| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Bei Internetverbindungsaufbau GPU Last hoch trotz idleWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
26.10.2013, 12:26
| #1 |
| |  Bei Internetverbindungsaufbau GPU Last hoch trotz idle Hallo, habe mich mal registriert da ich dieses Problem nicht gelöst bekomme. natürlich habe ich schon gegoogled. BitCoiner Virus, etc., aber das Problem hatte ich eigentlich shcon vor Wochen. Dort hatte ich auch erhöhte Last auf dem Desktop, GPU-Z zeigte dauerhafte Auslastung von 88-100 an und daraufhin hab ich mich schon damit beschäftigt und den BitCoiner Virus gefunden. Den habe ich auch entfernt, auch wenns etwas hartnäckig war. War dann wochenlang Ruhe, bis mir jetzt auffiel das der Lüfter wieder lauter läfut als sonst. GPU-Z gecheckt und siehe da, wieder stabil bei 95 Grad auf dem Desktop. Aber diesmal eben NUR wenn ich online gehe...offline passiert da überhaupt nichts. Beim letzten Mal meine ich war dasn icht so, wobei ich mir grad gar nicht mehr sicher bin, ob ich damals überhaupt die Option Internetverbindung geprüft habe. In jedem Fall findet Anti Malwarebytes nix mehr. Microsoft Sec Essentials findet auch nichts. Ich habe schon mit dem process Explorer versucht die GPu Last zu lokalisieren, keine Chance. Ich sehe auch keine unnötigen Prozesse.Hijackthis wollt ihr nicht, poste icha uch nicht, hab ich aber auch drüber laufen lassen. War auch nichts gravierendes dabei(hab 2-3 sachen gefixt, aber keine Änderung bei der GPU Last). Also müssen wir die Sache nochmal von vorne aufrollen und ich würde mich über Hilfe freuen. Einen FRST Log habe ich auch schon mitgebracht. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2013
Ran by KarotteZock (administrator) on KAKAROTT-ZOCK on 26-10-2013 12:28:58
Running from C:\Users\KarotteZock\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(TODO: <Company name>) C:\VIA_XHCI\usb3Monitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(ATI Technologies) C:\Users\KarotteZock\AppData\Local\ATI Technologies\atiedxx.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies2\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies2\ATI.ACE\Core-Static\CCC.exe
(techPowerUp (www.techpowerup.com)) C:\Users\KarotteZock\Desktop\Übertaktungstools\GPU-Z.0.7.2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
() C:\Gamez\PoE\PathOfExile.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [VIAxHCUtl] - C:\VIA_XHCI\usb3Monitor.exe [331776 2011-03-29] (TODO: <Company name>)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12681320 2011-08-26] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Run: [Google Update*] - [x] <===== ATTENTION (ZeroAccess rootkit hidden path)
HKCU\...\Run: [] - C:\Users\KarotteZock\AppData\Local\ATI Technologies\atidxx.exe [10240 2013-10-14] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies2\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
==================== Internet (Whitelisted) ====================
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Winsock: Catalog5 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5-x64 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Tcpip\..\Interfaces\{4B3B937D-89DE-40AF-B022-81C94D07FD7E}: [NameServer]192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\KarotteZock\AppData\Roaming\Mozilla\Firefox\Profiles\jpvu1e8v.default
FF Homepage: www.sport1.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\KarotteZock\AppData\Roaming\Mozilla\Firefox\Profiles\jpvu1e8v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-10-08] (Advanced Micro Devices, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-03-22] ()
R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [189248 2013-03-22] ()
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [756120 2013-08-08] (Tunngle.net GmbH)
U2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{e7196321-a42c-d892-e7da-bf048349d977}\ \...\???\{e7196321-a42c-d892-e7da-bf048349d977}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2; C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-10-03] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [176640 2011-05-22] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [230400 2011-05-22] (VIA Technologies, Inc.)
S3 ALSysIO; \??\C:\Users\KAROTT~1\AppData\Local\Temp\ALSysIO64.sys [x]
S2 AODDriver4.2.0; \??\C:\Program Files (x86)\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S1 glamjgkb; \??\C:\Windows\system32\drivers\glamjgkb.sys [x]
R3 GPU-Z; \??\C:\Users\KAROTT~1\AppData\Local\Temp\GPU-Z.sys [x]
S3 TCCrystalCpuInfo; \??\C:\Users\KAROTT~1\AppData\Local\Temp\TCCpuInfo64.sys [x]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
========================== Drivers MD5 =======================
C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 1C7857B62DE5994A75B054A9FD4C3825
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ahcix64s.sys EDA7E60B5A47D9E47E0E843CAC624FF3
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\amdiox64.sys 6A2EEB0C4133B20773BB3DD0B7B377B4
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\atikmdag.sys 784C941B5A19D69814F9514CFB733906
C:\Windows\System32\DRIVERS\atikmpag.sys 954759EAE7FB2591A5E7206AB0093AE7
C:\Windows\System32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\amd64\AODDriver2.sys F2154A205F4B784B61A72AEBC72BDC5F
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\athrx.sys A5E770426D18F8EF332A593F3289DA91
C:\Windows\System32\drivers\AtihdW76.sys 37CB595C0AB20ECBFA5170D3185690DB
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 9AC4F97C2D3E93367E2148EA940CD2CD
C:\Windows\System32\drivers\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\dtsoftbus01.sys 400582B09E0BB557D0EC28A945150EEB
C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys ==> MD5 is legit
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\System32\DRIVERS\igdkmd64.sys ==> MD5 is legit
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHD64.sys A5F7CEF8A939EBE270462EDEFD629F20
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4
C:\Windows\System32\Drivers\ksecpkg.sys 26C43A7C2862447EC59DEDA188D1DA07
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mbam.sys 0BB97D43299910CBFBA59C461B99B910
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\MijXfilt.sys C030F9E822A057C1A7A9BB4EA3E8877E
C:\Windows\system32\drivers\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\drivers\RtHDMIVX.sys C618475866F6A7129F64A55961C1BB8B
C:\Windows\System32\DRIVERS\Rt64win7.sys EE082E06A82FF630351D1E0EBBD3D8D0
C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\Synth3dVsc.sys C3A39C4079305480972D29C44B868C78
C:\Windows\System32\DRIVERS\tap0901t.sys B08740047145B9BCE15BF75CA0F9718A
C:\Windows\System32\drivers\tcpip.sys DB74544B75566C974815E79A62433F29
C:\Windows\System32\DRIVERS\tcpip.sys DB74544B75566C974815E79A62433F29
C:\Windows\System32\drivers\tcpipreg.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\system32\drivers\terminpt.sys 2B5BDFF688EC9871D7EC5837833374E9
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
C:\Windows\system32\drivers\TsUsbGD.sys 9CC2CCAE8A84820EAECB886D477CBCB8
C:\Windows\system32\drivers\tsusbhub.sys E1748D04AE40118B62BC18AC86032192
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\system32\drivers\usbaudio.sys B0435098C81D04CAFFF80DDB746CD3A2
C:\Windows\System32\DRIVERS\usbccgp.sys ACCEA6BC68D0C9A78EB97EE159028B4E
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\System32\DRIVERS\usbehci.sys 311C1DD1088E55BEAE15954D17F50646
C:\Windows\System32\DRIVERS\usbhub.sys 280E90CBF4B2DDD169F0728CB44D726F
C:\Windows\System32\DRIVERS\usbohci.sys 9406D801042FAF859CF81B2C886413DC
C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys A83D0EC9AE4C31704442099D40BA2471
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ViaHub3.sys 5BE34BFADE20FF6C154B4663605B6212
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWow64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUSB.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WUDFRd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\xhcdrv.sys 109B6F1888845661D19B7A458776D5D1
C:\Windows\System32\DRIVERS\xusb21.sys 9176C0822FAA649E45121875BE32F5D2
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-26 12:28 - 2013-10-26 12:28 - 01956086 _____ (Farbar) C:\Users\KarotteZock\Downloads\FRST64.exe
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\ATI
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\AMD
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\ProgramData\ATI
2013-10-26 12:11 - 2013-10-26 12:11 - 00000000 _____ C:\Windows\ativpsrm.bin
2013-10-26 12:10 - 2013-10-26 12:10 - 00067045 _____ C:\Windows\SysWOW64\CCCInstall_201310261210389012.log
2013-10-26 12:10 - 2013-10-26 12:10 - 00000000 ____D C:\ProgramData\AMD
2013-10-26 12:10 - 2013-10-26 12:10 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-10-26 12:10 - 2013-10-26 12:10 - 00000000 ____D C:\Program Files (x86)\ATI Technologies2
2013-10-26 12:08 - 2013-10-26 12:10 - 00000000 ____D C:\Program Files\ATI Technologies2
2013-10-26 12:08 - 2013-10-26 12:08 - 00000000 ____D C:\Program Files\ATI
2013-10-26 12:03 - 2013-10-26 12:03 - 00000000 ____D C:\Program Files\ATI Technologies
2013-10-26 12:02 - 2013-10-26 12:03 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\KarotteZock\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2013-10-26 11:59 - 2013-10-26 11:59 - 00055894 _____ C:\Windows\SysWOW64\CCCInstall_201310261159420892.log
2013-10-26 11:42 - 2013-10-26 11:42 - 00001641 _____ C:\Users\Public\Desktop\Path of Exile.lnk
2013-10-26 11:40 - 2013-10-26 11:40 - 07385088 _____ C:\Users\KarotteZock\Downloads\PathOfExileInstaller.msi
2013-10-26 11:33 - 2013-10-26 11:33 - 00000000 ____D C:\Users\KarotteZock\Downloads\backups
2013-10-26 11:27 - 2013-10-26 11:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\KarotteZock\Downloads\hijackthis.exe
2013-10-26 11:27 - 2013-10-26 11:27 - 00008144 _____ C:\Users\KarotteZock\Downloads\hijackthis.log
2013-10-26 02:20 - 2013-10-26 02:20 - 00002107 _____ C:\Users\Public\Desktop\Batman Arkham Origins.lnk
2013-10-25 23:19 - 2013-10-25 23:19 - 00000000 ____D C:\Users\KarotteZock\Documents\How To Survive Saves
2013-10-24 23:40 - 2013-10-24 23:48 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\dxhr
2013-10-24 23:40 - 2013-10-24 23:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\238010
2013-10-24 21:40 - 2013-10-24 21:41 - 00027227 _____ C:\Users\KarotteZock\Downloads\Addition.txt
2013-10-24 21:40 - 2013-10-24 21:40 - 00000000 ____D C:\FRST
2013-10-24 19:13 - 2013-10-24 19:13 - 24278649 _____ C:\Users\KarotteZock\Downloads\vlc-2.1.0-win32.exe
2013-10-21 19:59 - 2013-10-21 19:59 - 00062137 _____ C:\Windows\SysWOW64\CCCInstall_201310211959398584.log
2013-10-21 19:51 - 2013-10-21 19:50 - 02325160 _____ C:\Users\KarotteZock\Downloads\amd_cleanup_util_1.2.1.0.exe
2013-10-16 20:08 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-15 18:03 - 2013-10-15 18:03 - 00499712 _____ C:\Windows\SysWOW64\phatk121016Pitcairnv1w256l4.bin
2013-10-14 16:00 - 2013-10-14 16:00 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI Technologies
2013-10-09 02:54 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 02:54 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 02:54 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 02:54 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 02:54 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 02:54 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 02:54 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 02:54 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 02:54 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 02:54 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 02:54 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 02:54 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 02:53 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 02:53 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 02:53 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 02:53 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 01:37 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 01:37 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 01:37 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 01:37 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 01:37 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 01:37 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 01:37 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 01:37 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 01:37 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 01:37 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 01:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 01:37 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 01:37 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 01:37 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 01:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 01:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 01:37 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 01:37 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 01:37 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 01:37 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 01:37 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 01:37 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 01:37 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 01:37 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 01:37 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 01:37 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 01:37 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 01:37 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 01:37 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 01:37 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-09 01:37 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-10-09 01:37 - 2012-11-29 00:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-10-08 16:01 - 2013-10-08 16:01 - 01237200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 01030128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00156712 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00142792 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00141256 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00125824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00114488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00097984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 09464840 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 08215992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 07256496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 06767240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 06189416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 06176008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-10-08 15:58 - 2013-10-08 15:58 - 12534784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-10-08 15:39 - 2013-10-08 15:39 - 00229376 _____ C:\Windows\system32\clinfo.exe
