![]() |
|
Plagegeister aller Art und deren Bekämpfung: MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.aWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Hallo liebe Experten, ich habe Mitte letzter Woche bemerkt, nachdem ich alle Warnungen gegenüber Keygens ignoriert und mir mehrere heruntergeladen habe, dass mein Rechner nach einem optionalen Definitionsupdate für MSE und anschließendem Neustart des PC´s, dieser ungewöhnlich langsam bootet und läuft, sowie dass Opera sofort nach dem Start wieder schließt und IE jede Seite ständig neu läd. Als ich MSE dann durchlaufen lassen habe, hat er 4 Bedrohungen festgestellt darunter: Trojan.win32.generic, 2 weitere Trojan und ein Worm. Ich bin leider etwas unerfahren in dem Bereich und habe daher nichts gelogged ![]() ![]() Nachdem ich den Rechner dann erneut gestartet hatte der Schock, Microsoft Security Essentials war nicht geöffnet und lässt sich seitdem auch nicht mehr öffnen. Noch dazu ist es mir nicht möglich Windows Updates auszuführen. Ich habe daraufhin mehrere Suchläufe mit den Kaspersky Tools gemacht und es wurden mehrere Bedrohungen gefunden, die sich aber nach jedem Neustart neu zu lokalisieren schienen. Könnt ihr mir helfen? 1. Defogger hat die Laufwerke disabled fefogger_disabled.txt hier: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 01:17 on 26/11/2013 (Bl@ck´n´F!sh) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-11-2013 01 Ran by Bl@ck´n´F!sh (administrator) on BLCK´N´FSH-PC on 26-11-2013 01:19:46 Running from C:\Users\Bl@ck´n´F!sh\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe (cFos Software GmbH) C:\Program Files\ASUS\ROG GameFirst\spd.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe () C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe (Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe (Creative Technology Ltd.) C:\Windows\V0750Mon.exe (Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDWebCam.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463592 2012-02-10] (Realtek Semiconductor) HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64 HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe [415816 2010-08-03] (Logitech Inc.) HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.) HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.) HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2012-10-15] (Saitek) HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2012-10-15] (Saitek) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Runonce: [GrpConv] - grpconv -o [x] HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.) HKCU\...\Run: [Steam] - E:\Program Files (x86)\Steam\Steam.exe [1823656 2013-11-22] (Valve Corporation) HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\Bl@ck´n´F!sh\AppData\Local\Akamai\netsession_win.exe" MountPoints2: {5826a361-4db3-11e2-a6c3-a764fd833dcb} - G:\pushinst.exe HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [286720 2011-12-02] (Intel Corporation) HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe [1349632 2010-06-11] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe [241789 2010-02-18] (Creative Technology Ltd) HKLM-x32\...\Run: [PowerDVD12DMREngine] - C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-02-25] (CyberLink) HKLM-x32\...\Run: [PowerDVD12Agent] - C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-02-25] (CyberLink Corp.) HKLM-x32\...\Run: [FastAccess Web Alert] - C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FAtry.exe [2033648 2011-07-11] (Microsoft) HKLM-x32\...\Run: [V0750Mon.exe] - C:\Windows\V0750Mon.exe [28672 2011-06-06] (Creative Technology Ltd.) HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25088 2011-08-04] (Creative Technology Ltd) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Startup: C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_07336915.lnk ShortcutTarget: _uninst_07336915.lnk -> C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_uninst_07336915.bat () Startup: C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_39743217.lnk ShortcutTarget: _uninst_39743217.lnk -> C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_uninst_39743217.bat () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B670C0AA430CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 ==================== Services (Whitelisted) ================= R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe [948656 2012-01-20] (ASUSTeK Computer Inc.) R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] () R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe [1430144 2011-10-06] (ASUSTeK Computer Inc.) R2 cFosSpeedS; C:\Program Files\ASUS\ROG GameFirst\spd.exe [487096 2010-11-22] (cFos Software GmbH) R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-02-25] (CyberLink Corp.) R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-02-25] (CyberLink) R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-02-25] (CyberLink) S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-15] () ==================== Drivers (Whitelisted) ==================== R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-12-24] () S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin) R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc) R3 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed.sys [1437368 2010-11-22] (cFos Software GmbH) S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [23832 2011-12-02] (Intel Corporation) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-12-24] () R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-09-10] (Cyberlink Corp.