-17 19:35 - 00030872 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis .nzb 2013-10-17 19:34 - 2013-10-17 19:34 - 00152931 _____ C:\Users\Ossiel\Downloads\Korpiklaani.nzb 2013-10-17 07:47 - 2013-10-17 07:47 - 00000465 _____ C:\Users\Ossiel\Desktop\AC3SP - Verknüpfung.lnk 2013-10-17 07:45 - 2012-10-07 00:34 - 00000000 ____D C:\Users\Ossiel\AppData\Local\VirtualStore 2013-10-17 07:43 - 2013-10-17 05:27 - 00000000 ____D C:\Users\Ossiel\Documents\Assassin's Creed III 2013-10-17 07:43 - 2012-10-12 04:57 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite 2013-10-17 07:43 - 2012-10-07 00:34 - 00000000 ____D C:\Users\Ossiel 2013-10-17 07:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-10-17 07:29 - 2013-10-17 07:11 - 00005117 _____ C:\Users\Ossiel\Documents\TombRaider.log 2013-10-17 07:11 - 2013-10-15 22:42 - 00000000 ____D C:\Users\Ossiel\AppData\Local\AppName 2013-10-17 07:11 - 2013-10-15 22:42 - 00000000 ____D C:\Temporary 2013-10-17 07:11 - 2012-10-13 05:51 - 00000000 ____D C:\Users\Ossiel\AppData\Local\SKIDROW 2013-10-17 06:30 - 2013-10-17 05:27 - 00000000 ____D C:\Users\Ossiel\AppData\Local\Ubisoft Game Launcher 2013-10-17 06:04 - 2013-10-17 06:04 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2013-10-17 06:04 - 2013-10-17 05:13 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-10-17 06:04 - 2012-10-26 20:54 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-10-17 06:04 - 2012-10-26 20:54 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe 2013-10-17 06:04 - 2012-10-07 05:07 - 00152705 _____ C:\Windows\DirectX.log 2013-10-17 06:02 - 2012-10-07 00:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-10-17 05:34 - 2013-10-17 05:34 - 00000649 _____ C:\Users\Ossiel\Downloads\Assassins Creed III crack.nzb 2013-10-17 05:33 - 2013-10-17 05:33 - 00000000 ____D C:\Users\Ossiel\Documents\cgnew 2013-10-17 05:33 - 2013-10-17 05:31 - 07684100 _____ C:\Users\Ossiel\Documents\uninx84.exe 2013-10-17 05:32 - 2013-10-17 05:32 - 00859652 _____ C:\Users\Ossiel\Documents\thumbscl.exe 2013-10-17 05:32 - 2013-10-17 05:32 - 00254468 _____ C:\Users\Ossiel\Documents\dwm.exe 2013-10-17 05:31 - 2013-10-17 05:31 - 00009480 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack (1).nzb 2013-10-17 05:31 - 2013-10-17 05:31 - 00000582 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack.nzb 2013-10-17 05:29 - 2013-10-17 05:29 - 00000641 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack (1).nzb 2013-10-17 05:27 - 2013-10-17 05:27 - 00000661 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack.nzb 2013-10-17 04:56 - 2012-10-07 01:09 - 00000000 ____D C:\Program Files (x86)\Steam 2013-10-17 03:04 - 2013-10-17 03:04 - 06474236 _____ C:\Users\Ossiel\Downloads\Tomb Raider.nzb 2013-10-17 03:02 - 2013-10-17 03:02 - 05547319 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 (1).nzb 2013-10-17 02:44 - 2013-10-17 02:44 - 03990374 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW.nzb 2013-10-17 01:50 - 2013-10-17 01:50 - 03271014 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 SKIDROW.nzb 2013-10-17 01:00 - 2013-10-17 00:59 - 00810624 _____ C:\Users\Ossiel\Downloads\Official Playstation 3 Emulator v3.7.531 by RELOADED_updated 09-30-2013.zip 2013-10-17 00:55 - 2013-10-17 00:54 - 07214454 _____ C:\Users\Ossiel\Downloads\PSeMu3.zip 2013-10-17 00:43 - 2013-10-17 00:43 - 00000598 _____ C:\Users\Ossiel\Desktop\CINEMA 4D 64 Bit.lnk 2013-10-17 00:41 - 2012-11-24 20:19 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\MAXON 2013-10-17 00:19 - 2013-10-17 00:19 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-17 00:12 - 2013-10-17 00:12 - 00000588 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15 Keygen.nzb 2013-10-17 00:11 - 2012-10-12 04:57 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\DAEMON Tools Lite 2013-10-16 22:23 - 2013-10-16 22:23 - 03584901 _____ C:\Users\Ossiel\Downloads\Video Copilot.nzb 2013-10-16 22:20 - 2013-10-16 22:20 - 02210271 _____ C:\Users\Ossiel\Downloads\Adobe Creative.nzb 2013-10-16 22:07 - 2013-10-16 22:07 - 02749734 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15.nzb 2013-10-16 22:01 - 2013-10-12 21:25 - 00000000 ____D C:\Users\Ossiel\Desktop\RM Infinity 2013-10-16 22:00 - 2013-10-16 21:59 - 00000000 ____D C:\Users\Ossiel\Desktop\Magnis Gaming 2013-10-16 17:27 - 2012-10-07 00:49 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2013-10-16 06:08 - 2013-03-28 13:28 - 02864640 ___SH C:\Users\Ossiel\Desktop\Thumbs.db 2013-10-16 00:12 - 2013-09-10 07:31 - 00000000 ____D C:\Users\Ossiel\AppData\Local\Overwolf 2013-10-16 00:11 - 2012-10-07 01:24 - 00001912 _____ C:\Windows\epplauncher.mif 2013-10-16 00:11 - 2012-10-07 01:24 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-10-16 00:11 - 2012-10-07 01:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-10-16 00:08 - 2013-10-15 23:42 - 00000000 ____D C:\Program Files\CCleaner 2013-10-16 00:08 - 2013-08-16 20:47 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-10-16 00:08 - 2013-08-16 20:47 - 00000000 ____D C:\Windows\system32\NV 2013-10-16 00:08 - 2013-08-16 20:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-16 00:08 - 2013-05-14 06:53 - 00000000 ____D C:\Windows\Minidump 2013-10-16 00:08 - 2012-10-07 00:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-16 00:08 - 2011-04-12 09:54 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-10-16 00:07 - 2012-10-07 00:45 - 00000000 ____D C:\NVIDIA 2013-10-16 00:07 - 2012-10-07 00:39 - 00000000 ____D C:\Program Files\Common Files\Intel 2013-10-16 00:07 - 2012-10-07 00:39 - 00000000 ____D C:\Program Files (x86)\Intel 2013-10-15 23:43 - 2012-10-07 07:25 - 00000000 ____D C:\Windows\Panther 2013-10-15 22:56 - 2013-10-15 22:56 - 00130907 _____ C:\Users\Ossiel\Downloads\binkw32.zip 2013-10-15 22:42 - 2013-10-15 22:42 - 00000000 ____D C:\Program Files (x86)\AppName 2013-10-15 22:09 - 2013-10-15 22:09 - 04643745 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 German.nzb 2013-10-15 20:16 - 2013-10-15 20:16 - 03018598 _____ C:\Users\Ossiel\Downloads\Tomb raider 2013.nzb 2013-10-13 12:15 - 2013-10-13 12:15 - 00079303 _____ C:\Users\Ossiel\Downloads\Dxtory.nzb 2013-10-13 05:59 - 2013-10-13 05:59 - 00001267 _____ C:\Users\Public\Desktop\DreadOut Demo.lnk 2013-10-13 05:58 - 2013-10-13 05:58 - 00000000 ____D C:\Program Files (x86)\DIGITAL HAPPINESS 2013-10-13 02:05 - 2012-10-22 04:59 - 00000132 _____ C:\Users\Ossiel\AppData\Roaming\Adobe PNG Format CS5 Prefs 2013-10-12 21:00 - 2012-10-09 01:56 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Skype 2013-10-11 20:31 - 2013-10-11 20:31 - 00272349 _____ C:\Users\Ossiel\Downloads\Slender The Arrival.nzb 2013-10-11 19:29 - 2013-10-11 19:28 - 01086283 _____ C:\Users\Ossiel\Downloads\The Walking Dead Survival Instinct .nzb 2013-10-10 22:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-10-10 15:46 - 2009-07-14 06:45 - 04875136 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-10 06:19 - 2013-08-15 06:39 - 00000000 ____D C:\Windows\system32\MRT 2013-10-10 06:18 - 2012-10-12 05:37 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-09 23:50 - 2013-10-09 21:21 - 00000000 ____D C:\Users\Ossiel\Desktop\Bewerbung 2013-10-09 21:14 - 2013-10-09 21:14 - 00000000 ____D C:\Users\Ossiel\AppData\Local\PDF24 2013-10-09 21:14 - 2013-10-09 21:13 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-10-09 21:11 - 2013-10-09 21:11 - 15911976 _____ (Geek Software GmbH ) C:\Users\Ossiel\Downloads\pdf24-creator-5.7.0.exe 2013-10-09 12:29 - 2013-10-09 12:29 - 00000000 _____ C:\Users\Ossiel\Sti_Trace.log 2013-10-09 12:29 - 2012-10-07 00:54 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-09 12:29 - 2012-10-07 00:54 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-07 02:31 - 2013-10-07 02:31 - 00001456 _____ C:\Users\Ossiel\AppData\Local\Adobe Save for Web 12.0 Prefs 2013-10-06 17:47 - 2013-10-06 17:46 - 00066231 _____ C:\Users\Ossiel\Downloads\523fc8aa5b1180c5857c7470b1e43bbb 2013-10-06 02:46 - 2013-10-06 02:46 - 00450668 _____ C:\Users\Ossiel\Downloads\The Fighters German.nzb 2013-10-06 02:32 - 2013-10-06 02:32 - 00428374 _____ C:\Users\Ossiel\Downloads\Never Back Down German.nzb 2013-10-06 00:06 - 2013-10-06 00:06 - 00027456 _____ C:\Users\Ossiel\Downloads\avengers_ac3d_720p-Westerwelle.nzb 2013-10-05 22:34 - 2013-10-05 22:34 - 01917732 _____ C:\Users\Ossiel\Downloads\Avengers 2012 German.nzb 2013-10-04 00:42 - 2013-08-13 02:52 - 00000000 ____D C:\Program Files (x86)\osu! 2013-10-02 00:35 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-10-01 20:42 - 2013-10-01 20:39 - 06848589 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 02 - City of Ashes.[pdf.rtf.epub.jpg].rar 2013-10-01 16:48 - 2013-10-01 16:48 - 00001282 _____ C:\Users\Ossiel\Desktop\Snip.lnk 2013-10-01 16:36 - 2012-10-07 01:07 - 00000000 ____D C:\Users\Ossiel\AppData\Local\TeamSpeak 3 Client 2013-09-29 20:59 - 2013-09-29 20:58 - 00000000 ____D C:\Users\Ossiel\Desktop\Mama Bilder 2013-09-28 22:54 - 2013-09-28 22:53 - 00000000 ____D C:\Users\Ossiel\Desktop\irgend ein müll ey 2013-09-27 06:24 - 2013-09-27 06:24 - 03428168 _____ C:\Users\Ossiel\Downloads\Killer Joe German.nzb 2013-09-27 06:19 - 2013-09-27 06:19 - 02729721 _____ C:\Users\Ossiel\Downloads\Ruby Sparks German.nzb 2013-09-27 06:17 - 2013-09-27 06:17 - 01752657 _____ C:\Users\Ossiel\Downloads\Spring Breakers German.nzb 2013-09-27 06:13 - 2013-09-27 06:13 - 01075430 _____ C:\Users\Ossiel\Downloads\Silver Linings German.nzb 2013-09-27 06:05 - 2013-09-27 06:05 - 02721136 _____ C:\Users\Ossiel\Downloads\Alex Cross German.nzb 2013-09-27 06:00 - 2013-09-27 06:00 - 02537396 _____ C:\Users\Ossiel\Downloads\The Place beyond the pines German.nzb 2013-09-27 05:52 - 2013-09-27 05:52 - 00629236 _____ C:\Users\Ossiel\Downloads\Der nLchste bitte.nzb 2013-09-27 05:45 - 2013-09-27 05:45 - 00756447 _____ C:\Users\Ossiel\Downloads\Cold Blood Kein Ausweg German.nzb 2013-09-27 05:35 - 2013-09-27 05:35 - 01087254 _____ C:\Users\Ossiel\Downloads\Argo 2012 German.nzb 2013-09-27 05:34 - 2013-09-27 05:34 - 01080916 _____ C:\Users\Ossiel\Downloads\Gangster Squad German.nzb 2013-09-27 05:27 - 2013-09-27 05:27 - 01518241 _____ C:\Users\Ossiel\Downloads\Zero Dark Thirty German.nzb 2013-09-27 05:24 - 2013-09-27 05:24 - 00892296 _____ C:\Users\Ossiel\Downloads\Red Dawn German.nzb 2013-09-27 03:57 - 2012-10-07 00:52 - 00073872 _____ C:\Users\Ossiel\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-27 00:24 - 2013-09-27 00:24 - 00009439 _____ C:\Users\Ossiel\Downloads\basica_oxcer.zip 2013-09-24 23:49 - 2013-09-24 23:49 - 03375769 _____ C:\Users\Ossiel\Downloads\overlaymagnisgaming.psd 2013-09-23 01:28 - 2013-10-10 06:19 