2013-10-08 15:39 - 2013-10-08 15:39 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 28192256 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00127488 _____ (AMD) C:\Windows\system32\coinst_13.152.1.8.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-10-08 15:36 - 2013-10-08 15:36 - 23761408 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-10-08 15:34 - 2013-10-08 15:34 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-10-08 15:34 - 2013-10-08 15:34 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-10-08 15:17 - 2013-10-08 15:17 - 25385984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-10-08 15:14 - 2013-10-08 15:14 - 00530832 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-10-08 15:14 - 2013-10-08 15:14 - 00530832 _____ C:\Windows\system32\atiapfxx.blb
2013-10-08 15:13 - 2013-10-08 15:13 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-10-08 15:13 - 2013-10-08 15:13 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-10-08 15:09 - 2013-10-08 15:09 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 21400064 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-10-08 14:56 - 2013-10-08 14:56 - 03388672 _____ C:\Windows\system32\atiumd6a.cap
2013-10-08 14:56 - 2013-10-08 14:56 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
2013-10-08 14:56 - 2013-10-08 14:56 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2013-10-08 14:56 - 2013-10-08 14:56 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
2013-10-08 14:56 - 2013-10-08 14:56 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2013-10-08 14:54 - 2013-10-08 14:54 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-10-08 14:53 - 2013-10-08 14:53 - 00576512 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-10-08 14:53 - 2013-10-08 14:53 - 00026112 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-10-08 14:52 - 2013-10-08 14:52 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-10-08 14:51 - 2013-10-08 14:51 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-10-08 14:41 - 2013-10-08 14:41 - 03422720 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-10-08 14:29 - 2013-10-08 14:29 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00784384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00594944 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00090624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-10-08 14:27 - 2013-10-08 14:27 - 00619008 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-10-08 14:27 - 2013-10-08 14:27 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-10-08 14:24 - 2013-10-08 14:24 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-10-02 22:21 - 2013-10-03 23:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-28 22:49 - 2013-09-28 22:49 - 00000753 _____ C:\Users\KarotteZock\Desktop\Outlast.lnk
2013-09-28 22:49 - 2013-09-28 22:49 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\Outlast
2013-09-26 23:04 - 2013-09-26 23:04 - 01187342 _____ C:\Windows\system32\amdocl_as64.exe
2013-09-26 23:04 - 2013-09-26 23:04 - 01061902 _____ C:\Windows\system32\amdocl_ld64.exe
2013-09-26 23:04 - 2013-09-26 23:04 - 00995342 _____ C:\Windows\SysWOW64\amdocl_as32.exe
2013-09-26 23:04 - 2013-09-26 23:04 - 00798734 _____ C:\Windows\SysWOW64\amdocl_ld32.exe
==================== One Month Modified Files and Folders =======
2013-10-26 12:28 - 2013-10-26 12:28 - 01956086 _____ (Farbar) C:\Users\KarotteZock\Downloads\FRST64.exe
2013-10-26 12:18 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-26 12:18 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-26 12:16 - 2011-04-12 09:43 - 00699092 _____ C:\Windows\system32\perfh007.dat
2013-10-26 12:16 - 2011-04-12 09:43 - 00149232 _____ C:\Windows\system32\perfc007.dat
2013-10-26 12:16 - 2009-07-14 07:13 - 01619094 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\ATI
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\AMD
2013-10-26 12:12 - 2013-10-26 12:12 - 00000000 ____D C:\ProgramData\ATI
2013-10-26 12:11 - 2013-10-26 12:11 - 00000000 _____ C:\Windows\ativpsrm.bin
2013-10-26 12:11 - 2013-06-24 14:24 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-26 12:11 - 2012-09-01 08:27 - 00091892 _____ C:\Windows\setupact.log
2013-10-26 12:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-26 12:10 - 2013-10-26 12:10 - 00067045 _____ C:\Windows\SysWOW64\CCCInstall_201310261210389012.log
2013-10-26 12:10 - 2013-10-26 12:10 - 00000000 ____D C:\ProgramData\AMD
2013-10-26 12:10 - 2013-10-26 12:10 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-10-26 12:10 - 2013-10-26 12:10 - 00000000 ____D C:\Program Files (x86)\ATI Technologies2
2013-10-26 12:10 - 2013-10-26 12:08 - 00000000 ____D C:\Program Files\ATI Technologies2
2013-10-26 12:10 - 2012-10-02 21:28 - 01107615 _____ C:\Windows\WindowsUpdate.log
2013-10-26 12:09 - 2012-10-04 00:04 - 01592438 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-26 12:08 - 2013-10-26 12:08 - 00000000 ____D C:\Program Files\ATI
2013-10-26 12:03 - 2013-10-26 12:03 - 00000000 ____D C:\Program Files\ATI Technologies
2013-10-26 12:03 - 2013-10-26 12:02 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\KarotteZock\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2013-10-26 12:03 - 2013-06-01 20:20 - 00000000 ____D C:\Users\KarotteZock\Desktop\Neuer Ordner
2013-10-26 12:01 - 2010-11-21 05:47 - 00126382 _____ C:\Windows\PFRO.log
2013-10-26 11:59 - 2013-10-26 11:59 - 00055894 _____ C:\Windows\SysWOW64\CCCInstall_201310261159420892.log
2013-10-26 11:59 - 2013-07-24 18:13 - 00000000 ____D C:\Program Files (x86)\AMD
2013-10-26 11:42 - 2013-10-26 11:42 - 00001641 _____ C:\Users\Public\Desktop\Path of Exile.lnk
2013-10-26 11:42 - 2012-10-02 23:04 - 00000000 ____D C:\Gamez
2013-10-26 11:40 - 2013-10-26 11:40 - 07385088 _____ C:\Users\KarotteZock\Downloads\PathOfExileInstaller.msi
2013-10-26 11:33 - 2013-10-26 11:33 - 00000000 ____D C:\Users\KarotteZock\Downloads\backups
2013-10-26 11:31 - 2012-12-14 21:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-26 11:27 - 2013-10-26 11:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\KarotteZock\Downloads\hijackthis.exe
2013-10-26 11:27 - 2013-10-26 11:27 - 00008144 _____ C:\Users\KarotteZock\Downloads\hijackthis.log
2013-10-26 02:21 - 2012-10-10 02:15 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\uTorrent
2013-10-26 02:20 - 2013-10-26 02:20 - 00002107 _____ C:\Users\Public\Desktop\Batman Arkham Origins.lnk
2013-10-26 02:20 - 2012-10-03 00:39 - 00514310 _____ C:\Windows\DirectX.log
2013-10-26 01:17 - 2012-10-02 23:17 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\vlc
2013-10-26 01:08 - 2012-10-03 00:57 - 00000000 ____D C:\Users\KarotteZock\Documents\My Games
2013-10-26 00:47 - 2012-10-03 05:39 - 00000000 ____D C:\Users\KarotteZock\Documents\KONAMI
2013-10-25 23:19 - 2013-10-25 23:19 - 00000000 ____D C:\Users\KarotteZock\Documents\How To Survive Saves
2013-10-24 23:48 - 2013-10-24 23:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\dxhr
2013-10-24 23:40 - 2013-10-24 23:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\238010
2013-10-24 21:41 - 2013-10-24 21:40 - 00027227 _____ C:\Users\KarotteZock\Downloads\Addition.txt
2013-10-24 21:40 - 2013-10-24 21:40 - 00000000 ____D C:\FRST
2013-10-24 19:13 - 2013-10-24 19:13 - 24278649 _____ C:\Users\KarotteZock\Downloads\vlc-2.1.0-win32.exe
2013-10-22 22:51 - 2013-10-24 23:41 - 11914800 _____ (Square Enix Limited) C:\Users\KarotteZock\Desktop\DXHRDC.exe
2013-10-22 19:58 - 2013-09-08 19:24 - 00001912 _____ C:\Windows\epplauncher.mif
2013-10-21 22:22 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-21 22:15 - 2013-09-09 19:40 - 00003044 _____ C:\Windows\System32\Tasks\MSIAfterburner
2013-10-21 19:59 - 2013-10-21 19:59 - 00062137 _____ C:\Windows\SysWOW64\CCCInstall_201310211959398584.log
2013-10-21 19:57 - 2013-07-29 21:43 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-21 19:50 - 2013-10-21 19:51 - 02325160 _____ C:\Users\KarotteZock\Downloads\amd_cleanup_util_1.2.1.0.exe
2013-10-21 19:10 - 2013-10-21 19:10 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\Arma 3
2013-10-21 19:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-20 05:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-19 21:25 - 2013-10-19 21:25 - 00000000 ____D C:\Users\KarotteZock\Documents\Telltale Games
2013-10-16 20:49 - 2012-10-02 21:29 - 00057944 _____ C:\Users\KarotteZock\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-16 20:49 - 2009-07-14 06:45 - 00276280 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-16 20:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-10-15 18:03 - 2013-10-15 18:03 - 00499712 _____ C:\Windows\SysWOW64\phatk121016Pitcairnv1w256l4.bin
2013-10-14 16:00 - 2013-10-14 16:00 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI Technologies
2013-10-13 15:45 - 2013-04-24 22:17 - 00000000 ____D C:\Users\KarotteZock\Desktop\Movies
2013-10-11 00:34 - 2012-12-14 21:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-11 00:34 - 2012-10-02 22:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-11 00:34 - 2012-10-02 22:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 02:53 - 2013-09-22 22:36 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 02:53 - 2012-08-31 23:36 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-08 16:01 - 2013-10-08 16:01 - 01237200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 01030128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00156712 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00142792 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00141256 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00125824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00114488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00097984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-10-08 16:01 - 2013-10-08 16:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 09464840 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 08215992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 07256496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 06767240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 06189416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-10-08 16:00 - 2013-10-08 16:00 - 06176008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-10-08 15:58 - 2013-10-08 15:58 - 12534784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-10-08 15:39 - 2013-10-08 15:39 - 00229376 _____ C:\Windows\system32\clinfo.exe
2013-10-08 15:39 - 2013-10-08 15:39 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 28192256 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00127488 _____ (AMD) C:\Windows\system32\coinst_13.152.1.8.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-10-08 15:38 - 2013-10-08 15:38 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-10-08 15:36 - 2013-10-08 15:36 - 23761408 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-10-08 15:34 - 2013-10-08 15:34 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-10-08 15:34 - 2013-10-08 15:34 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-10-08 15:17 - 2013-10-08 15:17 - 25385984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-10-08 15:14 - 2013-10-08 15:14 - 00530832 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-10-08 15:14 - 2013-10-08 15:14 - 00530832 _____ C:\Windows\system32\atiapfxx.blb