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) R3 SaiK0CD9; C:\Windows\System32\DRIVERS\SaiK0CD9.sys [180544 2012-09-20] (Saitek) R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [24680 2012-10-15] (Saitek) R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52200 2012-10-15] (Saitek) R3 SaiU0CD9; C:\Windows\System32\DRIVERS\SaiU0CD9.sys [47168 2012-09-20] (Saitek) R3 V0750Vid; C:\Windows\System32\DRIVERS\V0750Vid.sys [378368 2012-04-26] (Creative Technology Ltd.) R3 VirtCam; C:\Windows\System32\DRIVERS\VirtCam.sys [188672 2011-09-07] (Creative Technology Ltd.) R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [130320 2013-02-25] (CyberLink Corp.) R3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 lvpopf64; system32\DRIVERS\lvpopf64.sys [x] S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-26 01:19 - 2013-11-26 01:20 - 00015691 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt 2013-11-26 01:19 - 2013-11-26 01:19 - 00000000 ____D C:\FRST 2013-11-26 01:18 - 2013-11-26 01:19 - 01958474 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe 2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe 2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log 2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable 2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat 2013-11-25 23:45 - 2013-11-26 00:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-11-25 23:38 - 2013-11-25 23:38 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes 2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-25 23:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre 2013-11-24 17:25 - 2013-11-25 21:47 - 00000000 __SHD C:\ProgramData\h65guhb0 2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr 2013-11-20 20:41 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-20 20:33 - 2013-11-20 20:41 - 00010277 _____ C:\Windows\IE11_main.log 2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash 2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr 2013-11-20 17:34 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-20 17:34 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-11-20 17:34 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-11-13 23:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-13 23:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-13 23:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-13 23:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-13 23:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-13 23:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-13 23:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-13 23:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-13 23:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-13 23:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-13 23:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-13 23:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-13 23:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-13 23:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-13 23:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-13 23:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-13 23:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-13 23:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-13 23:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-13 23:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-13 23:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-13 23:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-13 23:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-13 23:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-13 23:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-13 23:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-13 23:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-13 23:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-13 23:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-13 23:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-11-10 19:58 - 2013-11-10 19:58 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Documents\PC Speed Maximizer 2013-11-10 19:52 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-11-10 19:52 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-11-10 19:52 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-11-10 19:52 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-11-10 19:52 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-11-10 19:52 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-11-10 19:52 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun 2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-10 19:46 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Oracle 2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java 2013-11-04 18:14 - 2013-11-04 18:14 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\NVIDIA Corporation 2013-11-04 17:46 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-11-04 17:46 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-11-04 17:46 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-11-04 17:10 - 2013-11-08 21:47 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-04 17:10 - 2013-11-08 21:47 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-04 17:08 