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-23 01:28 - 2013-10-10 06:19 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-09-23 00:55 - 2013-10-10 06:19 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-23 00:55 - 2013-10-10 06:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-23 00:55 - 2013-10-10 06:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-23 00:54 - 2013-10-10 06:19 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-22 02:08 - 2013-09-22 02:08 - 00003196 _____ C:\Users\Ossiel\Downloads\Outlast Crack.nzb 2013-09-22 02:07 - 2013-09-22 02:07 - 00000563 _____ C:\Users\Public\Desktop\Outlast.lnk 2013-09-22 02:07 - 2012-10-08 03:47 - 00000000 ____D C:\Users\Ossiel\Documents\My Games 2013-09-22 01:41 - 2013-09-22 01:41 - 02861525 _____ C:\Users\Ossiel\Downloads\picozip-recovery-tool_13451.exe 2013-09-22 01:41 - 2013-09-22 01:41 - 00000000 ____D C:\Program Files (x86)\PicoZipRT 2013-09-22 01:36 - 2013-09-22 01:36 - 01376768 _____ C:\Users\Ossiel\Downloads\7z920-x64.msi 2013-09-22 01:36 - 2013-09-22 01:36 - 00000000 ____D C:\Program Files\7-Zip 2013-09-22 01:10 - 2013-02-21 18:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-09-22 01:10 - 2012-10-09 01:56 - 00000000 ____D C:\ProgramData\Skype 2013-09-21 21:06 - 2012-10-12 03:54 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\dvdcss 2013-09-21 21:03 - 2013-09-21 21:03 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2013-09-21 20:59 - 2013-01-18 17:04 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Dropbox 2013-09-21 20:57 - 2013-01-18 17:08 - 00000000 ___RD C:\Users\Ossiel\Dropbox 2013-09-21 20:51 - 2013-09-21 20:50 - 13901152 _____ (Disc Soft Ltd) C:\Users\Ossiel\Downloads\DTLite4471-0333.exe 2013-09-21 19:39 - 2013-09-21 19:39 - 01388163 _____ C:\Users\Ossiel\Downloads\Pitch Perfect German.nzb 2013-09-21 17:57 - 2013-09-21 17:57 - 02792711 _____ C:\Users\Ossiel\Downloads\Life of Pi German.nzb 2013-09-21 17:51 - 2013-09-21 17:51 - 01582690 _____ C:\Users\Ossiel\Downloads\Killing them Softly German.nzb 2013-09-21 17:47 - 2013-09-21 17:47 - 00556972 _____ C:\Users\Ossiel\Downloads\John Carter German.nzb 2013-09-21 17:44 - 2013-09-21 17:44 - 02119308 _____ C:\Users\Ossiel\Downloads\Hotel Transsilvanien German.nzb 2013-09-21 17:40 - 2013-09-21 17:40 - 00985822 _____ C:\Users\Ossiel\Downloads\Hit and Run German.nzb 2013-09-21 17:32 - 2013-09-21 17:32 - 01311987 _____ C:\Users\Ossiel\Downloads\Outlast.nzb 2013-09-21 17:31 - 2013-09-21 17:31 - 01171752 _____ C:\Users\Ossiel\Downloads\Frankenweenie German.nzb 2013-09-21 17:26 - 2013-09-21 17:26 - 03752867 _____ C:\Users\Ossiel\Downloads\Dark Shadows German.nzb 2013-09-21 17:25 - 2013-09-21 17:25 - 00747384 _____ C:\Users\Ossiel\Downloads\dark_shadows_2012_rerip_720p_bluray_x264-amiable.nzb 2013-09-21 17:17 - 2013-09-21 17:17 - 01153955 _____ C:\Users\Ossiel\Downloads\Cold Light of day German.nzb 2013-09-21 17:14 - 2013-09-21 17:14 - 03693519 _____ C:\Users\Ossiel\Downloads\Cloud Atlas German.nzb 2013-09-21 17:06 - 2013-09-21 17:06 - 02253467 _____ C:\Users\Ossiel\Downloads\Das Bourne VermLchtnis.nzb 2013-09-21 17:01 - 2013-09-21 17:01 - 02986013 _____ C:\Users\Ossiel\Downloads\Hnsel und Gretel-Hexenjger 2013 1080p AVCHD.nzb 2013-09-21 16:57 - 2013-09-21 16:57 - 01764581 _____ C:\Users\Ossiel\Downloads\Kick Ass German 2010.nzb 2013-09-21 16:56 - 2013-09-21 16:56 - 04341556 _____ C:\Users\Ossiel\Downloads\Kick Ass 2010.nzb 2013-09-21 16:54 - 2013-09-21 16:54 - 02401634 _____ C:\Users\Ossiel\Downloads\Sinister German.nzb 2013-09-21 16:51 - 2013-09-21 16:51 - 01085965 _____ C:\Users\Ossiel\Downloads\MAMA german 2013.nzb 2013-09-21 16:47 - 2013-09-21 16:47 - 01480310 _____ C:\Users\Ossiel\Downloads\Apparition German.nzb 2013-09-21 16:42 - 2013-09-21 16:42 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt (1).nzb 2013-09-21 16:40 - 2013-09-21 16:40 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt.nzb 2013-09-21 06:37 - 2013-09-21 06:35 - 04913399 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 01 - City of Bones.[pdf.epub.jpg].rar 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore.torrent 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore (1).torrent 2013-09-21 05:38 - 2013-10-10 06:19 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-21 05:30 - 2013-10-10 06:19 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-21 04:48 - 2013-10-10 06:19 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-21 04:39 - 2013-10-10 06:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-09-18 04:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF Some content of TEMP: ==================== C:\Users\Ossiel\AppData\Local\Temp\AskSLib.dll C:\Users\Ossiel\AppData\Local\Temp\install_reader11_de_mssd_aih.exe C:\Users\Ossiel\AppData\Local\Temp\install_reader11_de_mssd_aih_1.exe C:\Users\Ossiel\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Ossiel\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Ossiel\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe C:\Users\Ossiel\AppData\Local\Temp\Medal of Honor_uninst.exe C:\Users\Ossiel\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Ossiel\AppData\Local\Temp\nvStInst.exe C:\Users\Ossiel\AppData\Local\Temp\SkypeSetup.exe C:\Users\Ossiel\AppData\Local\Temp\sonarinst.exe C:\Users\Ossiel\AppData\Local\Temp\swt-win32-3349.dll C:\Users\Ossiel\AppData\Local\Temp\ubi2499.tmp.exe C:\Users\Ossiel\AppData\Local\Temp\vlc-2.0.8-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-11 00:19 ==================== End Of Log ============================ --- --- --- Und hier die Addition Log File. Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013 Ran by Ossiel at 2013-10-18 15:08:20 Running from C:\Users\Ossiel\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe AIR (x32 Version: 1.5.3.9120) Adobe Community Help (x32 Version: 3.0.0) Adobe Community Help (x32 Version: 3.0.0.400) Adobe Creative Suite 5 Master Collection (x32 Version: 5.0) Adobe Flash Player 11 ActiveX (x32 Version: 11.5.502.110) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Media Player (x32 Version: 1.8) Adobe Reader XI - Deutsch (x32 Version: 11.0.00) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Arma 2 (x32) Arma 2: Operation Arrowhead (x32) Arma 2: Operation Arrowhead Beta (x32) ASRock eXtreme Tuner v0.1.188 (x32) ASRock InstantBoot v1.29 (x32) ASRock XFast RAM v2.0.9 Audacity 2.0.2 (x32 Version: 2.0.2) Battlelog Web Plugins (x32 Version: 2.1.2) BattlEye for OA Uninstall (x32) BattlEye Uninstall (x32) Bonjour (Version: 3.0.0.10) Borderlands 2 (x32) Brother MFL-Pro Suite DCP-J315W (x32 Version: 2.0.0.0) CINEMA 4D 15.008 (Version: 15.008) Cinema 4D version R12 (x32 Version: R12) DAEMON Tools Lite (x32 Version: 4.45.4.0314) DayZ Commander (x32 Version: 0.92.79) DMG Extractor (x32 Version: 1.1.1.1) DREADOUT Demo (x32 Version: 1.0.107) ESN Sonar (x32 Version: 0.70.4) Fraps (remove only) (x32) GeForce Experience NvStream Client Components (Version: 0.1.87) Google Chrome (x32 Version: 30.0.1599.101) Google Update Helper (x32 Version: 1.3.21.165) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342) Intel(R) Management Engine Components (x32 Version: 8.0.2.1410) Intel(R) OpenCL CPU Runtime (x32) Intel(R) Processor Graphics (x32 Version: 8.15.10.2618) Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214) Intel® Trusted Connect Service Client (Version: 1.23.605.1) iTunes (Version: 11.0.5.5) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) League of Legends (x32 Version: 1.3) Logitech Gaming Software 8.35 (Version: 8.35.18) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft Corporation (Version: 9.1.0.0) Microsoft Corporation (x32 Version: 9.1.0.0) Microsoft LifeCam (Version: 3.60.253.0) Microsoft Security Client (Version: 4.3.0219.0) Microsoft Security Essentials (Version: 4.3.219.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0) Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053) Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000) Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000) Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000) Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000) NVIDIA 3D Vision Controller-Treiber 320.49 (Version: 320.49) NVIDIA 3D Vision Treiber 320.49 (Version: 320.49) NVIDIA GeForce Experience 1.6.1 (Version: 1.6.1) NVIDIA Grafiktreiber 320.49 (Version: 320.49) NVIDIA HD-Audiotreiber 1.3.24.2 (Version: 1.3.24.2) NVIDIA Install Application (Version: 2.1002.133.902) NVIDIA PhysX (x32 Version: 9.13.0604) NVIDIA PhysX-Systemsoftware 9.13.0604 (Version: 9.13.0604) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2049) NVIDIA Systemsteuerung 320.49 (Version: 320.49) NVIDIA Update 8.3.14 (Version: 8.3.14) NVIDIA Update Components (Version: 8.3.14) NVIDIA Virtual Audio 1.2.5 (Version: 1.2.5) Open Broadcaster Software (x32) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Origin (x32 Version: 9.0.13.2135) osu! (x32 Version: 0.0.0.0) Outlast (x32) Pando Media Booster (x32 Version: 2.6.0.8) PDF Settings CS5 (x32 Version: 10.0) PDF24 Creator 5.7.0 (x32) PicoZip Recovery Tool 1.02 (x32 Version: 1.02) PunkBuster Services (x32 Version: 0.991) QuickTime (x32 Version: 7.74.80.86) Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011) SHIELD Streaming (Version: 1.05.28) Skype™ 6.7 (x32 Version: 6.7.102) Source SDK Base 2006 (x32) Speccy (Version: 1.22) Steam (x32 Version: 1.0.0.0) System Requirements Lab CYRI (x32 Version: 4.5.1.0) TeamSpeak 3 Client (HKCU Version: 3.0.13) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Uplay (x32 Version: 2.0) VLC media player 2.0.2 (Version: 2.0.2) VLC media player 2.0.8 (x32 Version: 2.0.8) WinRAR 4.20 (64-Bit) (Version: 4.20.0) ==================== Restore Points ========================= 15-10-2013 21:09:05 Windows Update 15-10-2013 22:07:20 Wiederherstellungsvorgang 15-10-2013 22:11:25 Windows Update 15-10-2013 22:13:00 Removed Overwolf 16-10-2013 22:19:12 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 17-10-2013 03:13:00 DirectX wurde installiert 17-10-2013 03:13:49 Installiert Assassin's Creed (R) III 17-10-2013 04:02:42 Entfernt Assassin's Creed (R) III 17-10-2013 04:04:09 DirectX wurde installiert 17-10-2013 04:05:00 Installiert Assassin's Creed (R) III 17-10-2013 05:42:23 Wiederherstellungsvorgang ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-01-18 23:41 - 00001020 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 108.162.203.133 thewarz.com 108.162.203.133 forums.thewarz.com 108.162.203.133 www.thewarz.com 216.250.117.112 account.thewarz.com 66.180.197.58 api.thewarz.com ==================== Scheduled Tasks (whitelisted) ============= Task: {0818FAE6-60B1-4DAE-99C2-54EA01338A84} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {29BF6C8B-BCC3-444E-881C-F0CCCD6E4C34} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {6ECA95CA-953A-4EA3-8574-EDCDB6A01ABA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-07] (Google Inc.) Task: {BD50F672-28D0-4703-950D-FE1B90C60A28} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-07] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Loaded Modules (whitelisted) ============= 2012-10-07 00:39 - 2012-01-05 11:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-08-27 21:33 - 2012-08-27 21:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-08-27 21:33 - 2012-08-27 21:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-08-29 20:19 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2013-08-15 12:22 - 2013-08-15 12:22 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll 2012-10-07 00:42 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-10-07 00:49 - 2012-02-07 17:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-10-17 08:36 - 2013-10-09 02:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll 2013-10-17 08:36 - 2013-10-09 02:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll 2013-10-17 08:36 - 2013-10-09 02:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll 2013-10-17 08:36 - 2013-10-09 02:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll 2013-10-17 08:36 - 2013-10-09 02:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Ossiel\Lokale Einstellungen:FSF0j0DXOcLqgiGtzdYVQFyeSMU8 AlternateDataStreams: C:\Users\Ossiel\AppData\Local:FSF0j0DXOcLqgiGtzdYVQFyeSMU8 AlternateDataStreams: C:\Users\Ossiel\AppData\Local\Anwendungsdaten:FSF0j0DXOcLqgiGtzdYVQFyeSMU8 AlternateDataStreams: C:\Users\Ossiel\AppData\Local\Temporary Internet Files:fEZxXr1hPbyYTf7oP6yAop ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (10/18/2013 03:01:58 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (10/18/2013 03:01:58 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (10/18/2013 03:01:58 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (10/18/2013 02:59:27 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/17/2013 05:52:35 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (10/17/2013 05:52:35 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (10/17/2013 05:52:35 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (10/17/2013 05:50:01 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/17/2013 07:48:03 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (10/17/2013 07:48:03 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. System errors: ============= Error: (10/18/2013 02:58:38 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/17/2013 05:49:11 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/17/2013 07:44:38 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/17/2013 03:21:13 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/17/2013 03:21:13 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (10/16/2013 09:58:57 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/16/2013 07:34:45 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/16/2013 04:15:00 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/16/2013 00:13:30 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/16/2013 00:10:00 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (10/18/2013 03:01:58 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (10/18/2013 03:01:58 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (10/18/2013 03:01:58 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (10/18/2013 02:59:27 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/17/2013 05:52:35 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (10/17/2013 05:52:35 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (10/17/2013 05:52:35 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (10/17/2013 05:50:01 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/17/2013 07:48:03 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (10/17/2013 07:48:03 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 ==================== Memory info =========================== Percentage of memory in use: 22% Total physical RAM: 8087.07 MB Available physical RAM: 6250.49 MB Total Pagefile: 16172.33 MB Available Pagefile: 14013.8 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:119.02 GB) (Free:42.23 GB) NTFS Drive d: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (Games) (Fixed) (Total:458.87 GB) (Free:17.28 GB) NTFS Drive f: (Other) (Fixed) (Total:458.87 GB) (Free:0.72 GB) NTFS Drive j: (ACIII) (CDROM) (Total:15.35 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 00000000) Partition: GPT Partition Type ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: F467897B) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=459 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=459 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
18.10.2013, 18:30 | #4 | |
/// the machine /// TB-Ausbilder | cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung!Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.10.2013, 12:51 | #5 |
| cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! Hier der Combo Fix Log Code:
ATTFilter ComboFix 13-10-19.02 - Ossiel 20.10.2013 13:43:53.2.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8087.4723 [GMT 2:00] ausgeführt von:: c:\users\Ossiel\Downloads\ComboFix.exe AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((( Dateien erstellt von 2013-09-20 bis 2013-10-20 )))))))))))))))))))))))))))))) . . 2013-10-20 11:46 . 2013-10-20 11:46 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2013-10-20 11:46 . 2013-10-20 11:46 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-10-20 01:57 . 2013-10-20 01:57 75888 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1FA39754-5709-4007-9B49-A5C3B23B8D4F}\offreg.dll 2013-10-20 01:56 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1FA39754-5709-4007-9B49-A5C3B23B8D4F}\mpengine.dll 2013-10-19 22:07 . 2013-10-19 22:07 -------- d-----w- c:\programdata\Oracle 2013-10-19 22:07 . 2013-10-19 22:07 -------- d-----w- c:\program files (x86)\Common Files\Java 2013-10-19 00:38 . 2013-10-19 00:38 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{21AD91C0-FA90-4B08-A036-92904E823306}\gapaengine.dll 2013-10-19 00:38 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-10-18 13:06 . 2013-10-18 13:06 -------- d-----w- C:\FRST 2013-10-17 03:27 . 2013-10-17 04:30 -------- d-----w- c:\users\Ossiel\AppData\Local\Ubisoft Game Launcher 2013-10-17 03:13 . 2013-10-17 04:04 -------- d-----w- c:\program files (x86)\Ubisoft 2013-10-16 22:19 . 2013-10-16 22:19 -------- d-----w- c:\programdata\Package Cache 2013-10-15 21:42 . 2013-10-15 22:08 -------- d-----w- c:\program files\CCleaner 2013-10-15 20:42 . 2013-10-15 20:42 -------- d-----w- c:\program files (x86)\AppName 2013-10-15 20:42 . 2013-10-17 05:11 -------- d-----w- c:\users\Ossiel\AppData\Local\AppName 2013-10-15 20:42 . 2013-10-17 05:11 -------- d-----w- C:\Temporary 2013-10-13 03:58 . 2013-10-13 03:58 -------- d-----w- c:\program files (x86)\DIGITAL HAPPINESS 2013-10-09 20:15 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll 2013-10-09 20:14 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll 2013-10-09 19:14 . 2013-10-09 19:14 -------- d-----w- c:\users\Ossiel\AppData\Local\PDF24 2013-10-09 19:13 . 2013-10-09 19:14 -------- d-----w- c:\program files (x86)\PDF24 2013-09-22 00:03 . 2013-09-22 00:03 -------- d-----w- c:\users\Ossiel\AppData\Local\Programs 2013-09-22 00:03 . 2013-09-22 00:03 569680 ----a-w- c:\programdata\Microsoft\Windows\Time\msvcp90.dll 2013-09-22 00:03 . 2013-09-22 00:03 49664 ----a-w- c:\programdata\Microsoft\Windows\Time\w9xpopen.exe 2013-09-22 00:03 . 2013-09-22 00:03 43008 ----a-w- c:\programdata\Microsoft\Windows\Time\WindowsTime.exe 2013-09-22 00:03 . 2013-09-22 00:03 24064 ----a-w- c:\programdata\Microsoft\Windows\Time\TimeServer.exe 2013-09-22 00:03 . 2013-09-22 00:03 2303488 ----a-w- c:\programdata\Microsoft\Windows\Time\python27.dll 2013-09-22 00:03 . 2013-09-22 00:03 219648 ----a-w- c:\programdata\Microsoft\Windows\Time\boost_python-vc90-mt-1_48.dll 2013-09-22 00:03 . 2013-09-22 00:03 10752 ----a-w- c:\programdata\Microsoft\Windows\Time\Time-svc.exe 2013-09-21 23:41 . 2013-09-21 23:41 -------- d-----w- c:\program files (x86)\PicoZipRT 2013-09-21 23:36 . 2013-09-21 23:36 -------- d-----w- c:\program files\7-Zip 2013-09-21 19:03 . 2013-09-21 19:03 -------- d-----w- c:\program files (x86)\VideoLAN . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-10-17 04:04 . 2012-10-26 18:54 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2013-10-17 04:04 . 2012-10-26 18:54 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2013-10-10 04:18 . 2012-10-12 03:37 80541720 ----a-w- c:\windows\system32\MRT.exe 2013-10-08 05:50 . 2013-06-22 21:05 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-09-11 06:40 . 2012-10-06 22:56 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-09-11 06:40 . 2012-10-06 22:56 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-09-06 10:50 . 2012-10-08 23:55 965008 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll 2013-08-29 01:48 . 2013-10-09 20:15 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-08-20 13:33 . 2013-08-30 21:30 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2013-08-20 13:32 . 2013-08-16 18:52 29984 ----a-w- c:\windows\system32\nvaudcap64v.dll 2013-08-20 13:32 . 2013-08-30 21:30 28448 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2013-08-05 02:25 . 2013-09-11 21:14 155584 ----a-w- c:\windows\system32\drivers\ataport.sys 2013-08-02 02:14 . 2013-09-11 21:14 215040 ----a-w- c:\windows\system32\winsrv.dll 2013-08-02 02:13 . 2013-09-11 21:14 424448 ----a-w- c:\windows\system32\KernelBase.dll 2013-08-02 02:13 . 2013-09-11 21:14 1161216 ----a-w- c:\windows\system32\kernel32.dll 2013-08-02 02:12 . 2013-09-11 21:14 43520 ----a-w- c:\windows\system32\csrsrv.dll 2013-08-02 02:12 . 2013-09-11 21:14 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 6656 ----a-w- c:\windows\system32\apisetschema.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-08-02 02:12 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-08-02 01:50 . 2013-09-11 21:14 274944 ----a-w- c:\windows\SysWow64\KernelBase.dll 2013-08-02 01:48 . 2013-09-11 21:14 5120 ---ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll 2013-08-02 01:48 . 2013-09-11 21:14 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll 2013-08-02 01:09 . 2013-09-11 21:14 338432 ----a-w- c:\windows\system32\conhost.exe 2013-08-02 00:59 . 