2013-10-08 15:13 - 2013-10-08 15:13 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-10-08 15:13 - 2013-10-08 15:13 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-10-08 15:13 - 2013-10-08 15:13 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-10-08 15:09 - 2013-10-08 15:09 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 21400064 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-10-08 14:56 - 2013-10-08 14:56 - 03388672 _____ C:\Windows\system32\atiumd6a.cap
2013-10-08 14:56 - 2013-10-08 14:56 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
2013-10-08 14:56 - 2013-10-08 14:56 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2013-10-08 14:56 - 2013-10-08 14:56 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
2013-10-08 14:56 - 2013-10-08 14:56 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2013-10-08 14:54 - 2013-10-08 14:54 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-10-08 14:53 - 2013-10-08 14:53 - 00576512 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-10-08 14:53 - 2013-10-08 14:53 - 00026112 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-10-08 14:52 - 2013-10-08 14:52 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-10-08 14:51 - 2013-10-08 14:51 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-10-08 14:41 - 2013-10-08 14:41 - 03422720 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-10-08 14:29 - 2013-10-08 14:29 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00784384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00594944 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00090624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-10-08 14:28 - 2013-10-08 14:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-10-08 14:27 - 2013-10-08 14:27 - 00619008 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-10-08 14:27 - 2013-10-08 14:27 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-10-08 14:24 - 2013-10-08 14:24 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-10-06 20:10 - 2013-04-24 22:29 - 00000000 ____D C:\Users\KarotteZock\Desktop\Mugge
2013-10-04 19:50 - 2013-05-26 14:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-03 23:45 - 2013-10-02 22:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 23:45 - 2012-10-02 21:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\Mozilla
2013-09-28 22:49 - 2013-09-28 22:49 - 00000753 _____ C:\Users\KarotteZock\Desktop\Outlast.lnk
2013-09-28 22:49 - 2013-09-28 22:49 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\Outlast
2013-09-26 23:04 - 2013-09-26 23:04 - 01187342 _____ C:\Windows\system32\amdocl_as64.exe
2013-09-26 23:04 - 2013-09-26 23:04 - 01061902 _____ C:\Windows\system32\amdocl_ld64.exe
2013-09-26 23:04 - 2013-09-26 23:04 - 00995342 _____ C:\Windows\SysWOW64\amdocl_as32.exe
2013-09-26 23:04 - 2013-09-26 23:04 - 00798734 _____ C:\Windows\SysWOW64\amdocl_ld32.exe
Files to move or delete:
====================
ZeroAccess:
C:\Program Files (x86)\Google\Desktop\Install
Some content of TEMP:
====================
C:\Users\KarotteZock\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\KarotteZock\AppData\Local\Temp\Cleanup.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== BCD ================================
Windows-Start-Manager
---------------------
Bezeichner {bootmgr}
device partition=C:
description Windows Boot Manager
locale de-DE
inherit {globalsettings}
default {current}
resumeobject {9fe4fe36-0cce-11e2-87d5-a8781511c56d}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Windows-Startladeprogramm
-------------------------
Bezeichner {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale de-DE
inherit {bootloadersettings}
recoverysequence {9fe4fe38-0cce-11e2-87d5-a8781511c56d}
recoveryenabled Yes
testsigning No
osdevice partition=C:
systemroot \Windows
resumeobject {9fe4fe36-0cce-11e2-87d5-a8781511c56d}
nx OptIn
Windows-Startladeprogramm
-------------------------
Bezeichner {9fe4fe38-0cce-11e2-87d5-a8781511c56d}
device ramdisk=[C:]\Recovery\9fe4fe38-0cce-11e2-87d5-a8781511c56d\Winre.wim,{9fe4fe39-0cce-11e2-87d5-a8781511c56d}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\9fe4fe38-0cce-11e2-87d5-a8781511c56d\Winre.wim,{9fe4fe39-0cce-11e2-87d5-a8781511c56d}
systemroot \windows
nx OptIn
winpe Yes
Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner {9fe4fe36-0cce-11e2-87d5-a8781511c56d}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale de-DE
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No
Windows-Speichertestprogramm
----------------------------
Bezeichner {memdiag}
device partition=C:
path \boot\memtest.exe
description Windows-Speicherdiagnose
locale de-DE
inherit {globalsettings}
badmemoryaccess Yes
EMS-Einstellungen
-----------------
Bezeichner {emssettings}
bootems Yes
Debuggereinstellungen
---------------------
Bezeichner {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
RAM-Defekte
-----------
Bezeichner {badmemory}
Globale Einstellungen
---------------------
Bezeichner {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Startladeprogramm-Einstellungen
-------------------------------
Bezeichner {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Hypervisoreinstellungen
-------------------
Bezeichner {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner {resumeloadersettings}
inherit {globalsettings}
Ger„teoptionen
--------------
Bezeichner {9fe4fe39-0cce-11e2-87d5-a8781511c56d}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\9fe4fe38-0cce-11e2-87d5-a8781511c56d\boot.sdi
LastRegBack: 2013-10-16 03:45
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2013
Ran by KarotteZock at 2013-10-26 12:29:15
Running from C:\Users\KarotteZock\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
AMD Catalyst Control Center (x32 Version: 2013.1008.932.15229)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Fuel (Version: 2013.1008.932.15229)
Atheros Client Installation Program (x32 Version: 7.0)
Castlevania: Lords of Shadow - Ultimate Edition (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1008.932.15229)
Catalyst Control Center InstallProxy (x32 Version: 2013.1008.932.15229)
Catalyst Control Center Localization All (x32 Version: 2013.1008.932.15229)
CCC Help Chinese Standard (x32 Version: 2013.1008.0931.15229)
CCC Help Chinese Traditional (x32 Version: 2013.1008.0931.15229)
CCC Help Czech (x32 Version: 2013.1008.0931.15229)
CCC Help Danish (x32 Version: 2013.1008.0931.15229)
CCC Help Dutch (x32 Version: 2013.1008.0931.15229)
CCC Help English (x32 Version: 2013.1008.0931.15229)
CCC Help Finnish (x32 Version: 2013.1008.0931.15229)
CCC Help French (x32 Version: 2013.1008.0931.15229)
CCC Help German (x32 Version: 2013.1008.0931.15229)
CCC Help Greek (x32 Version: 2013.1008.0931.15229)
CCC Help Hungarian (x32 Version: 2013.1008.0931.15229)
CCC Help Italian (x32 Version: 2013.1008.0931.15229)
CCC Help Japanese (x32 Version: 2013.1008.0931.15229)
CCC Help Korean (x32 Version: 2013.1008.0931.15229)
CCC Help Norwegian (x32 Version: 2013.1008.0931.15229)
CCC Help Polish (x32 Version: 2013.1008.0931.15229)
CCC Help Portuguese (x32 Version: 2013.1008.0931.15229)
CCC Help Russian (x32 Version: 2013.1008.0931.15229)
CCC Help Spanish (x32 Version: 2013.1008.0931.15229)
CCC Help Swedish (x32 Version: 2013.1008.0931.15229)
CCC Help Thai (x32 Version: 2013.1008.0931.15229)
CCC Help Turkish (x32 Version: 2013.1008.0931.15229)
ccc-utility64 (Version: 2013.1008.932.15229)
CL-Eye Driver (x32 Version: 5.0.1.0218)
Core Temp version 0.99.8 (Version: 0.99.8)
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0000.130)
Dual-Core Optimizer (x32 Version: 1.1.4.0169)
Dust: An Elysian Tail (x32)
Fraps (x32)
Frozen Synapse (x32 Version: 32)
Google Update Helper (x32 Version: 1.3.21.153)
Java 7 Update 25 (x32 Version: 7.0.250)
Java 7 Update 7 (x32 Version: 7.0.70)
Java Auto Updater (x32 Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mark of the Ninja Special Edition (x32)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False (x32 Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False (x32 Version: 8.0.58299)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False (x32 Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False (x32 Version: 9.0.30729.4048)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False (x32 Version: 10.0.30319)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 False (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 False (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 False (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual F# 2.0 Runtime (x32 Version: 10.0.30319)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0)
MotioninJoy Gamepad tool 0.7.1001 (Version: 0.7.1001)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
My Game Long Name
OpenAL (x32)
Outlast (x32)
Path of Exile (x32 Version: 1.0.0.29055)
Platform (x32 Version: 1.38)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 3.0)
Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6251)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6449)
Samsung SSD Magician (x32 Version: 3.1.1)
Steam (x32 Version: 1.0.0.0)
TeamViewer 8 (x32 Version: 8.0.20202)
Tunngle beta (x32)
Unlocker 1.9.2 (Version: 1.9.2)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
VIA Plattform-Geräte-Manager (x32 Version: 1.38)
VLC media player 2.0.3 (x32 Version: 2.0.3)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR (x32)
==================== Restore Points =========================
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0F8473BA-8CCE-4717-9EED-CE7F58227B03} - System32\Tasks\{AE972875-F65E-4CD3-B93C-8366AE62743E} => D:\SETUP\SETUP.EXE
Task: {60D06927-B3F2-45CB-BB34-336750B6DE28} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-11] (Adobe Systems Incorporated)
Task: {827C4B0D-6ADA-4E12-85B9-22889F331E41} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {A3D2B064-FD02-452B-9569-7129F54CE7A4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {BF30D969-EC9D-4FFE-9BD8-63EA25AEB446} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {E4C106B5-57C6-401B-B0A2-D143D02C66E0} - System32\Tasks\{0CA26BDA-E355-43F6-B32D-D9B69E395B50} => D:\SETUP\SETUP.EXE
Task: {F5156FEF-155E-408F-82BA-C6BF1D40146A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {F812AAC4-9E73-462C-9195-E9149C96E1FC} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-10-08 09:34 - 2013-10-08 09:34 - 00102400 _____ () C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-06-24 14:29 - 2013-08-22 00:18 - 00687104 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-06-24 14:29 - 2013-10-09 04:19 - 01121704 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-06-24 14:29 - 2013-09-11 00:20 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-24 14:29 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-24 14:29 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-24 14:29 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-10-02 22:21 - 2013-10-02 22:21 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: AODDriver4.2.0
Description: AODDriver4.2.0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AODDriver4.2.0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/26/2013 00:13:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 00:07:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 00:02:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 11:59:23 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: atiedxx.exe, Version: 2.0.0.0, Zeitstempel: 0x514557a8
Name des fehlerhaften Moduls: amdocl.dll, Version: 10.0.1311.2, Zeitstempel: 0x5244a0ba
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00186f49
ID des fehlerhaften Prozesses: 0x650
Startzeit der fehlerhaften Anwendung: 0xatiedxx.exe0
Pfad der fehlerhaften Anwendung: atiedxx.exe1
Pfad des fehlerhaften Moduls: atiedxx.exe2
Berichtskennung: atiedxx.exe3
Error: (10/26/2013 11:36:01 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 11:28:01 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 00:44:59 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HowToSurvive.exe, Version: 0.0.0.0, Zeitstempel: 0x52667b84
Name des fehlerhaften Moduls: HowToSurvive.exe, Version: 0.0.0.0, Zeitstempel: 0x52667b84
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0008c0f2
ID des fehlerhaften Prozesses: 0xedc
Startzeit der fehlerhaften Anwendung: 0xHowToSurvive.exe0
Pfad der fehlerhaften Anwendung: HowToSurvive.exe1
Pfad des fehlerhaften Moduls: HowToSurvive.exe2
Berichtskennung: HowToSurvive.exe3
Error: (10/25/2013 08:41:02 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/24/2013 06:11:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/23/2013 08:35:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: atiedxx.exe, Version: 2.0.0.0, Zeitstempel: 0x514557a8
Name des fehlerhaften Moduls: amdocl.dll, Version: 10.0.1311.2, Zeitstempel: 0x5244a0ba
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001240e0
ID des fehlerhaften Prozesses: 0xa5c
Startzeit der fehlerhaften Anwendung: 0xatiedxx.exe0
Pfad der fehlerhaften Anwendung: atiedxx.exe1
Pfad des fehlerhaften Moduls: atiedxx.exe2
Berichtskennung: atiedxx.exe3
System errors:
=============
Error: (10/26/2013 00:26:16 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (10/26/2013 00:11:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.