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-11-04 17:08 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll ==================== One Month Modified Files and Folders ======= 2013-11-26 01:20 - 2013-11-26 01:19 - 00015691 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt 2013-11-26 01:19 - 2013-11-26 01:19 - 00000000 ____D C:\FRST 2013-11-26 01:19 - 2013-11-26 01:18 - 01958474 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe 2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe 2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log 2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable 2013-11-26 01:17 - 2013-04-03 20:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Skype 2013-11-26 01:17 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh 2013-11-26 00:47 - 2013-04-04 12:34 - 00000000 ____D C:\Windows\system32\appmgmt 2013-11-26 00:46 - 2013-11-25 23:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-11-26 00:33 - 2012-12-24 15:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-26 00:02 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-26 00:02 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-26 00:00 - 2011-04-12 08:43 - 00708744 _____ C:\Windows\system32\perfh007.dat 2013-11-26 00:00 - 2011-04-12 08:43 - 00153728 _____ C:\Windows\system32\perfc007.dat 2013-11-26 00:00 - 2009-07-14 06:13 - 01646980 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-25 23:58 - 2009-07-14 05:51 - 00185593 _____ C:\Windows\setupact.log 2013-11-25 23:54 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-25 23:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-25 23:53 - 2010-11-21 04:47 - 00157472 _____ C:\Windows\PFRO.log 2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat 2013-11-25 23:38 - 2013-11-25 23:38 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes 2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-25 23:23 - 2012-12-27 00:44 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\vlc 2013-11-25 21:47 - 2013-11-24 17:25 - 00000000 __SHD C:\ProgramData\h65guhb0 2013-11-25 20:38 - 2012-12-24 11:51 - 00000000 ___RD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-25 10:54 - 2009-07-14 03:34 - 00000219 _____ C:\Windows\system.ini 2013-11-25 00:13 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\VirtualStore 2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-11-24 23:55 - 2012-12-24 13:25 - 00001917 _____ C:\Windows\epplauncher.mif 2013-11-24 23:34 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-11-24 23:34 - 2012-12-24 11:51 - 01704326 _____ C:\Windows\WindowsUpdate.log 2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre 2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr 2013-11-24 02:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-11-24 01:12 - 2013-02-14 16:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Programme 2013-11-24 01:07 - 2013-09-25 23:03 - 00000000 ____D C:\Windows\pss 2013-11-21 16:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ____D C:\ProgramData\Skype 2013-11-21 15:10 - 2012-12-24 11:51 - 00001425 _____ C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-21 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-20 22:18 - 2013-04-02 22:25 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Warframe 2013-11-20 20:41 - 2013-11-20 20:33 - 00010277 _____ C:\Windows\IE11_main.log 2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-20 20:31 - 2012-12-24 16:03 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Adobe 2013-11-20 20:31 - 2012-12-24 15:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-20 20:31 - 2012-12-24 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-20 20:31 - 2012-12-24 15:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-20 20:25 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-11-20 20:23 - 2013-04-03 16:56 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Turbine 2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash 2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr 2013-11-20 19:08 - 2012-12-24 14:44 - 00860600 _____ C:\Windows\DirectX.log 2013-11-20 17:38 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-16 17:54 - 2012-12-24 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele 2013-11-16 17:53 - 2012-12-25 22:15 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-11-16 17:53 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Opera 2013-11-16 17:48 - 2012-12-24 13:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-16 15:40 - 2013-10-20 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele (durch) 2013-11-15 23:26 - 2013-05-13 17:24 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\wc 2013-11-14 12:56 - 2013-11-20 17:34 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-14 12:56 - 2013-11-20 17:34 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-11-14 12:56 - 2013-11-20 17:34 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-11-14 12:56 - 2013-08-14 10:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-11-14 12:56 - 2013-08-14 10:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-11-14 12:56 - 2013-08-14 10:00 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-11-14 12:56 - 2013-08-14 10:00 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-11-14 12:56 - 2013-08-14 10:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-11-14 03:03 - 2013-07-16 21:29 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 