2013-09-11 21:14 112640 ----a-w- c:\windows\system32\smss.exe 2013-08-02 00:43 . 2013-09-11 21:14 6144 ---ha-w- c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll 2013-08-02 00:43 . 2013-09-11 21:14 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-02 00:43 . 2013-09-11 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll 2013-08-02 00:43 . 2013-09-11 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll 2013-07-31 23:16 . 2012-10-26 18:57 291128 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2013-07-31 23:10 . 2012-10-26 18:54 291128 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2013-07-26 02:24 . 2013-09-11 21:13 14172672 ----a-w- c:\windows\system32\shell32.dll 2013-07-26 02:24 . 2013-09-11 21:13 197120 ----a-w- c:\windows\system32\shdocvw.dll 2013-07-25 09:25 . 2013-08-14 08:36 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL 2013-07-25 08:57 . 2013-08-14 08:36 1620992 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="e:\daemon tools\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384] "OracleMicrosystems"="c:\users\Ossiel\AppData\Roaming\Java\jushed.exe" [2013-05-03 835584] "idle32"="c:\users\Ossiel\Documents\wincmd.exe" [2013-05-11 89639428] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440] "USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-26 291608] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896] "LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-08-16 152392] "ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688] "BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2012-09-25 2629632] "PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-07-22 162856] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R2 Time;Time;c:\programdata\Microsoft\Windows\Time\Time-svc.exe;c:\programdata\Microsoft\Windows\Time\Time-svc.exe [x] R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] S0 AsrRamDisk;AsrRamDisk;c:\windows\system32\DRIVERS\AsrRamDisk.sys;c:\windows\SYSNATIVE\DRIVERS\AsrRamDisk.sys [x] S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x] S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x] S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x] S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x] S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x] S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x] S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys;c:\windows\SYSNATIVE\Drivers\nx6000.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-10-17 06:35 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-06 22:54] . 2013-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-06 22:54] . 2013-10-19 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job - c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 11:41] . 2013-10-19 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job - c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 11:41] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-12 170264] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-12 398104] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-12 440600] "Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-08-12 1356240] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local TCP: DhcpNameServer = 192.168.0.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file) ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file) ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file) ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file) AddRemove-BattlEye for A2 - e:\steamlibrary\steamapps\common\Arma 2BattlEye\UnInstallBE.exe AddRemove-DMGExtractor - f:\dmg extractor\DMGExtractor\Uninstall.exe AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc, 1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7 "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07, 72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57 "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:71,cd,19,cc,f3,c9,ce,01 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,78,69,c6,33,0f,53,ca,46,8a,1c,47,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,78,69,c6,33,0f,53,ca,46,8a,1c,47,\ . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-10-20 13:47:48 ComboFix-quarantined-files.txt 2013-10-20 11:47 ComboFix2.txt 2013-10-20 10:23 . Vor Suchlauf: 16 Verzeichnis(se), 47.379.120.128 Bytes frei Nach Suchlauf: 17 Verzeichnis(se), 47.313.424.384 Bytes frei . - - End Of File - - B4EE96658F88C4CA1AD226C31B92194B |
20.10.2013, 17:48 | #6 |
/// the machine /// TB-Ausbilder | cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! |
21.10.2013, 07:28 | #7 |
| cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! Hier die Malwarebytes Anti-Malware Logfile: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.21.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16721 Ossiel :: NO_RE_PLAY [Administrator] 21.10.2013 07:52:56 mbam-log-2013-10-21 (07-52-56).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 227314 Laufzeit: 1 Minute(n), 10 Sekunde(n) Infizierte Speicherprozesse: 1 C:\Users\Ossiel\Documents\wincmd.exe (Trojan.Agent) -> 4304 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|idle32 (Trojan.Agent) -> Daten: C:\Users\Ossiel\Documents\wincmd.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\Ossiel\Downloads\DTLite4471-0333.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Ossiel\Documents\wincmd.exe (Trojan.Agent) -> Löschen bei Neustart. (Ende) Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 21/10/2013 um 08:07:22 # Updated 20/10/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Ossiel - NO_RE_PLAY # Gestartet von : C:\Users\Ossiel\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\Software\systweak ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16720 -\\ Google Chrome v30.0.1599.101 [ Datei : C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [985 octets] - [21/10/2013 08:06:23] AdwCleaner[S0].txt - [907 octets] - [21/10/2013 08:07:22] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [966 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.7 (10.15.2013:2) OS: Windows 7 Home Premium x64 Ran by Ossiel on 21.10.2013 at 8:13:58,15 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Chrome Successfully deleted: [Folder] C:\Users\Ossiel\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 21.10.2013 at 8:14:51,91 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-10-2013 01 Ran by Ossiel (administrator) on NO_RE_PLAY on 21-10-2013 08:16:19 Running from C:\Users\Ossiel\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft) C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Users\Ossiel\AppData\Roaming\Java\jushed.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\system32\taskmgr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-08-12] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [DAEMON Tools Lite] - E:\Daemon Tools\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd) HKCU\...\Run: [OracleMicrosystems] - C:\Users\Ossiel\AppData\Roaming\Java\jushed.exe [835584 2013-05-03] () HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_110_ActiveX.exe -update activex [697272 2012-11-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.) HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2012-09-25] (Brother Industries, Ltd.) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [266448 2013-06-21] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [214448 2013-06-21] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xABF5CE7F13A4CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Chrome: ======= CHR RestoreOnStartup: "hxxp://google.de/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Extension: (ProxTube) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0 CHR Extension: (YouTube) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0 CHR Extension: (YouTube Unblocker) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.5_0 CHR Extension: (Gmail) - C:\Users\Ossiel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] () R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-08-12] (Microsoft Corporation) S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-08-12] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-10-17] () R2 Time; C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe [10752 2013-09-22] (Microsoft) ==================== Drivers (Whitelisted) ==================== R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-12] (DT Soft Ltd) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation) S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-21 08:14 - 2013-10-21 08:14 - 00000807 _____ C:\Users\Ossiel\Desktop\JRT.txt 2013-10-21 08:12 - 2013-10-21 08:12 - 00000000 ____D C:\Windows\ERUNT 2013-10-21 08:11 - 2013-10-21 08:11 - 01033335 _____ (Thisisu) C:\Users\Ossiel\Downloads\JRT.exe 2013-10-21 07:48 - 2013-10-21 08:07 - 00000000 ____D C:\AdwCleaner 2013-10-21 07:48 - 2013-10-21 07:48 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-21 07:48 - 2013-10-21 07:48 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Malwarebytes 2013-10-21 07:48 - 2013-10-21 07:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-21 07:48 - 2013-10-21 07:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-21 07:48 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-10-21 07:46 - 2013-10-21 07:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ossiel\Downloads\mbam-setup-1.75.0.1300.exe 2013-10-21 07:46 - 2013-10-21 07:46 - 01060070 _____ C:\Users\Ossiel\Downloads\adwcleaner.exe 2013-10-20 16:21 - 2013-10-20 16:42 - 04646921 _____ C:\Users\Ossiel\Desktop\Freya Outfit.psd 2013-10-20 16:13 - 2013-10-20 16:13 - 00000000 ____D C:\Users\Ossiel\Desktop\Freya Outfit 2013-10-20 13:56 - 2013-10-20 13:56 - 00000664 _____ C:\Users\Ossiel\Downloads\1382270148.nzb 2013-10-20 13:47 - 2013-10-20 13:47 - 00028460 _____ C:\ComboFix.txt 2013-10-20 12:18 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-10-20 12:18 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-10-20 12:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-10-20 12:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-10-20 12:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-10-20 12:18 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-10-20 12:18 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-10-20 12:18 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-10-20 12:14 - 2013-10-20 13:47 - 00000000 ____D C:\Qoobox 2013-10-20 12:14 - 2013-10-20 12:22 - 00000000 ____D C:\Windows\erdnt 2013-10-20 00:07 - 2013-10-20 00:07 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-20 00:07 - 2013-10-20 00:07 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 00:07 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-19 03:37 - 2013-10-19 03:37 - 02567148 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt (2).nzb 2013-10-18 15:08 - 2013-10-18 15:08 - 00021150 _____ C:\Users\Ossiel\Downloads\Addition.txt 2013-10-18 15:06 - 2013-10-18 15:06 - 00000000 ____D C:\FRST 2013-10-18 15:04 - 2013-10-21 08:15 - 01954710 _____ (Farbar) C:\Users\Ossiel\Downloads\FRST64.exe 2013-10-18 04:41 - 2013-10-20 12:13 - 05135479 ____R (Swearware) C:\Users\Ossiel\Downloads\ComboFix.exe 2013-10-17 21:28 - 2013-10-17 21:28 - 00056041 _____ C:\Users\Ossiel\Downloads\Belphegor.nzb 2013-10-17 21:27 - 2013-10-17 21:27 - 00012053 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod (1).nzb 2013-10-17 21:25 - 2013-10-17 21:25 - 00030898 _____ C:\Users\Ossiel\Downloads\Behemoth Apostasy.nzb 2013-10-17 21:22 - 2013-10-17 21:22 - 00031379 _____ C:\Users\Ossiel\Downloads\Behemoth Evangelion.nzb 2013-10-17 21:21 - 2013-10-17 21:21 - 00041194 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod.nzb 2013-10-17 21:18 - 2013-10-17 21:18 - 00013932 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter der weg (1).nzb 2013-10-17 21:15 - 2013-10-17 21:15 - 00021330 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter Der weg.nzb 2013-10-17 21:14 - 2013-10-17 21:14 - 00014156 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter samurai.nzb 2013-10-17 21:13 - 2013-10-17 21:13 - 00020519 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter moral.nzb 2013-10-17 21:11 - 2013-10-17 21:11 - 00016496 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (2).nzb 2013-10-17 21:09 - 2013-10-17 21:09 - 00008107 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (1).nzb 2013-10-17 21:08 - 2013-10-17 21:08 - 00040428 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter licht.nzb 2013-10-17 21:07 - 2013-10-17 21:07 - 00016682 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede.nzb 2013-10-17 20:56 - 2013-10-17 20:56 - 00091197 _____ C:\Users\Ossiel\Downloads\Heidevolk.nzb 2013-10-17 20:56 - 2013-10-17 20:56 - 00088475 _____ C:\Users\Ossiel\Downloads\Heidevolk Batavi.nzb 2013-10-17 20:53 - 2013-10-17 20:53 - 01141328 _____ (BitTorrent Inc.) C:\Users\Ossiel\Downloads\utorrent3.3.2.exe 2013-10-17 20:53 - 2013-10-17 20:53 - 00030788 _____ C:\Users\Ossiel\Downloads\[kickass.to]folkstone.sgangogatt.torrent 2013-10-17 20:51 - 2013-10-17 21:02 - 127094903 _____ C:\Users\Ossiel\Downloads\Folk_Stone-Il_Confine-2012.rar 2013-10-17 20:47 - 2013-10-17 20:47 - 00026747 _____ C:\Users\Ossiel\Downloads\sgangogatt.nzb 2013-10-17 20:40 - 2013-10-17 20:40 - 00000676 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom (1).nzb 2013-10-17 20:39 - 2013-10-17 20:39 - 00008639 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom.nzb 2013-10-17 20:38 - 2013-10-17 20:38 - 00040073 _____ C:\Users\Ossiel\Downloads\kataklysm in the arms.nzb 2013-10-17 20:35 - 2013-10-17 20:35 - 00042451 _____ C:\Users\Ossiel\Downloads\kataklysm prevail.nzb 2013-10-17 20:33 - 2013-10-17 20:33 - 00048822 _____ C:\Users\Ossiel\Downloads\kataklysm victim.nzb 2013-10-17 20:15 - 2013-10-17 20:15 - 00648242 _____ C:\Users\Ossiel\Downloads\kataklysm.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00130233 _____ C:\Users\Ossiel\Downloads\Satyricon Satyricon.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00013139 _____ C:\Users\Ossiel\Downloads\Satyricon The Age.nzb 2013-10-17 20:04 - 2013-10-17 20:04 - 00488663 _____ C:\Users\Ossiel\Downloads\Amon Amarth.nzb 2013-10-17 20:03 - 2013-10-17 20:08 - 15532032 _____ C:\Users\Ossiel\Downloads\0013.rar 2013-10-17 19:58 - 2013-10-17 19:58 - 00033821 _____ C:\Users\Ossiel\Downloads\Krbholz.nzb 2013-10-17 19:52 - 2013-10-17 19:52 - 00027385 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala (1).nzb 2013-10-17 19:41 - 2013-10-17 19:41 - 00010608 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala.nzb 2013-10-17 19:37 - 2013-10-17 19:37 - 00064474 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis (1).nzb 2013-10-17 19:35 - 2013-10-17 19:35 - 00030872 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis .nzb 2013-10-17 19:34 - 2013-10-17 19:34 - 00152931 _____ C:\Users\Ossiel\Downloads\Korpiklaani.nzb 2013-10-17 07:47 - 2013-10-17 07:47 - 00000465 _____ C:\Users\Ossiel\Desktop\AC3SP - Verknüpfung.lnk 2013-10-17 07:11 - 2013-10-17 07:29 - 00005117 _____ C:\Users\Ossiel\Documents\TombRaider.log 2013-10-17 06:04 - 2013-10-17 06:04 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2013-10-17 05:34 - 2013-10-17 05:34 - 00000649 _____ C:\Users\Ossiel\Downloads\Assassins Creed III crack.nzb 2013-10-17 05:33 - 2013-10-17 05:33 - 00000000 ____D C:\Users\Ossiel\Documents\cgnew 2013-10-17 05:32 - 2013-10-17 05:32 - 00859652 _____ C:\Users\Ossiel\Documents\thumbscl.exe 2013-10-17 05:32 - 2013-06-12 15:15 - 00245795 _____ C:\Users\Ossiel\Documents\libcurl.dll 2013-10-17 05:32 - 2013-06-12 15:15 - 00119888 _____ (Open Source Software community LGPL) C:\Users\Ossiel\Documents\pthreadGC2.dll 2013-10-17 05:32 - 2013-06-12 15:15 - 00100864 _____ C:\Users\Ossiel\Documents\zlib1.dll 2013-10-17 05:31 - 2013-10-17 05:33 - 07684100 _____ C:\Users\Ossiel\Documents\uninx84.exe 2013-10-17 05:31 - 2013-10-17 05:31 - 00009480 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack (1).nzb 2013-10-17 05:31 - 2013-10-17 05:31 - 00000582 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack.nzb 2013-10-17 05:29 - 2013-10-17 05:29 - 00000641 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack (1).nzb 2013-10-17 05:27 - 2013-10-17 07:43 - 00000000 ____D C:\Users\Ossiel\Documents\Assassin's Creed III 2013-10-17 05:27 - 2013-10-17 06:30 - 00000000 ____D C:\Users\Ossiel\AppData\Local\Ubisoft Game Launcher 2013-10-17 05:27 - 2013-10-17 05:27 - 00000661 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack.nzb 2013-10-17 05:13 - 2013-10-17 06:04 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-10-17 03:04 - 2013-10-17 03:04 - 06474236 _____ C:\Users\Ossiel\Downloads\Tomb Raider.nzb 2013-10-17 03:02 - 2013-10-17 03:02 - 05547319 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 (1).nzb 2013-10-17 02:44 - 2013-10-17 02:44 - 03990374 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW.nzb 2013-10-17 01:50 - 2013-10-17 01:50 - 03271014 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 SKIDROW.nzb 2013-10-17 00:59 - 2013-10-17 01:00 - 00810624 _____ C:\Users\Ossiel\Downloads\Official Playstation 3 Emulator v3.7.531 by RELOADED_updated 09-30-2013.zip 2013-10-17 00:54 - 2013-10-17 00:55 - 07214454 _____ C:\Users\Ossiel\Downloads\PSeMu3.zip 2013-10-17 00:43 - 2013-10-17 00:43 - 00000598 _____ C:\Users\Ossiel\Desktop\CINEMA 4D 64 Bit.lnk 2013-10-17 00:19 - 2013-10-17 00:19 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-17 00:12 - 2013-10-17 00:12 - 00000588 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15 Keygen.nzb 2013-10-16 22:23 - 2013-10-16 22:23 - 03584901 _____ C:\Users\Ossiel\Downloads\Video Copilot.nzb 2013-10-16 22:20 - 2013-10-16 22:20 - 02210271 _____ C:\Users\Ossiel\Downloads\Adobe Creative.nzb 2013-10-16 22:07 - 2013-10-16 22:07 - 02749734 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15.nzb 2013-10-16 21:59 - 2013-10-16 22:00 - 00000000 ____D C:\Users\Ossiel\Desktop\Magnis Gaming 2013-10-15 23:42 - 2013-10-16 00:08 - 00000000 ____D C:\Program Files\CCleaner 2013-10-15 22:56 - 2013-10-15 22:56 - 00130907 _____ C:\Users\Ossiel\Downloads\binkw32.zip 2013-10-15 22:42 - 2013-10-17 07:11 - 00000000 ____D C:\Users\Ossiel\AppData\Local\AppName 2013-10-15 22:42 - 2013-10-17 07:11 - 00000000 ____D C:\Temporary 2013-10-15 22:42 - 2013-10-15 22:42 - 00000000 ____D C:\Program Files (x86)\AppName 2013-10-15 22:09 - 2013-10-15 22:09 - 04643745 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 German.nzb 2013-10-15 20:16 - 2013-10-15 20:16 - 03018598 _____ C:\Users\Ossiel\Downloads\Tomb raider 2013.nzb 2013-10-13 12:15 - 2013-10-13 12:15 - 00079303 _____ C:\Users\Ossiel\Downloads\Dxtory.nzb 2013-10-13 05:59 - 2013-10-13 05:59 - 00001267 _____ C:\Users\Public\Desktop\DreadOut Demo.lnk 2013-10-13 05:58 - 2013-10-13 05:58 - 00000000 ____D C:\Program Files (x86)\DIGITAL HAPPINESS 2013-10-12 21:25 - 2013-10-16 22:01 - 00000000 ____D C:\Users\Ossiel\Desktop\RM Infinity 2013-10-11 20:31 - 2013-10-11 20:31 - 00272349 _____ C:\Users\Ossiel\Downloads\Slender The Arrival.nzb 2013-10-11 19:28 - 2013-10-11 19:29 - 01086283 _____ C:\Users\Ossiel\Downloads\The Walking Dead Survival Instinct .nzb 2013-10-10 06:19 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-10 06:19 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-10 06:19 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-10 06:19 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-10 06:19 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-10 06:19 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-10 06:19 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-10 06:19 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-10 06:19 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-10 06:19 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-10 06:19 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-10 06:19 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-09 22:15 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-09 22:15 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-09 22:15 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-09 22:15 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-09 22:15 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-09 22:15 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-09 22:15 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-09 22:15 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-09 22:15 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-09 22:15 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-09 22:15 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-09 22:15 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-09 22:15 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-09 22:15 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-09 22:15 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-09 22:15 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-09 22:15 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-09 22:15 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-09 22:15 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-09 22:15 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-09 22:15 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-09 