Error: (10/26/2013 00:11:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error: (10/26/2013 00:06:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.
Error: (10/26/2013 00:06:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error: (10/26/2013 00:01:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/26/2013 00:01:13 PM) (Source: DCOM) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}
Error: (10/26/2013 00:01:08 PM) (Source: DCOM) (User: )
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (10/26/2013 00:01:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/26/2013 00:01:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
Error: (10/26/2013 00:13:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 00:07:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 00:02:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 11:59:23 AM) (Source: Application Error)(User: )
Description: atiedxx.exe2.0.0.0514557a8amdocl.dll10.0.1311.25244a0bac000000500186f4965001ced22e880e25abC:\Users\KarotteZock\AppData\Local\ATI Technologies\atiedxx.exeC:\Windows\system32\amdocl.dll4a203003-3e25-11e3-a965-00012e35cde2
Error: (10/26/2013 11:36:01 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 11:28:01 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/26/2013 00:44:59 AM) (Source: Application Error)(User: )
Description: HowToSurvive.exe0.0.0.052667b84HowToSurvive.exe0.0.0.052667b84c00000050008c0f2edc01ced1c80dfd0794C:\Gamez\How To Survive\HowToSurvive.exeC:\Gamez\How To Survive\HowToSurvive.exe13a791d6-3dc7-11e3-b524-a63806700d45
Error: (10/25/2013 08:41:02 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/24/2013 06:11:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/23/2013 08:35:56 PM) (Source: Application Error)(User: )
Description: atiedxx.exe2.0.0.0514557a8amdocl.dll10.0.1311.25244a0bac0000005001240e0a5c01ced0125d78c745C:\Users\KarotteZock\AppData\Local\ATI Technologies\atiedxx.exeC:\Windows\system32\amdocl.dllf3adb885-3c11-11e3-ac7e-00012e35cde2
CodeIntegrity Errors:
===================================
Date: 2013-09-08 09:42:17.701
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:17.691
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:16.388
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:16.373
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:04.243
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:04.223
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:02.686
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:02.671
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:23:24.012
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:23:23.997
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 23%
Total physical RAM: 8191.3 MB
Available physical RAM: 6297.73 MB
Total Pagefile: 9254.16 MB
Available Pagefile: 6971.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Samsung SSD 830) (Fixed) (Total:119.24 GB) (Free:9.13 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (MyFATdrive) (Fixed) (Total:232.82 GB) (Free:23.01 GB) FAT32
Drive g: (FATSTUFF) (Removable) (Total:14.93 GB) (Free:13.67 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 8258E56B)
Partition 1: (Active) - (Size=119 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 15 GB) (Disk ID: 5A81EBDE)
Partition 1: (Active) - (Size=15 GB) - (Type=0C)
========================================================
Disk: 2 (Size: 233 GB) (Disk ID: 6213D219)
Partition 1: (Not Active) - (Size=233 GB) - (Type=0B)
==================== End Of Log ============================[/quote]
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-26 13:14:57
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 SAMSUNG_SSD_830_Series rev.CXM03B1Q 119,24GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\KAROTT~1\AppData\Local\Temp\kxdorfoc.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Steam\Steam.exe[1092] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate 000000007602549c 5 bytes JMP 00000001001f0800
.text C:\Users\KarotteZock\AppData\Local\ATI Technologies\atiedxx.exe[1816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075af1465 2 bytes [AF, 75]
.text C:\Users\KarotteZock\AppData\Local\ATI Technologies\atiedxx.exe[1816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075af14bb 2 bytes [AF, 75]
.text ... * 2
.text C:\Windows\SysWOW64\PnkBstrA.exe[2072] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 00000000731e1a22 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2072] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 00000000731e1ad0 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2072] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 00000000731e1b08 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2072] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 00000000731e1bba 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2072] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 00000000731e1bda 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 00000000731e1a22 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 00000000731e1ad0 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 00000000731e1b08 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 00000000731e1bba 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 00000000731e1bda 2 bytes [1E, 73]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075af1465 2 bytes [AF, 75]
.text C:\Windows\SysWOW64\PnkBstrB.exe[2192] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 0000000075af14bb 2 bytes [AF, 75]
.text ... * 2
---- Threads - GMER 2.1 ----
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4108:4188] 0000000075c07587
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4108:4192] 00000000665b758a
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4108:4220] 0000000077072e65
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4108:4496] 0000000077073e85
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4108:3412] 0000000077073e85
Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4108:4988] 0000000077073e85
Thread C:\Windows\System32\svchost.exe [1604:4312] 000007fee58e9688
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\
Reg HKLM\SYSTEM\CurrentControlSet\services\@Parameters\0\x202e\x2764 400
Reg HKLM\SYSTEM\ControlSet002\services\ (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\@Parameters\0\x202e\x2764 400
---- EOF - GMER 2.1 ----
Würde mich sehr freuen wenn ihr mir helfen könnt. Was ich aktuell nicht verstehe, aber natürlich machen kann wenn es dringend erforderlich ist, wieso müssen CD/DVD Emulatoren ausgeschaltet bzw. deinstalliert werden? Kann die natürlich auch deaktivieren oder rauswerfen, aber ein virtuelles Laufwerk ist ja anfürsich nix schlimmes? Hofef ansonsten alle Infos passen. Danke für alle Ratschläge und die Zeit sich das durchzulesen. Bin heute erstmal hier und sollte es zeitnah mitbekommen wenn jmd reagiert. Gehe jetzt erstmaloffline um die GPU zu schonen *g* Viele Grüsse, Kakarott |
|
26.10.2013, 12:59
| #2 | |
| /// the machine /// TB-Ausbilder    | Bei Internetverbindungsaufbau GPU Last hoch trotz idle Naja, ist ja doch ziemlich eindeutig
__________________ Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
26.10.2013, 13:32
| #3 |
| | Bei Internetverbindungsaufbau GPU Last hoch trotz idle Ist das normal das ComboFix sehr lange braucht?
__________________Da steht seit ich das Programm ausgeführt habe "Versuche einen Systemwiederherstellungspunkt zu erstellen". Bestimmt schon so 5-10 Minuten...? Hört sich aber so an als wüsstest du was mein Problem ist, das find ich schonmal gut Edit: Done! War jetzt grad kurz duschen da ComboFix zwar weiterging, aber meldete das es ~ 10mins dauert bis er fertig ist. Als ich grad wieder ins Wohnzimmer kam, sah ich nen Bluescreen. Rechner hat sich selber neugestartet und dann fuhr er normal hoch. Keine Ahnung was das jetzt war? Konnte natürlich so nicht sehen ob er sonst irgenwdas interessantes angezeigt hat. Aber was ich jetzt shcon sehe ist, das die GPU Last auf 0 ist, und ich bin online  Das sieht doch gut aus. Magst du mir vllt verraten was das jetzt war und was genau passiert ist? (sorry für meine Unachtsamkeit). Und schonmal tausend Dank, das plagte mich jetzt schon seit Beginn der Woche! Combofix Logfile: Code:
ATTFilter ComboFix 13-10-26.01 - KarotteZock 26.10.2013 14:36:02.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.8191.6779 [GMT 2:00]
ausgeführt von:: c:\users\KarotteZock\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Desktop\Install
c:\program files (x86)\Google\Desktop\Install\{e7196321-a42c-d892-e7da-bf048349d977}\9519~1\A535~1\E628~1\{e7196321-a42c-d892-e7da-bf048349d977}\L\00000004.@
c:\program files (x86)\Google\Desktop\Install\{e7196321-a42c-d892-e7da-bf048349d977}\9519~1\A535~1\E628~1\{e7196321-a42c-d892-e7da-bf048349d977}\L\201d3dde
c:\program files (x86)\Google\Desktop\Install\{e7196321-a42c-d892-e7da-bf048349d977}\9519~1\A535~1\E628~1\{e7196321-a42c-d892-e7da-bf048349d977}\L\6715e287
c:\program files (x86)\Google\Desktop\Install\{e7196321-a42c-d892-e7da-bf048349d977}\9519~1\A535~1\E628~1\{e7196321-a42c-d892-e7da-bf048349d977}\L\76603ac3
c:\windows\PFRO.log
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-09-26 bis 2013-10-26 ))))))))))))))))))))))))))))))
.
.