03:01 - 2012-12-24 12:41 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-14 00:43 - 2012-12-24 15:58 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-11-11 16:02 - 2013-08-14 10:01 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-11-11 16:02 - 2013-08-14 10:01 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-11-11 16:01 - 2013-08-14 10:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-11-11 16:01 - 2013-08-14 10:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-11-11 16:01 - 2013-08-14 10:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-11-11 16:01 - 2013-08-14 10:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-11-10 19:58 - 2013-11-10 19:58 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Documents\PC Speed Maximizer 2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun 2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-10 19:51 - 2013-11-10 19:46 - 00000000 ____D C:\ProgramData\Oracle 2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java 2013-11-08 21:47 - 2013-11-04 17:10 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-08 21:47 - 2013-11-04 17:10 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-06 01:04 - 2013-01-04 01:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\dvdcss 2013-11-05 20:02 - 2012-12-26 21:17 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\DVDVideoSoft 2013-11-05 20:01 - 2013-04-12 11:26 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-11-04 23:17 - 2013-04-05 21:55 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\TS3Client 2013-11-04 19:54 - 2013-04-03 20:50 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2013-11-04 18:14 - 2013-11-04 18:14 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\NVIDIA Corporation 2013-11-04 17:50 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-11-04 17:10 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-11-04 02:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports Files to move or delete: ==================== C:\Windows\System32\mctadmin.exe Some content of TEMP: ==================== C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\6_Offer_14.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\AskSLib.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\AutoRun.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\CmdLineExt03.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\COMAP.EXE C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\CTPBSeq.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\drm_dyndata_7370007.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\drm_dyndata_7400008.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\drm_dyndata_7410004.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\eauninstall.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\LEGOBatman2.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\LEGOLOTR.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\lgps_lgps.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\MassEffect2-1.02.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\nvStInst.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\oi_{5FC0405C-C8D9-4981-8B74-F3563CD51CF9}.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SHSetup.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIMEEI2Installer.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIMEEIInstaller.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIntf16.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIntf32.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIntfNT.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SkypeSetup.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\stubhelper.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\swt-win32-3740.dll C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\ubi145E.tmp.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\UNINSTALL.EXE C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.0.6-win64.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.0.7-win64.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.0.8-win64.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.1.1-win64.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_dxinst.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is2D67.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is51A8.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is647C.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is65E7.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is815F.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is870A.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is9D0.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_isBAD6.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_isBED5.exe C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_isCB66.