22:15 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 22:15 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 22:15 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-09 22:15 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-09 22:15 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2013-10-09 22:15 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-09 22:15 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-09 22:15 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-09 22:15 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-09 22:15 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-09 22:15 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-09 22:15 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-09 22:15 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-09 22:15 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-09 22:15 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 22:15 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-09 22:15 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-09 22:15 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-09 22:15 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-09 22:15 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-09 22:15 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-09 22:15 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-09 22:15 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-09 22:15 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-09 22:15 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 22:14 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-09 21:21 - 2013-10-09 23:50 - 00000000 ____D C:\Users\Ossiel\Desktop\Bewerbung 2013-10-09 21:14 - 2013-10-09 21:14 - 00000000 ____D C:\Users\Ossiel\AppData\Local\PDF24 2013-10-09 21:13 - 2013-10-09 21:14 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-10-09 21:11 - 2013-10-09 21:11 - 15911976 _____ (Geek Software GmbH ) C:\Users\Ossiel\Downloads\pdf24-creator-5.7.0.exe 2013-10-09 12:29 - 2013-10-09 12:29 - 00000000 _____ C:\Users\Ossiel\Sti_Trace.log 2013-10-07 02:31 - 2013-10-07 02:31 - 00001456 _____ C:\Users\Ossiel\AppData\Local\Adobe Save for Web 12.0 Prefs 2013-10-06 17:46 - 2013-10-06 17:47 - 00066231 _____ C:\Users\Ossiel\Downloads\523fc8aa5b1180c5857c7470b1e43bbb 2013-10-06 02:46 - 2013-10-06 02:46 - 00450668 _____ C:\Users\Ossiel\Downloads\The Fighters German.nzb 2013-10-06 02:32 - 2013-10-06 02:32 - 00428374 _____ C:\Users\Ossiel\Downloads\Never Back Down German.nzb 2013-10-06 00:06 - 2013-10-06 00:06 - 00027456 _____ C:\Users\Ossiel\Downloads\avengers_ac3d_720p-Westerwelle.nzb 2013-10-05 22:34 - 2013-10-05 22:34 - 01917732 _____ C:\Users\Ossiel\Downloads\Avengers 2012 German.nzb 2013-10-01 20:39 - 2013-10-01 20:42 - 06848589 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 02 - City of Ashes.[pdf.rtf.epub.jpg].rar 2013-10-01 16:48 - 2013-10-01 16:48 - 00001282 _____ C:\Users\Ossiel\Desktop\Snip.lnk 2013-09-29 20:58 - 2013-09-29 20:59 - 00000000 ____D C:\Users\Ossiel\Desktop\Mama Bilder 2013-09-28 22:53 - 2013-09-28 22:54 - 00000000 ____D C:\Users\Ossiel\Desktop\irgend ein müll ey 2013-09-27 06:24 - 2013-09-27 06:24 - 03428168 _____ C:\Users\Ossiel\Downloads\Killer Joe German.nzb 2013-09-27 06:19 - 2013-09-27 06:19 - 02729721 _____ C:\Users\Ossiel\Downloads\Ruby Sparks German.nzb 2013-09-27 06:17 - 2013-09-27 06:17 - 01752657 _____ C:\Users\Ossiel\Downloads\Spring Breakers German.nzb 2013-09-27 06:13 - 2013-09-27 06:13 - 01075430 _____ C:\Users\Ossiel\Downloads\Silver Linings German.nzb 2013-09-27 06:05 - 2013-09-27 06:05 - 02721136 _____ C:\Users\Ossiel\Downloads\Alex Cross German.nzb 2013-09-27 06:00 - 2013-09-27 06:00 - 02537396 _____ C:\Users\Ossiel\Downloads\The Place beyond the pines German.nzb 2013-09-27 05:52 - 2013-09-27 05:52 - 00629236 _____ C:\Users\Ossiel\Downloads\Der nLchste bitte.nzb 2013-09-27 05:45 - 2013-09-27 05:45 - 00756447 _____ C:\Users\Ossiel\Downloads\Cold Blood Kein Ausweg German.nzb 2013-09-27 05:35 - 2013-09-27 05:35 - 01087254 _____ C:\Users\Ossiel\Downloads\Argo 2012 German.nzb 2013-09-27 05:34 - 2013-09-27 05:34 - 01080916 _____ C:\Users\Ossiel\Downloads\Gangster Squad German.nzb 2013-09-27 05:27 - 2013-09-27 05:27 - 01518241 _____ C:\Users\Ossiel\Downloads\Zero Dark Thirty German.nzb 2013-09-27 05:24 - 2013-09-27 05:24 - 00892296 _____ C:\Users\Ossiel\Downloads\Red Dawn German.nzb 2013-09-27 00:38 - 2012-03-19 11:07 - 00023256 _____ C:\Users\Ossiel\Downloads\Basica solo letras para dafont lista__.ttf 2013-09-27 00:24 - 2013-09-27 00:24 - 00009439 _____ C:\Users\Ossiel\Downloads\basica_oxcer.zip 2013-09-24 23:49 - 2013-09-24 23:49 - 03375769 _____ C:\Users\Ossiel\Downloads\overlaymagnisgaming.psd 2013-09-22 02:08 - 2013-09-22 02:08 - 00003196 _____ C:\Users\Ossiel\Downloads\Outlast Crack.nzb 2013-09-22 02:07 - 2013-09-22 02:07 - 00000563 _____ C:\Users\Public\Desktop\Outlast.lnk 2013-09-22 01:41 - 2013-09-22 01:41 - 02861525 _____ C:\Users\Ossiel\Downloads\picozip-recovery-tool_13451.exe 2013-09-22 01:41 - 2013-09-22 01:41 - 00000000 ____D C:\Program Files (x86)\PicoZipRT 2013-09-22 01:36 - 2013-09-22 01:36 - 01376768 _____ C:\Users\Ossiel\Downloads\7z920-x64.msi 2013-09-22 01:36 - 2013-09-22 01:36 - 00000000 ____D C:\Program Files\7-Zip 2013-09-21 21:03 - 2013-09-21 21:03 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2013-09-21 19:39 - 2013-09-21 19:39 - 01388163 _____ C:\Users\Ossiel\Downloads\Pitch Perfect German.nzb 2013-09-21 17:57 - 2013-09-21 17:57 - 02792711 _____ C:\Users\Ossiel\Downloads\Life of Pi German.nzb 2013-09-21 17:51 - 2013-09-21 17:51 - 01582690 _____ C:\Users\Ossiel\Downloads\Killing them Softly German.nzb 2013-09-21 17:47 - 2013-09-21 17:47 - 00556972 _____ C:\Users\Ossiel\Downloads\John Carter German.nzb 2013-09-21 17:44 - 2013-09-21 17:44 - 02119308 _____ C:\Users\Ossiel\Downloads\Hotel Transsilvanien German.nzb 2013-09-21 17:40 - 2013-09-21 17:40 - 00985822 _____ C:\Users\Ossiel\Downloads\Hit and Run German.nzb 2013-09-21 17:32 - 2013-09-21 17:32 - 01311987 _____ C:\Users\Ossiel\Downloads\Outlast.nzb 2013-09-21 17:31 - 2013-09-21 17:31 - 01171752 _____ C:\Users\Ossiel\Downloads\Frankenweenie German.nzb 2013-09-21 17:26 - 2013-09-21 17:26 - 03752867 _____ C:\Users\Ossiel\Downloads\Dark Shadows German.nzb 2013-09-21 17:25 - 2013-09-21 17:25 - 00747384 _____ C:\Users\Ossiel\Downloads\dark_shadows_2012_rerip_720p_bluray_x264-amiable.nzb 2013-09-21 17:17 - 2013-09-21 17:17 - 01153955 _____ C:\Users\Ossiel\Downloads\Cold Light of day German.nzb 2013-09-21 17:14 - 2013-09-21 17:14 - 03693519 _____ C:\Users\Ossiel\Downloads\Cloud Atlas German.nzb 2013-09-21 17:06 - 2013-09-21 17:06 - 02253467 _____ C:\Users\Ossiel\Downloads\Das Bourne VermLchtnis.nzb 2013-09-21 17:01 - 2013-09-21 17:01 - 02986013 _____ C:\Users\Ossiel\Downloads\Hnsel und Gretel-Hexenjger 2013 1080p AVCHD.nzb 2013-09-21 16:57 - 2013-09-21 16:57 - 01764581 _____ C:\Users\Ossiel\Downloads\Kick Ass German 2010.nzb 2013-09-21 16:56 - 2013-09-21 16:56 - 04341556 _____ C:\Users\Ossiel\Downloads\Kick Ass 2010.nzb 2013-09-21 16:54 - 2013-09-21 16:54 - 02401634 _____ C:\Users\Ossiel\Downloads\Sinister German.nzb 2013-09-21 16:51 - 2013-09-21 16:51 - 01085965 _____ C:\Users\Ossiel\Downloads\MAMA german 2013.nzb 2013-09-21 16:47 - 2013-09-21 16:47 - 01480310 _____ C:\Users\Ossiel\Downloads\Apparition German.nzb 2013-09-21 16:42 - 2013-09-21 16:42 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt (1).nzb 2013-09-21 16:40 - 2013-09-21 16:40 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt.nzb 2013-09-21 06:35 - 2013-09-21 06:37 - 04913399 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 01 - City of Bones.[pdf.epub.jpg].rar 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore.torrent 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore (1).torrent ==================== One Month Modified Files and Folders ======= 2013-10-21 08:16 - 2012-10-07 00:34 - 01254943 _____ C:\Windows\WindowsUpdate.log 2013-10-21 08:15 - 2013-10-18 15:04 - 01954710 _____ (Farbar) C:\Users\Ossiel\Downloads\FRST64.exe 2013-10-21 08:15 - 2012-10-07 01:32 - 00000000 ____D C:\Users\Ossiel\AppData\Local\PMB Files 2013-10-21 08:15 - 2012-10-07 01:32 - 00000000 ____D C:\ProgramData\PMB Files 2013-10-21 08:14 - 2013-10-21 08:14 - 00000807 _____ C:\Users\Ossiel\Desktop\JRT.txt 2013-10-21 08:13 - 2013-08-16 20:47 - 00000000 ____D C:\ProgramData\NVIDIA 2013-10-21 08:13 - 2012-10-07 00:54 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-21 08:13 - 2012-10-07 00:49 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2013-10-21 08:13 - 2011-04-12 09:43 - 10094558 _____ C:\Windows\system32\perfh007.dat 2013-10-21 08:13 - 2011-04-12 09:43 - 03079218 _____ C:\Windows\system32\perfc007.dat 2013-10-21 08:13 - 2009-07-14 07:13 - 00006212 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-21 08:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-21 08:13 - 2009-07-14 06:51 - 00118828 _____ C:\Windows\setupact.log 2013-10-21 08:13 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-21 08:13 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-21 08:12 - 2013-10-21 08:12 - 00000000 ____D C:\Windows\ERUNT 2013-10-21 08:11 - 2013-10-21 08:11 - 01033335 _____ (Thisisu) C:\Users\Ossiel\Downloads\JRT.exe 2013-10-21 08:07 - 2013-10-21 07:48 - 00000000 ____D C:\AdwCleaner 2013-10-21 08:05 - 2010-11-21 05:47 - 00011892 _____ C:\Windows\PFRO.log 2013-10-21 07:48 - 2013-10-21 07:48 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-21 07:48 - 2013-10-21 07:48 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Malwarebytes 2013-10-21 07:48 - 2013-10-21 07:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-21 07:48 - 2013-10-21 07:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-21 07:46 - 2013-10-21 07:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ossiel\Downloads\mbam-setup-1.75.0.1300.exe 2013-10-21 07:46 - 2013-10-21 07:46 - 01060070 _____ C:\Users\Ossiel\Downloads\adwcleaner.exe 2013-10-21 07:41 - 2013-03-28 13:28 - 03056640 ___SH C:\Users\Ossiel\Desktop\Thumbs.db 2013-10-20 16:42 - 2013-10-20 16:21 - 04646921 _____ C:\Users\Ossiel\Desktop\Freya Outfit.psd 2013-10-20 16:34 - 2012-10-07 00:54 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-20 16:13 - 2013-10-20 16:13 - 00000000 ____D C:\Users\Ossiel\Desktop\Freya Outfit 2013-10-20 13:57 - 2012-10-07 01:16 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\vlc 2013-10-20 13:56 - 2013-10-20 13:56 - 00000664 _____ C:\Users\Ossiel\Downloads\1382270148.nzb 2013-10-20 13:47 - 2013-10-20 13:47 - 00028460 _____ C:\ComboFix.txt 