2013-10-26 12:38 . 2013-10-26 12:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-10-26 10:12 . 2013-10-26 10:12 -------- d-----w- c:\users\KarotteZock\AppData\Local\AMD
2013-10-26 10:12 . 2013-10-26 10:12 -------- d-----w- c:\users\KarotteZock\AppData\Roaming\ATI
2013-10-26 10:12 . 2013-10-26 10:12 -------- d-----w- c:\users\KarotteZock\AppData\Local\ATI
2013-10-26 10:12 . 2013-10-26 10:12 -------- d-----w- c:\programdata\ATI
2013-10-26 10:11 . 2013-10-26 10:11 0 ----a-w- c:\windows\ativpsrm.bin
2013-10-26 10:10 . 2013-10-26 10:10 -------- d-----w- c:\programdata\AMD
2013-10-26 10:10 . 2013-10-26 10:10 -------- d-----w- c:\program files\Common Files\ATI Technologies
2013-10-26 10:10 . 2013-10-26 10:10 -------- d-----w- c:\program files (x86)\ATI Technologies2
2013-10-26 10:08 . 2013-10-26 10:08 -------- d-----w- c:\program files\ATI
2013-10-26 10:03 . 2013-10-26 10:03 -------- d-----w- c:\program files\ATI Technologies
2013-10-25 18:44 . 2013-10-15 23:20 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2EF8A8B8-C399-4465-8ACF-63A685BCA0BC}\mpengine.dll
2013-10-24 21:40 . 2013-10-24 21:48 -------- d-----w- c:\users\KarotteZock\AppData\Local\dxhr
2013-10-24 21:40 . 2013-10-24 21:40 -------- d-----w- c:\users\KarotteZock\AppData\Local\238010
2013-10-24 19:40 . 2013-10-24 19:40 -------- d-----w- C:\FRST
2013-10-21 17:10 . 2013-10-21 17:10 -------- d-----w- c:\users\KarotteZock\AppData\Local\Arma 3
2013-10-16 18:08 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2013-10-15 16:03 . 2013-10-15 16:03 499712 ----a-w- c:\windows\SysWow64\phatk121016Pitcairnv1w256l4.bin
2013-10-14 14:00 . 2013-10-14 14:00 -------- d-----w- c:\users\KarotteZock\AppData\Local\ATI Technologies
2013-10-09 00:53 . 2013-09-22 22:54 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-10-09 00:53 . 2013-09-22 22:54 19252224 ----a-w- c:\windows\system32\mshtml.dll
2013-10-08 14:01 . 2013-10-08 14:01 156712 ----a-w- c:\windows\system32\amdhcp64.dll
2013-10-08 14:01 . 2013-10-08 14:01 141256 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2013-10-08 14:01 . 2013-10-08 14:01 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-10-08 14:01 . 2013-10-08 14:01 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-10-08 14:01 . 2013-10-08 14:01 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-10-08 14:01 . 2013-10-08 14:01 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-10-08 14:01 . 2013-10-08 14:01 142792 ----a-w- c:\windows\system32\atiuxp64.dll
2013-10-08 14:01 . 2013-10-08 14:01 125824 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-10-08 14:01 . 2013-10-08 14:01 97984 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-10-08 14:01 . 2013-10-08 14:01 114488 ----a-w- c:\windows\system32\atiu9p64.dll
2013-10-08 14:01 . 2013-10-08 14:01 1237200 ----a-w- c:\windows\system32\aticfx64.dll
2013-10-08 14:01 . 2013-10-08 14:01 1030128 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-10-08 14:00 . 2013-10-08 14:00 9464840 ----a-w- c:\windows\system32\atidxx64.dll
2013-10-08 14:00 . 2013-10-08 14:00 8215992 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-10-08 14:00 . 2013-10-08 14:00 6176008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-10-08 14:00 . 2013-10-08 14:00 6189416 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-10-08 14:00 . 2013-10-08 14:00 6767240 ----a-w- c:\windows\system32\atiumd6a.dll
2013-10-08 14:00 . 2013-10-08 14:00 7256496 ----a-w- c:\windows\system32\atiumd64.dll
2013-10-08 13:58 . 2013-10-08 13:58 12534784 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-10-08 13:39 . 2013-10-08 13:39 229376 ----a-w- c:\windows\system32\clinfo.exe
2013-10-08 13:39 . 2013-10-08 13:39 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-10-08 13:38 . 2013-10-08 13:38 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-10-08 13:38 . 2013-10-08 13:38 127488 ----a-w- c:\windows\system32\coinst_13.152.1.8.dll
2013-10-08 13:38 . 2013-10-08 13:38 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2013-10-08 13:38 . 2013-10-08 13:38 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-10-08 13:38 . 2013-10-08 13:38 28192256 ----a-w- c:\windows\system32\amdocl64.dll
2013-10-08 13:36 . 2013-10-08 13:36 23761408 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-10-08 13:34 . 2013-10-08 13:34 63488 ----a-w- c:\windows\system32\OpenCL.dll
2013-10-08 13:34 . 2013-10-08 13:34 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-10-08 13:17 . 2013-10-08 13:17 25385984 ----a-w- c:\windows\system32\atio6axx.dll
2013-10-08 13:13 . 2013-10-08 13:13 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2013-10-08 13:13 . 2013-10-08 13:13 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2013-10-08 13:13 . 2013-10-08 13:13 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-10-08 13:13 . 2013-10-08 13:13 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2013-10-08 13:13 . 2013-10-08 13:13 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-10-08 13:13 . 2013-10-08 13:13 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2013-10-08 13:09 . 2013-10-08 13:09 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-10-08 13:00 . 2013-10-08 13:00 21400064 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-10-08 12:54 . 2013-10-08 12:54 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-10-08 12:53 . 2013-10-08 12:53 26112 ----a-w- c:\windows\system32\atimuixx.dll
2013-10-08 12:53 . 2013-10-08 12:53 576512 ----a-w- c:\windows\system32\atieclxx.exe
2013-10-08 12:52 . 2013-10-08 12:52 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2013-10-08 12:51 . 2013-10-08 12:51 190976 ----a-w- c:\windows\system32\atitmm64.dll
2013-10-08 12:29 . 2013-10-08 12:29 96256 ----a-w- c:\windows\system32\amdave64.dll
2013-10-08 12:28 . 2013-10-08 12:28 90624 ----a-w- c:\windows\SysWow64\amdave32.dll
2013-10-08 12:28 . 2013-10-08 12:28 89088 ----a-w- c:\windows\system32\atisamu64.dll
2013-10-08 12:28 . 2013-10-08 12:28 784384 ----a-w- c:\windows\system32\atiadlxx.dll
2013-10-08 12:28 . 2013-10-08 12:28 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
2013-10-08 12:28 . 2013-10-08 12:28 594944 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-10-08 12:28 . 2013-10-08 12:28 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2013-10-08 12:28 . 2013-10-08 12:28 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-10-08 12:28 . 2013-10-08 12:28 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2013-10-08 12:28 . 2013-10-08 12:28 100352 ----a-w- c:\windows\system32\atig6txx.dll
2013-10-08 12:27 . 2013-10-08 12:27 96768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-10-08 12:27 . 2013-10-08 12:27 619008 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-10-08 12:24 . 2013-10-08 12:24 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-09-28 20:49 . 2013-09-28 20:49 -------- d-----w- c:\users\KarotteZock\AppData\Roaming\Outlast
2013-09-26 21:04 . 2013-09-26 21:04 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe
2013-09-26 21:04 . 2013-09-26 21:04 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe
2013-09-26 21:04 . 2013-09-26 21:04 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe
2013-09-26 21:04 . 2013-09-26 21:04 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-10 22:34 . 2012-10-02 20:02 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-10-10 22:34 . 2012-10-02 20:02 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-09 00:53 . 2012-08-31 21:36 80541720 ----a-w- c:\windows\system32\MRT.exe
2013-09-22 20:30 . 2013-09-22 20:30 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-09-22 20:30 . 2013-09-22 20:30 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-09-22 20:30 . 2013-09-22 20:30 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-09-22 20:30 . 2013-09-22 20:30 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-09-22 20:30 . 2013-09-22 20:30 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-09-22 20:30 . 2013-09-22 20:30 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-09-22 20:30 . 2013-09-22 20:30 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-09-22 20:30 . 2013-09-22 20:30 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-09-22 20:30 . 2013-09-22 20:30 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-09-22 20:30 . 2013-09-22 20:30 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-09-22 20:30 . 2013-09-22 20:30 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-09-22 20:30 . 2013-09-22 20:30 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-09-22 20:30 . 2013-09-22 20:30 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-09-22 20:30 . 2013-09-22 20:30 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-09-22 20:30 . 2013-09-22 20:30 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-09-22 20:30 . 2013-09-22 20:30 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-09-22 20:30 . 2013-09-22 20:30 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-09-22 20:30 . 2013-09-22 20:30 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-09-22 20:30 . 2013-09-22 20:30 81408 ----a-w- c:\windows\system32\icardie.dll
2013-09-22 20:30 . 2013-09-22 20:30 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-09-22 20:30 . 2013-09-22 20:30 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-09-22 20:30 . 2013-09-22 20:30 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-09-22 20:30 . 2013-09-22 20:30 441856 ----a-w- c:\windows\system32\html.iec
2013-09-22 20:30 . 2013-09-22 20:30 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-09-22 20:30 . 2013-09-22 20:30 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-09-22 20:30 . 2013-09-22 20:30 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-09-22 20:30 . 2013-09-22 20:30 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-09-22 20:30 . 2013-09-22 20:30 235008 ----a-w- c:\windows\system32\url.dll
2013-09-22 20:30 . 2013-09-22 20:30 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-09-22 20:30 . 2013-09-22 20:30 216064 ----a-w- c:\windows\system32\msls31.dll
2013-09-22 20:30 . 2013-09-22 20:30 197120 ----a-w- c:\windows\system32\msrating.dll
2013-09-22 20:30 . 2013-09-22 20:30 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-09-22 20:30 . 2013-09-22 20:30 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-09-22 20:30 . 2013-09-22 20:30 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-09-22 20:30 . 2013-09-22 20:30 144896 ----a-w- c:\windows\system32\wextract.exe
2013-09-22 20:30 . 2013-09-22 20:30 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-09-22 20:30 . 2013-09-22 20:30 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-09-22 20:30 . 2013-09-22 20:30 102912 ----a-w- c:\windows\system32\inseng.dll
2013-09-22 20:30 . 2013-09-22 20:30 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-09-22 20:30 . 2013-09-22 20:30 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-09-22 20:30 . 2013-09-22 20:30 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-09-22 20:30 . 2013-09-22 20:30 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-09-22 20:30 . 2013-09-22 20:30 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-09-22 20:30 . 2013-09-22 20:30 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-09-22 20:30 . 2013-09-22 20:30 149504 ----a-w- c:\windows\system32\occache.dll
2013-09-22 20:30 . 2013-09-22 20:30 13824 ----a-w- c:\windows\system32\mshta.exe
2013-09-22 20:30 . 2013-09-22 20:30 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-09-22 20:30 . 2013-09-22 20:30 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-09-22 20:30 . 2013-09-22 20:30 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-09-22 20:30 . 2013-09-22 20:30 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-09-22 20:30 . 2013-09-22 20:30 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-09-22 20:30 . 2013-09-22 20:30 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-09-22 20:30 . 2013-09-22 20:30 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-09-22 20:30 . 2013-09-22 20:30 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-09-22 20:30 . 2013-09-22 20:30 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-09-22 20:30 . 2013-09-22 20:30 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-09-22 20:30 . 2013-09-22 20:30 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-22 20:30 . 2013-09-22 20:30 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-09-22 20:30 . 2013-09-22 20:30 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-09-22 20:30 . 2013-09-22 20:30 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-09-22 20:30 . 2013-09-22 20:30 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-09-22 20:30 . 2013-09-22 20:30 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-09-22 20:30 . 2013-09-22 20:30 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-09-22 20:30 . 2013-09-22 20:30 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-09-22 20:30 . 2013-09-22 20:30 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-09-22 20:30 . 2013-09-22 20:30 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-09-22 20:30 . 2013-09-22 20:30 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-09-22 20:30 . 2013-09-22 20:30 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-09-22 20:30 . 2013-09-22 20:30 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-09-22 20:30 . 2013-09-22 20:30 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-09-22 20:30 . 2013-09-22 20:30 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-09-22 20:30 . 2013-09-22 20:30 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-09-22 20:30 . 2013-09-22 20:30 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-09-22 20:30 . 2013-09-22 20:30 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-09-22 20:30 . 2013-09-22 20:30 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-09-22 20:30 . 2013-09-22 20:30 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2013-09-22 20:30 . 2013-09-22 20:30 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-09-22 20:30 . 2013-09-22 20:30 1238528 ----a-w- c:\windows\system32\d3d10.dll
2013-09-22 20:30 . 2013-09-22 20:30 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-09-22 20:30 . 2013-09-22 20:30 1175552 ----a-w- c:\windows\system32\FntCache.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-10-09 1813928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"StartCCC"="c:\program files (x86)\ATI Technologies2\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-10-08 766208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R1 glamjgkb;glamjgkb;c:\windows\system32\drivers\glamjgkb.sys;c:\windows\SYSNATIVE\drivers\glamjgkb.sys [x]
R2 AODDriver4.2.0;AODDriver4.2.0;c:\program files (x86)\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files (x86)\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 ALSysIO;ALSysIO;c:\users\KAROTT~1\AppData\Local\Temp\ALSysIO64.sys;c:\users\KAROTT~1\AppData\Local\Temp\ALSysIO64.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 GPU-Z;GPU-Z;c:\users\KAROTT~1\AppData\Local\Temp\GPU-Z.sys;c:\users\KAROTT~1\AppData\Local\Temp\GPU-Z.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;c:\windows\system32\drivers\Synth3dVsc.sys;c:\windows\SYSNATIVE\drivers\Synth3dVsc.sys [x]
R3 TCCrystalCpuInfo;TCCrystalCpuInfo;c:\users\KAROTT~1\AppData\Local\Temp\TCCpuInfo64.sys;c:\users\KAROTT~1\AppData\Local\Temp\TCCpuInfo64.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;Remote Deskotop USB Hub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 ahcix64s;ahcix64s;c:\windows\system32\DRIVERS\ahcix64s.sys;c:\windows\SYSNATIVE\DRIVERS\ahcix64s.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies2\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies2\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\DRIVERS\ViaHub3.sys;c:\windows\SYSNATIVE\DRIVERS\ViaHub3.sys [x]
S3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\DRIVERS\xhcdrv.sys;c:\windows\SYSNATIVE\DRIVERS\xhcdrv.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-10-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-02 22:34]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VIAxHCUtl"="c:\via_xhci\usb3Monitor.exe" [2011-03-29 331776]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-26 12681320]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
Trusted Zone: sony.com
TCP: Interfaces\{4B3B937D-89DE-40AF-B022-81C94D07FD7E}: NameServer = 192.168.0.1
FF - ProfilePath - c:\users\KarotteZock\AppData\Roaming\Mozilla\Firefox\Profiles\jpvu1e8v.default\
FF - prefs.js: browser.startup.homepage - www.sport1.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2424156742-3384006789-4039285176-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*‚ú=]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2424156742-3384006789-4039285176-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*‚ú=\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2424156742-3384006789-4039285176-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*‚ú=]
@Allowed: (Read) (RestrictedCode)
"0"=hex:43,3a,5c,55,73,65,72,73,5c,4b,61,72,6f,74,74,65,5a,6f,63,6b,5c,44,65,
73,6b,74,6f,70,5c,44,69,65,2e,53,69,6d,70,73,6f,6e,73,2e,53,32,32,2e,43,4f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-10-26 14:50:46 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-10-26 12:50
.