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2012-12-24 12:31] - [2012-12-24 14:06] - 2871808 ____A (Microsoft Corporation) 65DE61A95D4F5CD4E7ED63EC6344CBF0 C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-21 16:14 ==================== End Of Log ============================ --- --- --- Addition.txt hier: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-11-2013 01 Ran by Bl@ck´n´F!sh at 2013-11-26 01:21:02 Running from C:\Users\Bl@ck´n´F!sh\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== Adobe AIR (x32 Version: 2.7.0.19480) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152) Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8) Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112) Advanced Audio FX Engine (x32 Version: 1.12.05) AI Suite II (x32 Version: 1.02.26) ArcaniA - Fall of Setarrif (x32) ArcaniA - Gothic 4 (x32) Archeblade (x32) Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.3.0) Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.4.000) Assassin's Creed (x32 Version: 1.02) Assassin's Creed Brotherhood (x32 Version: 1.03) Assassin's Creed II (x32 Version: 1.01) Assassin's Creed Revelations 1.03 (x32 Version: 1.03) Assassin's Creed(R) III v1.02 (x32 Version: 1.02) ASUS Product Register Program (x32 Version: 1.0.014) ASUS ROG Connect Plus (x32 Version: 1.00.14) ASUS_ROG_THEME (x32 Version: 1.00.14) AVNavigator (HKCU Version: VSX-921) BBI USB WIRELESS CONTROLLER (x32 Version: 2005.12.02) BioShock 2 (x32 Version: 1.0.0003.131) BioShock 2 (x32 Version: 1.0.0005.131) BioShock 2 (x32 Version: 1.00.0000) BioShock Infinite (x32) Black & White® 2 (x32 Version: 1.00.0000) Black & White® 2 Battle of the Gods (x32 Version: 1.00.0000) Böse Nachbarn (x32 Version: 1.0) Call of Duty(R) - World at War(TM) (x32 Version: 1.0) Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000) Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.7) Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (x32 Version: 1.1) Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (x32 Version: 1.2) Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (x32 Version: 1.3) Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32 Version: 1.4) Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Patch (x32 Version: 1.5) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32) Call of Duty: Black Ops - Multiplayer (x32) Call of Duty: Black Ops (x32) Call of Duty: Modern Warfare 2 - Multiplayer (x32) Call of Duty: Modern Warfare 2 (x32) Call of Duty: Modern Warfare 3 - Dedicated Server (x32) Call of Duty: Modern Warfare 3 - Multiplayer (x32) Call of Duty: Modern Warfare 3 (x32) CPUID ROG CPU-Z 1.58.4 (Version: 1.58.4) Creative ALchemy (x32 Version: 1.43) Creative HD CODEC (x32 Version: 1.1.1.3) Creative Live! Central 3 (x32 Version: 3.01.14) Creative MediaSource 5 (x32 Version: 5.00) Creative Software AutoUpdate (x32 Version: 1.41) Creative Systeminformationen (x32 Version: 1.10) CyberLink PowerDVD 12 (x32 Version: 12.0.2625.57) Dark Souls Prepare to Die Edition (x32 Version: 1.0.0001.130) Demigod (x32 Version: 1.00) Demigod (x32) Der Herr der Ringe® - Die Eroberung™ (x32 Version: 1.0.0.1) DeskBabes version 1.1.0.84 (HKCU Version: 1.1.0.84) Dolby Digital Live Pack (x32) Dota 2 (x32) DTS Connect Pack (x32) Duel of Champions (x32) EA Shared Game Component: Activation (x32 Version: 2.2.0) EA Shared Game Component: Activation (x32 Version: 2.2.0.19) EP2v1.4 Ep3v1.21 (x32) EP4v1.0 (x32) Fable - The Lost Chapters (x32 Version: 1.00.0000) Fable III (x32 Version: 1.0.0000.131) Fable III (x32 Version: 1.0.0002.131) Fallout 3 (x32 Version: 1.00.0000) Fallout: New Vegas (x32) Far Cry 2 (x32 Version: 1.03.00) Far Cry 3 (x32 Version: 1.05) Far Cry 3 Blood Dragon (x32 Version: 1.02) FastAccess Web Alert (x32 Version: 1.00) Free Studio version 2013 (x32 Version: 6.2.0.1029) GameSpy Comrade (x32 Version: 2.1.1.214) GeForce Experience NvStream Client Components (Version: 1.6.28) God Mode (x32) Gothic III - Götterdämmerung (x32 Version: 1.00.0000) Gothic III - Götterdämmerung 1.0.6 Patch (x32 Version: 1.0.0) Gothic III - Götterdämmerung 1.08.9 Patch (x32 Version: 1.0.0) Gothic III - Götterdämmerung Patch (x32 Version: 1.0.0) Gothic III (x32 Version: 1.0.0) HP FWUpdateEDO2 (x32 Version: 1.2.0.0) HPDiagnosticAlert (x32 Version: 1.00.0000) Impulse (x32 Version: 1.0) Impulse (x32) Intel(R) Management Engine Components (x32 Version: 7.1.21.1124) Intel(R) Network Connections 16.6.126.0 (Version: 16.6.126.0) Intel(R) Rapid Storage Technology enterprise (x32 Version: 3.0.0.3011) Intel® Watchdog Timer Driver (Intel® WDT) (x32) Java 7 Update 45 (64-bit) (Version: 7.0.450) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) JDownloader 0.9 (x32 Version: 0.9) LEGO® Batman™ 2: DC Super Heroes (x32 Version: 1.0.0.0) LEGO® Der Herr der Ringe™ (x32 Version: 1.0.0.0) LEGO® Harry Potter™: Die Jahre 1-4 (x32 Version: 1.0.0.0) LEGO® Harry Potter™: Die Jahre 5-7 (x32 Version: 1.0.0.0) LEGO® Indiana Jones™ (x32 Version: 1.00.0000) LEGO® Star Wars™: Die Komplette Saga (x32 Version: 1.00.0000) LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000) Leisure Suit Larry - Box Office Bust (x32 Version: 1.00.0000) Live! Cam Connect HD VF0750 Driver (1.01.01.00) Logitech GamePanel Software 3.06.109 (Version: 3.06.109) Lost Planet 3 (x32) LOST PLANET COLONIES (x32 Version: 1.02.129) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mass Effect (x32 Version: 1.00) Mass Effect 2 (x32 Version: 1.02) Mass Effect™ 3 (x32 Version: 1.05.0.0) MemTweakIt 1.01.4 (Version: 1.01.4) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322) Microsoft .NET Framework 1.1 (x32) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0) Microsoft Office Excel Viewer (x32 Version: 12.0.6612.1000) Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000) Microsoft Security Client (Version: 4.4.0304.0) Microsoft Security Essentials (Version: 4.4.304.