2013-10-20 13:47 - 2013-10-20 12:14 - 00000000 ____D C:\Qoobox 2013-10-20 13:46 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-10-20 12:23 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-10-20 12:22 - 2013-10-20 12:14 - 00000000 ____D C:\Windows\erdnt 2013-10-20 12:13 - 2013-10-18 04:41 - 05135479 ____R (Swearware) C:\Users\Ossiel\Downloads\ComboFix.exe 2013-10-20 00:07 - 2013-10-20 00:07 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-20 00:07 - 2013-10-20 00:07 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 00:07 - 2012-10-07 00:57 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-19 17:27 - 2012-10-07 00:49 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2013-10-19 03:37 - 2013-10-19 03:37 - 02567148 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt (2).nzb 2013-10-18 15:08 - 2013-10-18 15:08 - 00021150 _____ C:\Users\Ossiel\Downloads\Addition.txt 2013-10-18 15:06 - 2013-10-18 15:06 - 00000000 ____D C:\FRST 2013-10-17 21:28 - 2013-10-17 21:28 - 00056041 _____ C:\Users\Ossiel\Downloads\Belphegor.nzb 2013-10-17 21:27 - 2013-10-17 21:27 - 00012053 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod (1).nzb 2013-10-17 21:25 - 2013-10-17 21:25 - 00030898 _____ C:\Users\Ossiel\Downloads\Behemoth Apostasy.nzb 2013-10-17 21:22 - 2013-10-17 21:22 - 00031379 _____ C:\Users\Ossiel\Downloads\Behemoth Evangelion.nzb 2013-10-17 21:21 - 2013-10-17 21:21 - 00041194 _____ C:\Users\Ossiel\Downloads\Behemoth Demigod.nzb 2013-10-17 21:18 - 2013-10-17 21:18 - 00013932 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter der weg (1).nzb 2013-10-17 21:15 - 2013-10-17 21:15 - 00021330 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter Der weg.nzb 2013-10-17 21:14 - 2013-10-17 21:14 - 00014156 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter samurai.nzb 2013-10-17 21:13 - 2013-10-17 21:13 - 00020519 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter moral.nzb 2013-10-17 21:11 - 2013-10-17 21:11 - 00016496 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (2).nzb 2013-10-17 21:09 - 2013-10-17 21:09 - 00008107 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede (1).nzb 2013-10-17 21:08 - 2013-10-17 21:08 - 00040428 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter licht.nzb 2013-10-17 21:07 - 2013-10-17 21:07 - 00016682 _____ C:\Users\Ossiel\Downloads\die apokalyptischen reiter friede.nzb 2013-10-17 21:02 - 2013-10-17 20:51 - 127094903 _____ C:\Users\Ossiel\Downloads\Folk_Stone-Il_Confine-2012.rar 2013-10-17 20:59 - 2012-10-18 17:59 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\uTorrent 2013-10-17 20:56 - 2013-10-17 20:56 - 00091197 _____ C:\Users\Ossiel\Downloads\Heidevolk.nzb 2013-10-17 20:56 - 2013-10-17 20:56 - 00088475 _____ C:\Users\Ossiel\Downloads\Heidevolk Batavi.nzb 2013-10-17 20:53 - 2013-10-17 20:53 - 01141328 _____ (BitTorrent Inc.) C:\Users\Ossiel\Downloads\utorrent3.3.2.exe 2013-10-17 20:53 - 2013-10-17 20:53 - 00030788 _____ C:\Users\Ossiel\Downloads\[kickass.to]folkstone.sgangogatt.torrent 2013-10-17 20:47 - 2013-10-17 20:47 - 00026747 _____ C:\Users\Ossiel\Downloads\sgangogatt.nzb 2013-10-17 20:40 - 2013-10-17 20:40 - 00000676 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom (1).nzb 2013-10-17 20:39 - 2013-10-17 20:39 - 00008639 _____ C:\Users\Ossiel\Downloads\kataklysm heaven venom.nzb 2013-10-17 20:38 - 2013-10-17 20:38 - 00040073 _____ C:\Users\Ossiel\Downloads\kataklysm in the arms.nzb 2013-10-17 20:35 - 2013-10-17 20:35 - 00042451 _____ C:\Users\Ossiel\Downloads\kataklysm prevail.nzb 2013-10-17 20:33 - 2013-10-17 20:33 - 00048822 _____ C:\Users\Ossiel\Downloads\kataklysm victim.nzb 2013-10-17 20:15 - 2013-10-17 20:15 - 00648242 _____ C:\Users\Ossiel\Downloads\kataklysm.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00130233 _____ C:\Users\Ossiel\Downloads\Satyricon Satyricon.nzb 2013-10-17 20:09 - 2013-10-17 20:09 - 00013139 _____ C:\Users\Ossiel\Downloads\Satyricon The Age.nzb 2013-10-17 20:08 - 2013-10-17 20:03 - 15532032 _____ C:\Users\Ossiel\Downloads\0013.rar 2013-10-17 20:04 - 2013-10-17 20:04 - 00488663 _____ C:\Users\Ossiel\Downloads\Amon Amarth.nzb 2013-10-17 19:58 - 2013-10-17 19:58 - 00033821 _____ C:\Users\Ossiel\Downloads\Krbholz.nzb 2013-10-17 19:52 - 2013-10-17 19:52 - 00027385 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala (1).nzb 2013-10-17 19:41 - 2013-10-17 19:41 - 00010608 _____ C:\Users\Ossiel\Downloads\Korpiklaani Manala.nzb 2013-10-17 19:37 - 2013-10-17 19:37 - 00064474 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis (1).nzb 2013-10-17 19:35 - 2013-10-17 19:35 - 00030872 _____ C:\Users\Ossiel\Downloads\Saltatio Mortis .nzb 2013-10-17 19:34 - 2013-10-17 19:34 - 00152931 _____ C:\Users\Ossiel\Downloads\Korpiklaani.nzb 2013-10-17 07:47 - 2013-10-17 07:47 - 00000465 _____ C:\Users\Ossiel\Desktop\AC3SP - Verknüpfung.lnk 2013-10-17 07:45 - 2012-10-07 00:34 - 00000000 ____D C:\Users\Ossiel\AppData\Local\VirtualStore 2013-10-17 07:43 - 2013-10-17 05:27 - 00000000 ____D C:\Users\Ossiel\Documents\Assassin's Creed III 2013-10-17 07:43 - 2012-10-12 04:57 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite 2013-10-17 07:43 - 2012-10-07 00:34 - 00000000 ____D C:\Users\Ossiel 2013-10-17 07:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-10-17 07:29 - 2013-10-17 07:11 - 00005117 _____ C:\Users\Ossiel\Documents\TombRaider.log 2013-10-17 07:11 - 2013-10-15 22:42 - 00000000 ____D C:\Users\Ossiel\AppData\Local\AppName 2013-10-17 07:11 - 2013-10-15 22:42 - 00000000 ____D C:\Temporary 2013-10-17 07:11 - 2012-10-13 05:51 - 00000000 ____D C:\Users\Ossiel\AppData\Local\SKIDROW 2013-10-17 06:30 - 2013-10-17 05:27 - 00000000 ____D C:\Users\Ossiel\AppData\Local\Ubisoft Game Launcher 2013-10-17 06:04 - 2013-10-17 06:04 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2013-10-17 06:04 - 2013-10-17 05:13 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-10-17 06:04 - 2012-10-26 20:54 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-10-17 06:04 - 2012-10-26 20:54 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe 2013-10-17 06:04 - 2012-10-07 05:07 - 00152705 _____ C:\Windows\DirectX.log 2013-10-17 06:02 - 2012-10-07 00:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-10-17 05:34 - 2013-10-17 05:34 - 00000649 _____ C:\Users\Ossiel\Downloads\Assassins Creed III crack.nzb 2013-10-17 05:33 - 2013-10-17 05:33 - 00000000 ____D C:\Users\Ossiel\Documents\cgnew 2013-10-17 05:33 - 2013-10-17 05:31 - 07684100 _____ C:\Users\Ossiel\Documents\uninx84.exe 2013-10-17 05:32 - 2013-10-17 05:32 - 00859652 _____ C:\Users\Ossiel\Documents\thumbscl.exe 2013-10-17 05:31 - 2013-10-17 05:31 - 00009480 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack (1).nzb 2013-10-17 05:31 - 2013-10-17 05:31 - 00000582 _____ C:\Users\Ossiel\Downloads\Assassins Creed III SKIDROW crack.nzb 2013-10-17 05:29 - 2013-10-17 05:29 - 00000641 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack (1).nzb 2013-10-17 05:27 - 2013-10-17 05:27 - 00000661 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW crack.nzb 2013-10-17 04:56 - 2012-10-07 01:09 - 00000000 ____D C:\Program Files (x86)\Steam 2013-10-17 03:04 - 2013-10-17 03:04 - 06474236 _____ C:\Users\Ossiel\Downloads\Tomb Raider.nzb 2013-10-17 03:02 - 2013-10-17 03:02 - 05547319 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 (1).nzb 2013-10-17 02:44 - 2013-10-17 02:44 - 03990374 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 SKIDROW.nzb 2013-10-17 01:50 - 2013-10-17 01:50 - 03271014 _____ C:\Users\Ossiel\Downloads\Tomb Raider 2013 SKIDROW.nzb 2013-10-17 01:00 - 2013-10-17 00:59 - 00810624 _____ C:\Users\Ossiel\Downloads\Official Playstation 3 Emulator v3.7.531 by RELOADED_updated 09-30-2013.zip 2013-10-17 00:55 - 2013-10-17 00:54 - 07214454 _____ C:\Users\Ossiel\Downloads\PSeMu3.zip 2013-10-17 00:43 - 2013-10-17 00:43 - 00000598 _____ C:\Users\Ossiel\Desktop\CINEMA 4D 64 Bit.lnk 2013-10-17 00:41 - 2012-11-24 20:19 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\MAXON 2013-10-17 00:19 - 2013-10-17 00:19 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-17 00:12 - 2013-10-17 00:12 - 00000588 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15 Keygen.nzb 2013-10-17 00:11 - 2012-10-12 04:57 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\DAEMON Tools Lite 2013-10-16 22:23 - 2013-10-16 22:23 - 03584901 _____ C:\Users\Ossiel\Downloads\Video Copilot.nzb 2013-10-16 22:20 - 2013-10-16 22:20 - 02210271 _____ C:\Users\Ossiel\Downloads\Adobe Creative.nzb 2013-10-16 22:07 - 2013-10-16 22:07 - 02749734 _____ C:\Users\Ossiel\Downloads\Cinema 4D R15.nzb 2013-10-16 22:01 - 2013-10-12 21:25 - 00000000 ____D C:\Users\Ossiel\Desktop\RM Infinity 2013-10-16 22:00 - 2013-10-16 21:59 - 00000000 ____D C:\Users\Ossiel\Desktop\Magnis Gaming 2013-10-16 00:12 - 2013-09-10 07:31 - 00000000 ____D C:\Users\Ossiel\AppData\Local\Overwolf 2013-10-16 00:11 - 2012-10-07 01:24 - 00001912 _____ C:\Windows\epplauncher.mif 2013-10-16 00:11 - 2012-10-07 01:24 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-10-16 00:11 - 2012-10-07 01:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-10-16 00:08 - 2013-10-15 23:42 - 00000000 ____D C:\Program Files\CCleaner 2013-10-16 00:08 - 2013-08-16 20:47 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-10-16 00:08 - 2013-08-16 20:47 - 00000000 ____D C:\Windows\system32\NV 2013-10-16 00:08 - 2013-08-16 20:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-16 00:08 - 2013-05-14 06:53 - 00000000 ____D C:\Windows\Minidump 2013-10-16 00:08 - 2012-10-07 00:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-16 00:08 - 2011-04-12 09:54 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-10-16 00:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-10-16 00:07 - 2012-10-07 00:45 - 00000000 ____D C:\NVIDIA 2013-10-16 00:07 - 2012-10-07 00:39 - 00000000 ____D C:\Program Files\Common Files\Intel 2013-10-16 00:07 - 2012-10-07 00:39 - 00000000 ____D C:\Program Files (x86)\Intel 2013-10-15 23:43 - 2012-10-07 07:25 - 00000000 ____D C:\Windows\Panther 2013-10-15 22:56 - 2013-10-15 22:56 - 00130907 _____ C:\Users\Ossiel\Downloads\binkw32.zip 2013-10-15 22:42 - 2013-10-15 22:42 - 00000000 ____D C:\Program Files (x86)\AppName 2013-10-15 22:09 - 2013-10-15 22:09 - 04643745 _____ C:\Users\Ossiel\Downloads\Assassins Creed 3 German.nzb 2013-10-15 20:16 - 2013-10-15 20:16 - 03018598 _____ C:\Users\Ossiel\Downloads\Tomb raider 2013.nzb 2013-10-13 12:15 - 2013-10-13 12:15 - 00079303 _____ C:\Users\Ossiel\Downloads\Dxtory.nzb 2013-10-13 05:59 - 2013-10-13 05:59 - 00001267 _____ C:\Users\Public\Desktop\DreadOut Demo.lnk 2013-10-13 05:58 - 