Vor Suchlauf: 9.781.784.576 Bytes frei
Nach Suchlauf: 2.666.262.528 Bytes frei
.
- - End Of File - - 6A18A843AE4564F1DD5E982AB9C07812
--- --- ---
A36C5E4F47E84449FF07ED3517B43A31
Geändert von Kakarott (26.10.2013 um 14:18 Uhr) |
|
26.10.2013, 18:30
| #4 |
| /// the machine /// TB-Ausbilder | Bei Internetverbindungsaufbau GPU Last hoch trotz idle Zero Access Rootkit  Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.10.2013, 17:01
| #5 |
| | Bei Internetverbindungsaufbau GPU Last hoch trotz idle Malwarebytes hab ich eh drauf, findet schon seit Ewigkeiten nix. Adw Cleaner AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 27/10/2013 um 14:38:34
# Updated 20/10/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : KarotteZock - KAKAROTT-ZOCK
# Gestartet von : C:\Users\KarotteZock\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Premium
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16720
-\\ Mozilla Firefox v24.0 (de)
[ Datei : C:\Users\KarotteZock\AppData\Roaming\Mozilla\Firefox\Profiles\jpvu1e8v.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [857 octets] - [27/10/2013 14:33:56]
AdwCleaner[S0].txt - [781 octets] - [27/10/2013 14:38:34]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [840 octets] ##########
Junkware JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Ultimate x64
Ran by KarotteZock on 27.10.2013 at 14:39:58,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ FireFox
Emptied folder: C:\Users\KarotteZock\AppData\Roaming\mozilla\firefox\profiles\jpvu1e8v.default\minidumps [195 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.10.2013 at 14:43:31,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
malware Code:
ATTFilter MalMalwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org
Datenbank Version: v2013.10.27.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
KarotteZock :: KAKAROTT-ZOCK [Administrator]
Schutz: Deaktiviert
27.10.2013 16:55:15
mbam-log-2013-10-27 (16-55-15).txt
Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 205719
Laufzeit: 1 Minute(n), 34 Sekunde(n)
Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)
(Ende)
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2013 01
Ran by KarotteZock (administrator) on KAKAROTT-ZOCK on 27-10-2013 16:58:29
Running from C:\Users\KarotteZock\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TODO: <Company name>) C:\VIA_XHCI\usb3Monitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies2\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies2\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [VIAxHCUtl] - C:\VIA_XHCI\usb3Monitor.exe [331776 2011-03-29] (TODO: <Company name>)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12681320 2011-08-26] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1813928 2013-10-09] (Valve Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies2\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\..\Interfaces\{4B3B937D-89DE-40AF-B022-81C94D07FD7E}: [NameServer]192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\KarotteZock\AppData\Roaming\Mozilla\Firefox\Profiles\jpvu1e8v.default
FF Homepage: www.sport1.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\KarotteZock\AppData\Roaming\Mozilla\Firefox\Profiles\jpvu1e8v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-10-08] (Advanced Micro Devices, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-03-22] ()
R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [189248 2013-03-22] ()
S4 RemoteAccess; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [756120 2013-08-08] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2; C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-10-02] (DT Soft Ltd)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [176640 2011-05-22] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [230400 2011-05-22] (VIA Technologies, Inc.)
S3 ALSysIO; \??\C:\Users\KAROTT~1\AppData\Local\Temp\ALSysIO64.sys [x]
S2 AODDriver4.2.0; \??\C:\Program Files (x86)\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S1 glamjgkb; \??\C:\Windows\system32\drivers\glamjgkb.sys [x]
S3 GPU-Z; \??\C:\Users\KAROTT~1\AppData\Local\Temp\GPU-Z.sys [x]
S3 TCCrystalCpuInfo; \??\C:\Users\KAROTT~1\AppData\Local\Temp\TCCpuInfo64.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-27 16:58 - 2013-10-27 16:58 - 00000000 ____D C:\FRST
2013-10-27 16:58 - 2013-10-27 16:57 - 01956160 _____ (Farbar) C:\Users\KarotteZock\Downloads\FRST64.exe
2013-10-27 14:43 - 2013-10-27 14:43 - 00000836 _____ C:\Users\KarotteZock\Desktop\JRT.txt
2013-10-27 14:39 - 2013-10-27 14:39 - 00000000 ____D C:\Windows\ERUNT
2013-10-27 14:33 - 2013-10-27 14:38 - 00000000 ____D C:\AdwCleaner
2013-10-27 14:32 - 2013-10-27 14:32 - 00000336 _____ C:\Windows\PFRO.log
2013-10-27 14:15 - 2013-10-27 14:15 - 01033335 _____ (Thisisu) C:\Users\KarotteZock\Desktop\JRT.exe
2013-10-27 14:14 - 2013-10-27 14:14 - 01060070 _____ C:\Users\KarotteZock\Desktop\adwcleaner.exe
2013-10-27 13:23 - 2013-10-27 13:24 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-10-27 13:23 - 2013-10-27 13:23 - 00001105 _____ C:\Users\KarotteZock\Desktop\MSI Afterburner.lnk
2013-10-26 13:25 - 2013-10-26 13:50 - 00000000 ____D C:\Qoobox
2013-10-26 13:25 - 2013-10-26 13:49 - 00000000 ____D C:\Windows\erdnt
2013-10-26 13:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-10-26 13:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-10-26 13:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-10-26 13:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-10-26 13:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-10-26 13:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-10-26 13:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-10-26 13:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-10-26 13:24 - 2013-10-26 13:24 - 05136694 ____R (Swearware) C:\Users\KarotteZock\Downloads\ComboFix.exe
2013-10-26 12:14 - 2013-10-26 12:14 - 00004936 _____ C:\Users\KarotteZock\Downloads\GMER.log
2013-10-26 12:09 - 2013-10-26 12:09 - 00377856 _____ C:\Users\KarotteZock\Downloads\gmer_2.1.19163.exe
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\ATI
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\AMD
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\ProgramData\ATI
2013-10-26 11:11 - 2013-10-26 11:11 - 00000000 _____ C:\Windows\ativpsrm.bin
2013-10-26 11:10 - 2013-10-26 11:10 - 00067045 _____ C:\Windows\SysWOW64\CCCInstall_201310261210389012.log
2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\ProgramData\AMD
2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\Program Files (x86)\ATI Technologies2
2013-10-26 11:08 - 2013-10-26 11:10 - 00000000 ____D C:\Program Files\ATI Technologies2
2013-10-26 11:08 - 2013-10-26 11:08 - 00000000 ____D C:\Program Files\ATI
2013-10-26 11:03 - 2013-10-26 11:03 - 00000000 ____D C:\Program Files\ATI Technologies
2013-10-26 11:02 - 2013-10-26 11:03 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\KarotteZock\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2013-10-26 10:59 - 2013-10-26 10:59 - 00055894 _____ C:\Windows\SysWOW64\CCCInstall_201310261159420892.log
2013-10-26 10:40 - 2013-10-26 10:40 - 07385088 _____ C:\Users\KarotteZock\Downloads\PathOfExileInstaller.msi
2013-10-26 10:33 - 2013-10-26 10:33 - 00000000 ____D C:\Users\KarotteZock\Downloads\backups
2013-10-26 10:27 - 2013-10-26 10:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\KarotteZock\Downloads\hijackthis.exe
2013-10-26 10:27 - 2013-10-26 10:27 - 00008144 _____ C:\Users\KarotteZock\Downloads\hijackthis.log
2013-10-26 01:20 - 2013-10-26 01:20 - 00002107 _____ C:\Users\Public\Desktop\Batman Arkham Origins.lnk
2013-10-25 22:19 - 2013-10-25 22:19 - 00000000 ____D C:\Users\KarotteZock\Documents\How To Survive Saves
2013-10-24 22:41 - 2013-10-22 21:51 - 11914800 _____ (Square Enix Limited) C:\Users\KarotteZock\Desktop\DXHRDC.exe
2013-10-24 22:40 - 2013-10-24 22:48 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\dxhr
2013-10-24 22:40 - 2013-10-24 22:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\238010
2013-10-24 20:40 - 2013-10-26 11:52 - 00026594 _____ C:\Users\KarotteZock\Downloads\Addition.txt
2013-10-24 18:13 - 2013-10-24 18:13 - 24278649 _____ C:\Users\KarotteZock\Downloads\vlc-2.1.0-win32.exe
2013-10-21 18:59 - 2013-10-21 18:59 - 00062137 _____ C:\Windows\SysWOW64\CCCInstall_201310211959398584.log
2013-10-21 18:51 - 2013-10-21 18:50 - 02325160 _____ C:\Users\KarotteZock\Downloads\amd_cleanup_util_1.2.1.0.exe
2013-10-16 19:08 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-15 17:03 - 2013-10-15 17:03 - 00499712 _____ C:\Windows\SysWOW64\phatk121016Pitcairnv1w256l4.bin
2013-10-14 15:00 - 2013-10-14 15:00 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI Technologies
2013-10-09 01:54 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 01:54 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 01:54 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 01:54 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 01:54 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 01:54 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 01:54 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 01:54 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 01:54 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 01:54 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 01:54 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 01:54 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 01:53 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 01:53 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 01:53 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 01:53 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 00:37 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 00:37 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 00:37 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 00:37 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 00:37 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 00:37 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 00:37 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 00:37 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 00:37 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 00:37 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 00:37 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 00:37 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 00:37 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 00:37 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 00:37 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 00:37 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 00:37 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 00:37 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 00:37 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 00:37 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 00:37 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 00:37 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 00:37 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 00:37 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 00:37 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 00:37 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 00:37 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 00:37 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 00:37 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 00:37 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-09 00:37 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-10-09 00:37 - 2012-11-28 23:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-10-08 15:01 - 2013-10-08 15:01 - 01237200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 01030128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00156712 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00142792 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00141256 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00125824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00114488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00097984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 09464840 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 08215992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 07256496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 06767240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 06189416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 06176008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-10-08 14:58 - 2013-10-08 14:58 - 12534784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-10-08 14:39 - 2013-10-08 14:39 - 00229376 _____ C:\Windows\system32\clinfo.exe