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0) Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0) Might and Magic: Clash of Heroes (x32) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Nero 12 (x32 Version: 12.0.01600) Nero 12 Content Pack (x32 Version: 12.0.00100) Nero Abstract Themes (x32 Version: 12.0.11500) Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0) Nero BackItUp (x32 Version: 12.5.7000) Nero BackItUp Help (CHM) (x32 Version: 12.0.13000) Nero Blu-ray Player (x32 Version: 12.0.20030) Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.9000) Nero Burning ROM (x32 Version: 12.5.6000) Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000) Nero Cliparts (x32 Version: 12.0.11500) Nero ControlCenter (x32 Version: 11.0.15600) Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000) Nero Core Components (x32 Version: 11.0.21800) Nero Disc Menus 1 (x32 Version: 12.0.11500) Nero Disc Menus 2 (x32 Version: 12.0.11500) Nero Disc Menus 3 (x32 Version: 12.0.11500) Nero Disc Menus Basic (x32 Version: 12.0.11500) Nero Effects Basic (x32 Version: 12.0.11500) Nero Express (x32 Version: 12.5.7000) Nero Express Help (CHM) (x32 Version: 12.0.13000) Nero Family and Events Themes (x32 Version: 12.0.11500) Nero Football (Soccer) Themes (x32 Version: 12.0.11500) Nero Holiday and Sports Themes (x32 Version: 12.0.11500) Nero Image Samples (x32 Version: 12.0.11500) Nero Kwik Media (x32 Version: 1.18.20100) Nero Kwik Media Help (CHM) (x32 Version: 12.0.12000) Nero Kwik Themes Basic (x32 Version: 12.0.11500) Nero PiP Effects 1 (x32 Version: 12.0.11500) Nero PiP Effects Basic (x32 Version: 12.0.11500) Nero Platinum Effects 12 (x32 Version: 12.0.11500) Nero Prerequisite Installer 2.0 (x32 Version: 12.0.01000) Nero Recode (x32 Version: 12.5.6000) Nero Recode Help (CHM) (x32 Version: 12.0.12000) Nero RescueAgent (x32 Version: 12.0.11000) Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000) Nero Retro Film Themes (x32 Version: 12.0.11700) Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0) Nero Update (x32 Version: 11.0.11800.31.0) Nero Video (x32 Version: 12.5.4000) Nero Video Help (CHM) (x32 Version: 12.0.12000) Nero Video Samples (x32 Version: 12.0.11500) Nero Video Transitions 1 (x32 Version: 12.0.11500) neroxml (x32 Version: 1.0.0) NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82) NVIDIA 3D Vision Treiber 331.82 (Version: 331.82) NVIDIA Display Control Panel (Version: 6.14.12.5919) NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1) NVIDIA Grafiktreiber 331.82 (Version: 331.82) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.140.952) NVIDIA LED Visualizer 1.0 (Version: 1.0) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182) NVIDIA Systemsteuerung 331.82 (Version: 331.82) NVIDIA Update 9.3.21 (Version: 9.3.21) NVIDIA Update Components (Version: 9.3.21) NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9) Oblivion - Horse Armor Pack (x32 Version: 1.00.0000) Oblivion - Knights of the Nine (x32 Version: 1.00.0000) Oblivion - Mehrunes Razor (x32 Version: 1.00.0000) Oblivion - Orrery (x32 Version: 1.00.0000) Oblivion - Spell Tomes (x32 Version: 1.00.0000) Oblivion - Thieves Den (x32 Version: 1.00.0000) Oblivion - Vile Lair (x32 Version: 1.00.0000) Oblivion - Wizard's Tower (x32 Version: 1.00.0000) Oblivion (x32 Version: 1.00.0000) OpenAL (x32) Opera 12.16 (x32 Version: 12.16.1860) Origin (x32 Version: 9.1.12.73) Outlast (x32) PlanetSide 2 (x32) Prerequisite installer (x32 Version: 12.0.0003) PunkBuster Services (x32 Version: 0.986) Questpaket 4 Update 1 Deinstallation (x32 Version: 4.1.0.0) RAGE (x32) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6570) Reus (x32) ROG GameFirst v4.53 (Version: 4.53) Sacred 2 - Elite (x32 Version: 1.00.0000) Sacred 2 (x32 Version: 2.0.2.0) SHIELD Streaming (Version: 1.6.53) Skype™ 6.10 (x32 Version: 6.10.104) Smart Technology Programming Software 7.0.23.0 (Version: 7.0.23.0) Sound Blaster X-Fi MB 2 (x32 Version: 1.0) StarCraft II (x32 Version: 2.0.10.26585) Steam (x32 Version: 1.0.0.0) Stronghold Kingdoms (x32) swMSM (x32 Version: 12.0.0.1) Team Fortress 2 (x32) TeamSpeak 3 Client (Version: 3.0.13.1) The Binding of Isaac (x32) The Elder Scrolls V: Skyrim (x32) The Lord of the Rings Online™ (x32) The Lord of the Rings Online™ v03.08.00.8029 (x32 Version: 03.08.00.8029) The Lord of the Rings: War in the North (x32) The Witcher 2 (x32 Version: 1.00.0000) The Witcher Enhanced Edition (x32 Version: 1.00.0000) TP-LINK Wireless Client Utility (x32 Version: 7.0) Two Worlds II (x32 Version: 1.3.0.0) Two Worlds II Castle Defense (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3) Uplay (x32 Version: 2.0) VLC media player 2.1.1 (Version: 2.1.1) WAR OF THE RING™ DER RINGKRIEG™ (x32 Version: 1.0) Warframe (x32) Webcam Virtual Driver (x32 Version: 1.00.08.0907) Welcome App (Start-up experience) (x32 Version: 12.0.15000) Whorecraft Episode 3 1.21 (x32 Version: 1.21) Whorecraft v.1.0r (x32 Version: v.1.0r) Winamp (x32 Version: 5.63 ) Windows Live ID Sign-in Assistant (Version: 6.500.3165.0) WinRAR 4.20 (64-Bit) (Version: 4.20.0) World of Battles (x32 Version: 1.2.6) X3 Terran Conflict v3.2 (x32) X3TC Bonuspaket 4.1.01 (x32 Version: 4.1.01) X-Fi Home Theater HD (x32 Version: 1.0) ==================== Restore Points ========================= 25-11-2013 00:41:30 Geplanter Prüfpunkt 25-11-2013 22:45:52 Installed SpyHunter 25-11-2013 23:45:34 Removed SpyHunter ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04EE0DC8-A8E2-4FFD-95EF-AD9FCE5411C9} - \Windows Update Check - 0x090301DC No Task File Task: {12A32E87-750D-4A40-B638-82C7E04A175A} - System32\Tasks\{4C2C797B-08DB-41A7-B22E-9B1EDD9CD015} => E:\Program Files (x86)\The Witcher 2\Launcher.exe [2013-05-06] (CD Projekt RED) Task: {5853DD59-A481-462F-97DB-E93D5F894C08} - System32\Tasks\ASUS\RC TweakIt Server Execute => C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe [2010-11-23] () Task: {5CD95F13-B4DD-4E76-B4AE-5433BD5A6DE6} - System32\Tasks\ASUS\ASUS DigiPowerControl Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe [2011-09-19] (ASUSTeK Computer Inc.) Task: {74BCD7E7-6D06-4BFD-812A-3CA65C565A29} - System32\Tasks\{B90077BB-4B3B-4617-9EE8-75137C8DB5FD} => E:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe Task: {90812122-7D08-4BEC-9FBF-9620C3E4C0DB} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.) Task: {96E5F05B-EED5-4BAE-893C-30E1EFDB2D30} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation) Task: {98AA9DAA-157B-4628-A9B2-22AB3DDD1CF0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-20] (Adobe Systems Incorporated) Task: {B46F3BF0-DBFF-44D3-9F8E-3A138A1810B8} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] () Task: {C02F490E-A1FB-41C1-96B3-B2AD139B8068} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {DA689BE1-5555-4805-96E4-44D4F50AB993} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3479730217-1746461300-4275407343-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {E29E0084-D112-4C44-8E6A-621449245C2B} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3479730217-1746461300-4275407343-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {FDC56009-EF20-424C-859E-528DF350DECA} - System32\Tasks\{3728183D-1740-4155-9107-AE0CBCA3CF4E} => E:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2012-12-24 13:52 - 2013-11-25 23:54 - 00027648 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\PEbiosinterface32.dll 2012-12-24 13:52 - 2010-06-29 03:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.18\ATKEX.dll 2012-12-24 14:00 - 2010-06-24 21:50 - 00094208 _____ () C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\IccLibDll.dll 2013-03-12 17:10 - 2013-11-06 22:48 - 00691200 _____ () E:\Program Files (x86)\Steam\SDL2.dll 2012-12-25 21:55 - 2013-11-22 00:43 - 01135016 _____ () E:\Program Files (x86)\Steam\bin\chromehtml.DLL 2012-12-25 21:55 - 2013-11-06 22:48 - 20625832 _____ () E:\Program Files (x86)\Steam\bin\libcef.dll 2012-12-25 21:55 - 2013-06-15 00:49 - 01100800 _____ () E:\Program Files (x86)\Steam\bin\avcodec-53.dll 2012-12-25 21:55 - 2013-06-15 00:49 - 00124416 _____ () E:\Program Files (x86)\Steam\bin\avutil-51.dll 2012-12-25 21:55 - 2013-06-15 00:49 - 00192000 _____ () E:\Program Files (x86)\Steam\bin\avformat-53.dll 2012-12-24 13:41 - 2011-07-21 19:04 - 00074240 _____ () C:\Windows\SysWOW64\CmdRtr.DLL 2012-12-24 13:41 - 2011-07-21 19:02 - 00207872 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2013-05-15 22:35 - 2011-08-24 03:39 - 00081920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Common\koan\_ctypes.pyd 2013-05-15 22:35 - 2011-08-24 03:39 - 00053248 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Common\Koan\_socket.pyd 2013-05-15 22:35 - 2011-08-24 03:39 - 00655360 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Common\Koan\_ssl.pyd 2013-05-05 04:08 - 2011-08-04 11:19 - 00002560 _____ () C:\Windows\system32\CTXFIRES.DLL 2013-08-16 08:49 - 2013-08-16 08:49 - 00019968 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\PSIClient\7ba7642e68c2ded50d7c08b00073b11e\PSIClient.ni.dll 2012-12-24 13:57 - 2011-03-04 09:33 - 00053248 ____N () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll 2012-12-24 13:57 - 2011-09-08 15:23 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll 2012-12-24 13:53 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll 2012-12-24 13:53 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll 2012-12-24 13:54 - 2011-09-26 19:36 - 00869376 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll 2012-12-24 13:54 - 2011-10-13 15:57 - 01077248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll 2012-12-24 13:53 - 2011-09-20 18:11 - 00985600 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll 2012-12-24 13:56 - 2011-08-23 16:19 - 01294848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll 2012-12-24 13:56 - 2011-09-29 11:36 - 01046016 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll 2012-12-24 13:53 - 2011-12-28 11:18 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll 2012-12-24 13:53 - 2011-09-26 18:37 - 01616384 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll 2012-12-24 13:53 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll 2012-12-24 13:53 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll 2012-12-24 13:53 - 2011-10-14 20:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll 2012-12-24 13:52 - 2010-08-23 03:17 - 00662016 ____R () C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMLib.dll 2012-12-24 13:53 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll 2012-12-24 13:53 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\06058659.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\07651968.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\34159608.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\06058659.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\07651968.