2013-10-13 05:58 - 00000000 ____D C:\Program Files (x86)\DIGITAL HAPPINESS 2013-10-13 02:05 - 2012-10-22 04:59 - 00000132 _____ C:\Users\Ossiel\AppData\Roaming\Adobe PNG Format CS5 Prefs 2013-10-12 21:00 - 2012-10-09 01:56 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Skype 2013-10-11 20:31 - 2013-10-11 20:31 - 00272349 _____ C:\Users\Ossiel\Downloads\Slender The Arrival.nzb 2013-10-11 19:29 - 2013-10-11 19:28 - 01086283 _____ C:\Users\Ossiel\Downloads\The Walking Dead Survival Instinct .nzb 2013-10-10 22:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-10-10 15:46 - 2009-07-14 06:45 - 04875136 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-10 06:19 - 2013-08-15 06:39 - 00000000 ____D C:\Windows\system32\MRT 2013-10-10 06:18 - 2012-10-12 05:37 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-09 23:50 - 2013-10-09 21:21 - 00000000 ____D C:\Users\Ossiel\Desktop\Bewerbung 2013-10-09 21:14 - 2013-10-09 21:14 - 00000000 ____D C:\Users\Ossiel\AppData\Local\PDF24 2013-10-09 21:14 - 2013-10-09 21:13 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-10-09 21:11 - 2013-10-09 21:11 - 15911976 _____ (Geek Software GmbH ) C:\Users\Ossiel\Downloads\pdf24-creator-5.7.0.exe 2013-10-09 12:29 - 2013-10-09 12:29 - 00000000 _____ C:\Users\Ossiel\Sti_Trace.log 2013-10-09 12:29 - 2012-10-07 00:54 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-09 12:29 - 2012-10-07 00:54 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-08 07:50 - 2013-06-22 23:05 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-08 07:46 - 2013-10-20 00:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-08 07:46 - 2013-06-22 23:05 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-08 07:46 - 2013-06-22 23:05 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-07 02:31 - 2013-10-07 02:31 - 00001456 _____ C:\Users\Ossiel\AppData\Local\Adobe Save for Web 12.0 Prefs 2013-10-06 17:47 - 2013-10-06 17:46 - 00066231 _____ C:\Users\Ossiel\Downloads\523fc8aa5b1180c5857c7470b1e43bbb 2013-10-06 02:46 - 2013-10-06 02:46 - 00450668 _____ C:\Users\Ossiel\Downloads\The Fighters German.nzb 2013-10-06 02:32 - 2013-10-06 02:32 - 00428374 _____ C:\Users\Ossiel\Downloads\Never Back Down German.nzb 2013-10-06 00:06 - 2013-10-06 00:06 - 00027456 _____ C:\Users\Ossiel\Downloads\avengers_ac3d_720p-Westerwelle.nzb 2013-10-05 22:34 - 2013-10-05 22:34 - 01917732 _____ C:\Users\Ossiel\Downloads\Avengers 2012 German.nzb 2013-10-04 00:42 - 2013-08-13 02:52 - 00000000 ____D C:\Program Files (x86)\osu! 2013-10-02 00:35 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-10-01 20:42 - 2013-10-01 20:39 - 06848589 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 02 - City of Ashes.[pdf.rtf.epub.jpg].rar 2013-10-01 16:48 - 2013-10-01 16:48 - 00001282 _____ C:\Users\Ossiel\Desktop\Snip.lnk 2013-10-01 16:36 - 2012-10-07 01:07 - 00000000 ____D C:\Users\Ossiel\AppData\Local\TeamSpeak 3 Client 2013-09-29 20:59 - 2013-09-29 20:58 - 00000000 ____D C:\Users\Ossiel\Desktop\Mama Bilder 2013-09-28 22:54 - 2013-09-28 22:53 - 00000000 ____D C:\Users\Ossiel\Desktop\irgend ein müll ey 2013-09-27 06:24 - 2013-09-27 06:24 - 03428168 _____ C:\Users\Ossiel\Downloads\Killer Joe German.nzb 2013-09-27 06:19 - 2013-09-27 06:19 - 02729721 _____ C:\Users\Ossiel\Downloads\Ruby Sparks German.nzb 2013-09-27 06:17 - 2013-09-27 06:17 - 01752657 _____ C:\Users\Ossiel\Downloads\Spring Breakers German.nzb 2013-09-27 06:13 - 2013-09-27 06:13 - 01075430 _____ C:\Users\Ossiel\Downloads\Silver Linings German.nzb 2013-09-27 06:05 - 2013-09-27 06:05 - 02721136 _____ C:\Users\Ossiel\Downloads\Alex Cross German.nzb 2013-09-27 06:00 - 2013-09-27 06:00 - 02537396 _____ C:\Users\Ossiel\Downloads\The Place beyond the pines German.nzb 2013-09-27 05:52 - 2013-09-27 05:52 - 00629236 _____ C:\Users\Ossiel\Downloads\Der nLchste bitte.nzb 2013-09-27 05:45 - 2013-09-27 05:45 - 00756447 _____ C:\Users\Ossiel\Downloads\Cold Blood Kein Ausweg German.nzb 2013-09-27 05:35 - 2013-09-27 05:35 - 01087254 _____ C:\Users\Ossiel\Downloads\Argo 2012 German.nzb 2013-09-27 05:34 - 2013-09-27 05:34 - 01080916 _____ C:\Users\Ossiel\Downloads\Gangster Squad German.nzb 2013-09-27 05:27 - 2013-09-27 05:27 - 01518241 _____ C:\Users\Ossiel\Downloads\Zero Dark Thirty German.nzb 2013-09-27 05:24 - 2013-09-27 05:24 - 00892296 _____ C:\Users\Ossiel\Downloads\Red Dawn German.nzb 2013-09-27 03:57 - 2012-10-07 00:52 - 00073872 _____ C:\Users\Ossiel\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-27 00:24 - 2013-09-27 00:24 - 00009439 _____ C:\Users\Ossiel\Downloads\basica_oxcer.zip 2013-09-24 23:49 - 2013-09-24 23:49 - 03375769 _____ C:\Users\Ossiel\Downloads\overlaymagnisgaming.psd 2013-09-23 01:28 - 2013-10-10 06:19 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-23 01:28 - 2013-10-10 06:19 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-23 01:27 - 2013-10-10 06:19 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-09-23 00:55 - 2013-10-10 06:19 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-23 00:55 - 2013-10-10 06:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-23 00:55 - 2013-10-10 06:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-23 00:54 - 2013-10-10 06:19 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-23 00:54 - 2013-10-10 06:19 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-22 02:08 - 2013-09-22 02:08 - 00003196 _____ C:\Users\Ossiel\Downloads\Outlast Crack.nzb 2013-09-22 02:07 - 2013-09-22 02:07 - 00000563 _____ C:\Users\Public\Desktop\Outlast.lnk 2013-09-22 02:07 - 2012-10-08 03:47 - 00000000 ____D C:\Users\Ossiel\Documents\My Games 2013-09-22 01:41 - 2013-09-22 01:41 - 02861525 _____ C:\Users\Ossiel\Downloads\picozip-recovery-tool_13451.exe 2013-09-22 01:41 - 2013-09-22 01:41 - 00000000 ____D C:\Program Files (x86)\PicoZipRT 2013-09-22 01:36 - 2013-09-22 01:36 - 01376768 _____ C:\Users\Ossiel\Downloads\7z920-x64.msi 2013-09-22 01:36 - 2013-09-22 01:36 - 00000000 ____D C:\Program Files\7-Zip 2013-09-22 01:10 - 2013-02-21 18:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-09-22 01:10 - 2012-10-09 01:56 - 00000000 ____D C:\ProgramData\Skype 2013-09-21 21:06 - 2012-10-12 03:54 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\dvdcss 2013-09-21 21:03 - 2013-09-21 21:03 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2013-09-21 20:59 - 2013-01-18 17:04 - 00000000 ____D C:\Users\Ossiel\AppData\Roaming\Dropbox 2013-09-21 20:57 - 2013-01-18 17:08 - 00000000 ___RD C:\Users\Ossiel\Dropbox 2013-09-21 19:39 - 2013-09-21 19:39 - 01388163 _____ C:\Users\Ossiel\Downloads\Pitch Perfect German.nzb 2013-09-21 17:57 - 2013-09-21 17:57 - 02792711 _____ C:\Users\Ossiel\Downloads\Life of Pi German.nzb 2013-09-21 17:51 - 2013-09-21 17:51 - 01582690 _____ C:\Users\Ossiel\Downloads\Killing them Softly German.nzb 2013-09-21 17:47 - 2013-09-21 17:47 - 00556972 _____ C:\Users\Ossiel\Downloads\John Carter German.nzb 2013-09-21 17:44 - 2013-09-21 17:44 - 02119308 _____ C:\Users\Ossiel\Downloads\Hotel Transsilvanien German.nzb 2013-09-21 17:40 - 2013-09-21 17:40 - 00985822 _____ C:\Users\Ossiel\Downloads\Hit and Run German.nzb 2013-09-21 17:32 - 2013-09-21 17:32 - 01311987 _____ C:\Users\Ossiel\Downloads\Outlast.nzb 2013-09-21 17:31 - 2013-09-21 17:31 - 01171752 _____ C:\Users\Ossiel\Downloads\Frankenweenie German.nzb 2013-09-21 17:26 - 2013-09-21 17:26 - 03752867 _____ C:\Users\Ossiel\Downloads\Dark Shadows German.nzb 2013-09-21 17:25 - 2013-09-21 17:25 - 00747384 _____ C:\Users\Ossiel\Downloads\dark_shadows_2012_rerip_720p_bluray_x264-amiable.nzb 2013-09-21 17:17 - 2013-09-21 17:17 - 01153955 _____ C:\Users\Ossiel\Downloads\Cold Light of day German.nzb 2013-09-21 17:14 - 2013-09-21 17:14 - 03693519 _____ C:\Users\Ossiel\Downloads\Cloud Atlas German.nzb 2013-09-21 17:06 - 2013-09-21 17:06 - 02253467 _____ C:\Users\Ossiel\Downloads\Das Bourne VermLchtnis.nzb 2013-09-21 17:01 - 2013-09-21 17:01 - 02986013 _____ C:\Users\Ossiel\Downloads\Hnsel und Gretel-Hexenjger 2013 1080p AVCHD.nzb 2013-09-21 16:57 - 2013-09-21 16:57 - 01764581 _____ C:\Users\Ossiel\Downloads\Kick Ass German 2010.nzb 2013-09-21 16:56 - 2013-09-21 16:56 - 04341556 _____ C:\Users\Ossiel\Downloads\Kick Ass 2010.nzb 2013-09-21 16:54 - 2013-09-21 16:54 - 02401634 _____ C:\Users\Ossiel\Downloads\Sinister German.nzb 2013-09-21 16:51 - 2013-09-21 16:51 - 01085965 _____ C:\Users\Ossiel\Downloads\MAMA german 2013.nzb 2013-09-21 16:47 - 2013-09-21 16:47 - 01480310 _____ C:\Users\Ossiel\Downloads\Apparition German.nzb 2013-09-21 16:42 - 2013-09-21 16:42 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt (1).nzb 2013-09-21 16:40 - 2013-09-21 16:40 - 00411956 _____ C:\Users\Ossiel\Downloads\Chroniken der Unterwelt.nzb 2013-09-21 06:37 - 2013-09-21 06:35 - 04913399 _____ C:\Users\Ossiel\Downloads\Clare, Cassandra - Chroniken der Unterwelt - 01 - City of Bones.[pdf.epub.jpg].rar 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore.torrent 2013-09-21 06:15 - 2013-09-21 06:15 - 00001041 _____ C:\Users\Ossiel\Downloads\[kickass.to]the.rise.of.nine.lorien.legacies.pittacus.lore (1).torrent 2013-09-21 05:38 - 2013-10-10 06:19 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-21 05:30 - 2013-10-10 06:19 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-21 04:48 - 2013-10-10 06:19 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-21 04:39 - 2013-10-10 06:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe Some content of TEMP: ==================== C:\Users\Ossiel\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-11 00:19 ==================== End Of Log ============================ --- --- --- --- --- --- Habe allerdings immernoch die WindowsTime.exe im Hintergrund laufen. Jedoch ist die TimeServer.exe nicht mehr aufgetaucht. Ein großes großes Danke dafür. Die cgm.exe hat sich diesmal zwar nicht mit dem Systemstart im Task-Manager geöffnet, jedoch ist die Datenansammlung inklusive der .exe Datei im (C:\Users\Ossiel\Documents\cgnew) immernoch vorhanden. Ist das Normal so? |
21.10.2013, 15:49 | #8 |
/// the machine /// TB-Ausbilder | cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter R2 Time; C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe [10752 2013-09-22] (Microsoft) 2013-10-17 05:33 - 2013-10-17 05:33 - 00000000 ____D C:\Users\Ossiel\Documents\cgnew Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu cmg.exe verbraucht laut Task-Manager 100% meiner CPU Leistung! |
100%, anderen, antivirus, cmg.exe, cpu, ebenfalls, file, forum, gen, interne, internet, langsamer, log, log file, malware, microsoft, problem, programme, programmen, rechner, security, start, task-manager, unbemerkt, virus, windows, öffnet |