2013-10-08 14:39 - 2013-10-08 14:39 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 28192256 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00127488 _____ (AMD) C:\Windows\system32\coinst_13.152.1.8.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-10-08 14:36 - 2013-10-08 14:36 - 23761408 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-10-08 14:34 - 2013-10-08 14:34 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-10-08 14:34 - 2013-10-08 14:34 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-10-08 14:17 - 2013-10-08 14:17 - 25385984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-10-08 14:14 - 2013-10-08 14:14 - 00530832 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-10-08 14:14 - 2013-10-08 14:14 - 00530832 _____ C:\Windows\system32\atiapfxx.blb
2013-10-08 14:13 - 2013-10-08 14:13 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-10-08 14:13 - 2013-10-08 14:13 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-10-08 14:09 - 2013-10-08 14:09 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-10-08 14:00 - 2013-10-08 14:00 - 21400064 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-10-08 13:56 - 2013-10-08 13:56 - 03388672 _____ C:\Windows\system32\atiumd6a.cap
2013-10-08 13:56 - 2013-10-08 13:56 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
2013-10-08 13:56 - 2013-10-08 13:56 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2013-10-08 13:56 - 2013-10-08 13:56 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
2013-10-08 13:56 - 2013-10-08 13:56 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2013-10-08 13:54 - 2013-10-08 13:54 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-10-08 13:53 - 2013-10-08 13:53 - 00576512 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-10-08 13:53 - 2013-10-08 13:53 - 00026112 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-10-08 13:52 - 2013-10-08 13:52 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-10-08 13:51 - 2013-10-08 13:51 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-10-08 13:41 - 2013-10-08 13:41 - 03422720 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-10-08 13:29 - 2013-10-08 13:29 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00784384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00594944 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00090624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-10-08 13:27 - 2013-10-08 13:27 - 00619008 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-10-08 13:27 - 2013-10-08 13:27 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-10-08 13:24 - 2013-10-08 13:24 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-10-02 21:21 - 2013-10-03 22:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-28 21:49 - 2013-09-28 21:49 - 00000753 _____ C:\Users\KarotteZock\Desktop\Outlast.lnk
2013-09-28 21:49 - 2013-09-28 21:49 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\Outlast
==================== One Month Modified Files and Folders =======
2013-10-27 16:58 - 2013-10-27 16:58 - 00000000 ____D C:\FRST
2013-10-27 16:57 - 2013-10-27 16:58 - 01956160 _____ (Farbar) C:\Users\KarotteZock\Downloads\FRST64.exe
2013-10-27 16:57 - 2013-06-24 13:24 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-27 16:31 - 2012-12-14 20:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 16:12 - 2012-10-02 20:28 - 01191928 _____ C:\Windows\WindowsUpdate.log
2013-10-27 14:46 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-27 14:46 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-27 14:44 - 2011-04-12 08:43 - 00699092 _____ C:\Windows\system32\perfh007.dat
2013-10-27 14:44 - 2011-04-12 08:43 - 00149232 _____ C:\Windows\system32\perfc007.dat
2013-10-27 14:44 - 2009-07-14 06:13 - 01619094 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-27 14:43 - 2013-10-27 14:43 - 00000836 _____ C:\Users\KarotteZock\Desktop\JRT.txt
2013-10-27 14:39 - 2013-10-27 14:39 - 00000000 ____D C:\Windows\ERUNT
2013-10-27 14:39 - 2012-09-01 07:27 - 00092172 _____ C:\Windows\setupact.log
2013-10-27 14:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-27 14:38 - 2013-10-27 14:33 - 00000000 ____D C:\AdwCleaner
2013-10-27 14:32 - 2013-10-27 14:32 - 00000336 _____ C:\Windows\PFRO.log
2013-10-27 14:15 - 2013-10-27 14:15 - 01033335 _____ (Thisisu) C:\Users\KarotteZock\Desktop\JRT.exe
2013-10-27 14:14 - 2013-10-27 14:14 - 01060070 _____ C:\Users\KarotteZock\Desktop\adwcleaner.exe
2013-10-27 13:24 - 2013-10-27 13:23 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-10-27 13:23 - 2013-10-27 13:23 - 00001105 _____ C:\Users\KarotteZock\Desktop\MSI Afterburner.lnk
2013-10-27 13:23 - 2013-07-01 17:50 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-10-27 01:25 - 2012-10-02 22:17 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\vlc
2013-10-26 15:13 - 2013-07-24 17:09 - 00000000 ____D C:\Users\KarotteZock\Documents\WB Games
2013-10-26 14:56 - 2013-06-01 19:20 - 00000000 ____D C:\Users\KarotteZock\Desktop\Neuer Ordner
2013-10-26 13:50 - 2013-10-26 13:25 - 00000000 ____D C:\Qoobox
2013-10-26 13:49 - 2013-10-26 13:25 - 00000000 ____D C:\Windows\erdnt
2013-10-26 13:49 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-10-26 13:25 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-26 13:24 - 2013-10-26 13:24 - 05136694 ____R (Swearware) C:\Users\KarotteZock\Downloads\ComboFix.exe
2013-10-26 12:14 - 2013-10-26 12:14 - 00004936 _____ C:\Users\KarotteZock\Downloads\GMER.log
2013-10-26 12:09 - 2013-10-26 12:09 - 00377856 _____ C:\Users\KarotteZock\Downloads\gmer_2.1.19163.exe
2013-10-26 11:52 - 2013-10-24 20:40 - 00026594 _____ C:\Users\KarotteZock\Downloads\Addition.txt
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\ATI
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\AMD
2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\ProgramData\ATI
2013-10-26 11:11 - 2013-10-26 11:11 - 00000000 _____ C:\Windows\ativpsrm.bin
2013-10-26 11:10 - 2013-10-26 11:10 - 00067045 _____ C:\Windows\SysWOW64\CCCInstall_201310261210389012.log
2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\ProgramData\AMD
2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\Program Files (x86)\ATI Technologies2
2013-10-26 11:10 - 2013-10-26 11:08 - 00000000 ____D C:\Program Files\ATI Technologies2
2013-10-26 11:09 - 2012-10-03 23:04 - 01592438 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-26 11:08 - 2013-10-26 11:08 - 00000000 ____D C:\Program Files\ATI
2013-10-26 11:03 - 2013-10-26 11:03 - 00000000 ____D C:\Program Files\ATI Technologies
2013-10-26 11:03 - 2013-10-26 11:02 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\KarotteZock\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2013-10-26 10:59 - 2013-10-26 10:59 - 00055894 _____ C:\Windows\SysWOW64\CCCInstall_201310261159420892.log
2013-10-26 10:59 - 2013-07-24 17:13 - 00000000 ____D C:\Program Files (x86)\AMD
2013-10-26 10:42 - 2012-10-02 22:04 - 00000000 ____D C:\Gamez
2013-10-26 10:40 - 2013-10-26 10:40 - 07385088 _____ C:\Users\KarotteZock\Downloads\PathOfExileInstaller.msi
2013-10-26 10:33 - 2013-10-26 10:33 - 00000000 ____D C:\Users\KarotteZock\Downloads\backups
2013-10-26 10:27 - 2013-10-26 10:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\KarotteZock\Downloads\hijackthis.exe
2013-10-26 10:27 - 2013-10-26 10:27 - 00008144 _____ C:\Users\KarotteZock\Downloads\hijackthis.log
2013-10-26 01:20 - 2013-10-26 01:20 - 00002107 _____ C:\Users\Public\Desktop\Batman Arkham Origins.lnk
2013-10-26 01:20 - 2012-10-02 23:39 - 00514310 _____ C:\Windows\DirectX.log
2013-10-26 00:08 - 2012-10-02 23:57 - 00000000 ____D C:\Users\KarotteZock\Documents\My Games
2013-10-25 23:47 - 2012-10-03 04:39 - 00000000 ____D C:\Users\KarotteZock\Documents\KONAMI
2013-10-25 22:19 - 2013-10-25 22:19 - 00000000 ____D C:\Users\KarotteZock\Documents\How To Survive Saves
2013-10-24 22:48 - 2013-10-24 22:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\dxhr
2013-10-24 22:40 - 2013-10-24 22:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\238010
2013-10-24 18:13 - 2013-10-24 18:13 - 24278649 _____ C:\Users\KarotteZock\Downloads\vlc-2.1.0-win32.exe
2013-10-22 21:51 - 2013-10-24 22:41 - 11914800 _____ (Square Enix Limited) C:\Users\KarotteZock\Desktop\DXHRDC.exe
2013-10-22 18:58 - 2013-09-08 18:24 - 00001912 _____ C:\Windows\epplauncher.mif
2013-10-21 18:59 - 2013-10-21 18:59 - 00062137 _____ C:\Windows\SysWOW64\CCCInstall_201310211959398584.log
2013-10-21 18:57 - 2013-07-29 20:43 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-21 18:50 - 2013-10-21 18:51 - 02325160 _____ C:\Users\KarotteZock\Downloads\amd_cleanup_util_1.2.1.0.exe
2013-10-21 18:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-20 04:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-16 19:49 - 2012-10-02 20:29 - 00057944 _____ C:\Users\KarotteZock\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-16 19:49 - 2009-07-14 05:45 - 00276280 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-16 19:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-10-15 17:03 - 2013-10-15 17:03 - 00499712 _____ C:\Windows\SysWOW64\phatk121016Pitcairnv1w256l4.bin
2013-10-14 15:00 - 2013-10-14 15:00 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\ATI Technologies
2013-10-13 14:45 - 2013-04-24 21:17 - 00000000 ____D C:\Users\KarotteZock\Desktop\Movies
2013-10-10 23:34 - 2012-12-14 20:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 23:34 - 2012-10-02 21:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 23:34 - 2012-10-02 21:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 01:53 - 2013-09-22 21:36 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 01:53 - 2012-08-31 22:36 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-08 15:01 - 2013-10-08 15:01 - 01237200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 01030128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00156712 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00142792 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00141256 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00125824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00114488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00097984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-10-08 15:01 - 2013-10-08 15:01 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 09464840 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 08215992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 07256496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 06767240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 06189416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-10-08 15:00 - 2013-10-08 15:00 - 06176008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-10-08 14:58 - 2013-10-08 14:58 - 12534784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-10-08 14:39 - 2013-10-08 14:39 - 00229376 _____ C:\Windows\system32\clinfo.exe