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\34159608.sys => ""="Driver" ==================== Faulty Device Manager Devices ============= Name: Bluetooth-Peripheriegerät Description: Bluetooth-Peripheriegerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Bluetooth-Peripheriegerät Description: Bluetooth-Peripheriegerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Bluetooth-Peripheriegerät Description: Bluetooth-Peripheriegerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary 4355406drv. System Error: Das System kann die angegebene Datei nicht finden. . Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary 80078576. System Error: Das System kann die angegebene Datei nicht finden. . Error: (11/25/2013 11:55:14 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/25/2013 11:45:56 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary 4355406drv. System Error: Das System kann die angegebene Datei nicht finden. . Error: (11/25/2013 09:48:59 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary 39743217. System Error: Das System kann die angegebene Datei nicht finden. . Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary 4816517drv. System Error: Das System kann die angegebene Datei nicht finden. . Error: (11/25/2013 00:13:41 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cleanautorun.exe, Version: 1.2.0.0, Zeitstempel: 0x4cb44279 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xdd8 Startzeit der fehlerhaften Anwendung: 0xcleanautorun.exe0 Pfad der fehlerhaften Anwendung: cleanautorun.exe1 Pfad des fehlerhaften Moduls: cleanautorun.exe2 Berichtskennung: cleanautorun.exe3 Error: (11/24/2013 11:46:08 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/24/2013 11:37:28 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (11/26/2013 00:58:05 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/26/2013 00:58:05 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/26/2013 00:48:34 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/25/2013 11:55:27 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (11/25/2013 11:55:01 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (11/25/2013 11:54:05 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Microsoft Antimalware Service" wurde mit folgendem Fehler beendet: %%-2147024894 Error: (11/25/2013 11:34:12 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/25/2013 11:34:12 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/25/2013 09:49:30 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (11/25/2013 09:48:45 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Microsoft Office Sessions: ========================= Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary 4355406drv. System Error: Das System kann die angegebene Datei nicht finden. Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary 80078576. System Error: Das System kann die angegebene Datei nicht finden. Error: (11/25/2013 11:55:14 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/25/2013 11:45:56 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary 4355406drv. System Error: Das System kann die angegebene Datei nicht finden. Error: (11/25/2013 09:48:59 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary 39743217. System Error: Das System kann die angegebene Datei nicht finden. Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary 4816517drv. System Error: Das System kann die angegebene Datei nicht finden. Error: (11/25/2013 00:13:41 AM) (Source: Application Error)(User: ) Description: cleanautorun.exe1.2.0.04cb44279unknown0.0.0.000000000c000000500000000dd801cee96acfb4947fH:\Programme\Kaspersky Tools\cleanautorun.exeunknown0e666ddb-555e-11e3-a4f7-0015834b229b Error: (11/24/2013 11:46:08 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/24/2013 11:37:28 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2013-02-24 23:52:30.156 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-02-24 23:51:46.854 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-12-24 20:37:15.630 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-24 20:37:15.619 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-24 20:37:15.301 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-24 20:37:15.290 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 8133.22 MB Available physical RAM: 5050.26 MB Total Pagefile: 16264.63 MB Available Pagefile: 12725.99 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:537.82 GB) (Free:450.86 GB) NTFS Drive d: (Sicherung) (Fixed) (Total:305.66 GB) (Free:0 GB) NTFS Drive e: (Spiele) (Fixed) (Total:1019.53 GB) (Free:419.31 GB) NTFS Drive h: (My Book) (Fixed) (Total:931.51 GB) (Free:472.04 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 4C58D3CF) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 1863 GB) (Disk ID: 4C58D3FF) Partition 1: (Not Active) - (Size=538 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=306 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=1020 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 932 GB) (Disk ID: 44FDFE06) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Geändert von BlacknFish (26.11.2013 um 01:57 Uhr) |
Themen zu MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a |
akamai, computer, cpu-z, excel, fehler, flash player, funktioniert nicht mehr, helper, home, installation, kaspersky, langsam, launch, plug-in, realtek, refresh, registry, rundll, scan, security, services.exe, software, super, svchost.exe, system, teamspeak, tower, trojan, updates, usb, windows, windows updates |