2013-10-08 14:39 - 2013-10-08 14:39 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 28192256 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00127488 _____ (AMD) C:\Windows\system32\coinst_13.152.1.8.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-10-08 14:38 - 2013-10-08 14:38 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-10-08 14:36 - 2013-10-08 14:36 - 23761408 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-10-08 14:34 - 2013-10-08 14:34 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-10-08 14:34 - 2013-10-08 14:34 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-10-08 14:17 - 2013-10-08 14:17 - 25385984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-10-08 14:14 - 2013-10-08 14:14 - 00530832 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-10-08 14:14 - 2013-10-08 14:14 - 00530832 _____ C:\Windows\system32\atiapfxx.blb
2013-10-08 14:13 - 2013-10-08 14:13 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-10-08 14:13 - 2013-10-08 14:13 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-10-08 14:13 - 2013-10-08 14:13 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-10-08 14:09 - 2013-10-08 14:09 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-10-08 14:00 - 2013-10-08 14:00 - 21400064 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-10-08 13:56 - 2013-10-08 13:56 - 03388672 _____ C:\Windows\system32\atiumd6a.cap
2013-10-08 13:56 - 2013-10-08 13:56 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
2013-10-08 13:56 - 2013-10-08 13:56 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2013-10-08 13:56 - 2013-10-08 13:56 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
2013-10-08 13:56 - 2013-10-08 13:56 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2013-10-08 13:54 - 2013-10-08 13:54 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-10-08 13:53 - 2013-10-08 13:53 - 00576512 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-10-08 13:53 - 2013-10-08 13:53 - 00026112 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-10-08 13:52 - 2013-10-08 13:52 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-10-08 13:51 - 2013-10-08 13:51 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-10-08 13:41 - 2013-10-08 13:41 - 03422720 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-10-08 13:29 - 2013-10-08 13:29 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00784384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00594944 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00090624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-10-08 13:28 - 2013-10-08 13:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-10-08 13:27 - 2013-10-08 13:27 - 00619008 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-10-08 13:27 - 2013-10-08 13:27 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-10-08 13:24 - 2013-10-08 13:24 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-10-06 19:10 - 2013-04-24 21:29 - 00000000 ____D C:\Users\KarotteZock\Desktop\Mugge
2013-10-04 18:50 - 2013-05-26 13:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-03 22:45 - 2013-10-02 21:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 22:45 - 2012-10-02 20:40 - 00000000 ____D C:\Users\KarotteZock\AppData\Local\Mozilla
2013-09-28 21:49 - 2013-09-28 21:49 - 00000753 _____ C:\Users\KarotteZock\Desktop\Outlast.lnk
2013-09-28 21:49 - 2013-09-28 21:49 - 00000000 ____D C:\Users\KarotteZock\AppData\Roaming\Outlast
Some content of TEMP:
====================
C:\Users\KarotteZock\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-26 18:13
==================== End Of Log ============================
--- --- --- FRST Addition: FRST Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2013 01
Ran by KarotteZock at 2013-10-27 16:58:44
Running from C:\Users\KarotteZock\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
AMD Catalyst Control Center (x32 Version: 2013.1008.932.15229)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Fuel (Version: 2013.1008.932.15229)
Atheros Client Installation Program (x32 Version: 7.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1008.932.15229)
Catalyst Control Center InstallProxy (x32 Version: 2013.1008.932.15229)
Catalyst Control Center Localization All (x32 Version: 2013.1008.932.15229)
CCC Help Chinese Standard (x32 Version: 2013.1008.0931.15229)
CCC Help Chinese Traditional (x32 Version: 2013.1008.0931.15229)
CCC Help Czech (x32 Version: 2013.1008.0931.15229)
CCC Help Danish (x32 Version: 2013.1008.0931.15229)
CCC Help Dutch (x32 Version: 2013.1008.0931.15229)
CCC Help English (x32 Version: 2013.1008.0931.15229)
CCC Help Finnish (x32 Version: 2013.1008.0931.15229)
CCC Help French (x32 Version: 2013.1008.0931.15229)
CCC Help German (x32 Version: 2013.1008.0931.15229)
CCC Help Greek (x32 Version: 2013.1008.0931.15229)
CCC Help Hungarian (x32 Version: 2013.1008.0931.15229)
CCC Help Italian (x32 Version: 2013.1008.0931.15229)
CCC Help Japanese (x32 Version: 2013.1008.0931.15229)
CCC Help Korean (x32 Version: 2013.1008.0931.15229)
CCC Help Norwegian (x32 Version: 2013.1008.0931.15229)
CCC Help Polish (x32 Version: 2013.1008.0931.15229)
CCC Help Portuguese (x32 Version: 2013.1008.0931.15229)
CCC Help Russian (x32 Version: 2013.1008.0931.15229)
CCC Help Spanish (x32 Version: 2013.1008.0931.15229)
CCC Help Swedish (x32 Version: 2013.1008.0931.15229)
CCC Help Thai (x32 Version: 2013.1008.0931.15229)
CCC Help Turkish (x32 Version: 2013.1008.0931.15229)
ccc-utility64 (Version: 2013.1008.932.15229)
CL-Eye Driver (x32 Version: 5.0.1.0218)
Core Temp version 0.99.8 (Version: 0.99.8)
DAEMON Tools Lite (x32 Version: 4.45.1.0236)
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0000.130)
Dual-Core Optimizer (x32 Version: 1.1.4.0169)
Dust: An Elysian Tail (x32)
Fraps (x32)
Frozen Synapse (x32 Version: 32)
Google Update Helper (x32 Version: 1.3.21.153)
Java 7 Update 25 (x32 Version: 7.0.250)
Java 7 Update 7 (x32 Version: 7.0.70)
Java Auto Updater (x32 Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mark of the Ninja Special Edition (x32)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False (x32 Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False (x32 Version: 8.0.58299)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False (x32 Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False (x32 Version: 9.0.30729.4048)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False (x32 Version: 10.0.30319)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 False (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 False (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 False (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual F# 2.0 Runtime (x32 Version: 10.0.30319)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0)
MotioninJoy Gamepad tool 0.7.1001 (Version: 0.7.1001)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1)
My Game Long Name
OpenAL (x32)
Platform (x32 Version: 1.38)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 3.0)
Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6251)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6449)
Reus (x32 Version: 2.0.0.10)
Samsung SSD Magician (x32 Version: 3.1.1)
Steam (x32 Version: 1.0.0.0)
TeamViewer 8 (x32 Version: 8.0.20202)
Tunngle beta (x32)
Unlocker 1.9.2 (Version: 1.9.2)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
VIA Plattform-Geräte-Manager (x32 Version: 1.38)
VLC media player 2.0.3 (x32 Version: 2.0.3)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR (x32)
==================== Restore Points =========================
26-10-2013 16:48:29 Removed Path of Exile
==================== Hosts content: ==========================
2009-07-14 03:34 - 2013-10-26 13:49 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0F8473BA-8CCE-4717-9EED-CE7F58227B03} - System32\Tasks\{AE972875-F65E-4CD3-B93C-8366AE62743E} => D:\SETUP\SETUP.EXE
Task: {60D06927-B3F2-45CB-BB34-336750B6DE28} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {827C4B0D-6ADA-4E12-85B9-22889F331E41} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {A3D2B064-FD02-452B-9569-7129F54CE7A4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {BF30D969-EC9D-4FFE-9BD8-63EA25AEB446} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {E4C106B5-57C6-401B-B0A2-D143D02C66E0} - System32\Tasks\{0CA26BDA-E355-43F6-B32D-D9B69E395B50} => D:\SETUP\SETUP.EXE
Task: {F5156FEF-155E-408F-82BA-C6BF1D40146A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-10-08 08:34 - 2013-10-08 08:34 - 00102400 _____ () C:\Program Files\ATI Technologies2\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-10-02 23:27 - 2008-06-19 23:41 - 00062464 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2013-01-16 17:01 - 2013-01-16 17:01 - 00069632 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2013-01-16 17:00 - 2013-01-16 17:00 - 00061440 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2013-01-16 17:01 - 2013-01-16 17:01 - 00229376 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2013-01-16 17:00 - 2013-01-16 17:00 - 00143360 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2013-01-16 17:01 - 2013-01-16 17:01 - 00348160 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2011-04-30 20:04 - 2011-04-30 20:04 - 00013312 _____ () C:\Program Files (x86)\MSI Afterburner\RTTSH.dll
2013-10-02 21:21 - 2013-10-02 21:21 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: AODDriver4.2.0
Description: AODDriver4.2.0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AODDriver4.2.0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-10-26 14:38:29.670
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-10-26 14:38:29.623
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:17.701
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:17.691
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:16.388
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 09:42:16.373
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:04.243
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:04.223
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:02.686
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-08 01:50:02.671
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 19%
Total physical RAM: 8191.3 MB
Available physical RAM: 6558.97 MB
Total Pagefile: 16380.79 MB
Available Pagefile: 14558.24 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Samsung SSD 830) (Fixed) (Total:119.24 GB) (Free:6.82 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 8258E56B)
Partition 1: (Active) - (Size=119 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Sieht alles ganz gut aus, oder? GPU Last nachwievor so wie sie sein sollte auf dem Desktop, nämlich niedrig Geändert von Kakarott (27.10.2013 um 17:24 Uhr) |
|
27.10.2013, 19:07
| #6 |
| /// the machine /// TB-Ausbilder | Bei Internetverbindungsaufbau GPU Last hoch trotz idleESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Bei Internetverbindungsaufbau GPU Last hoch trotz idle |
|
| Themen zu Bei Internetverbindungsaufbau GPU Last hoch trotz idle |
| .dll, adblock, auslastung, bootmgr, branding, browser, defender, desktop, dringend, error, explorer, farbar, farbar recovery scan tool, firefox, flash player, hdaudio.sys, helper, homepage, installation, mozilla, plug-in, problem, realtek, refresh, registry, rootkit, security, services.exe, svchost.exe, system, temp, usb, usbvideo.sys, virus |
Linear-Darstellung
