| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.aWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
26.11.2013, 01:49
| #1 |
 |  MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Hallo liebe Experten, ich habe Mitte letzter Woche bemerkt, nachdem ich alle Warnungen gegenüber Keygens ignoriert und mir mehrere heruntergeladen habe, dass mein Rechner nach einem optionalen Definitionsupdate für MSE und anschließendem Neustart des PC´s, dieser ungewöhnlich langsam bootet und läuft, sowie dass Opera sofort nach dem Start wieder schließt und IE jede Seite ständig neu läd. Als ich MSE dann durchlaufen lassen habe, hat er 4 Bedrohungen festgestellt darunter: Trojan.win32.generic, 2 weitere Trojan und ein Worm. Ich bin leider etwas unerfahren in dem Bereich und habe daher nichts gelogged   Nachdem ich den Rechner dann erneut gestartet hatte der Schock, Microsoft Security Essentials war nicht geöffnet und lässt sich seitdem auch nicht mehr öffnen. Noch dazu ist es mir nicht möglich Windows Updates auszuführen. Ich habe daraufhin mehrere Suchläufe mit den Kaspersky Tools gemacht und es wurden mehrere Bedrohungen gefunden, die sich aber nach jedem Neustart neu zu lokalisieren schienen. Könnt ihr mir helfen? 1. Defogger hat die Laufwerke disabled fefogger_disabled.txt hier: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 01:17 on 26/11/2013 (Bl@ck´n´F!sh)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-11-2013 01
Ran by Bl@ck´n´F!sh (administrator) on BLCK´N´FSH-PC on 26-11-2013 01:19:46
Running from C:\Users\Bl@ck´n´F!sh\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe
(cFos Software GmbH) C:\Program Files\ASUS\ROG GameFirst\spd.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
(Creative Technology Ltd.) C:\Windows\V0750Mon.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDWebCam.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463592 2012-02-10] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe [415816 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2012-10-15] (Saitek)
HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2012-10-15] (Saitek)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Runonce: [GrpConv] - grpconv -o [x]
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - E:\Program Files (x86)\Steam\Steam.exe [1823656 2013-11-22] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\Bl@ck´n´F!sh\AppData\Local\Akamai\netsession_win.exe"
MountPoints2: {5826a361-4db3-11e2-a6c3-a764fd833dcb} - G:\pushinst.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [286720 2011-12-02] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe [1349632 2010-06-11] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe [241789 2010-02-18] (Creative Technology Ltd)
HKLM-x32\...\Run: [PowerDVD12DMREngine] - C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-02-25] (CyberLink)
HKLM-x32\...\Run: [PowerDVD12Agent] - C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [FastAccess Web Alert] - C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FAtry.exe [2033648 2011-07-11] (Microsoft)
HKLM-x32\...\Run: [V0750Mon.exe] - C:\Windows\V0750Mon.exe [28672 2011-06-06] (Creative Technology Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25088 2011-08-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Startup: C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_07336915.lnk
ShortcutTarget: _uninst_07336915.lnk -> C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_uninst_07336915.bat ()
Startup: C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_39743217.lnk
ShortcutTarget: _uninst_39743217.lnk -> C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_uninst_39743217.bat ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B670C0AA430CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe [948656 2012-01-20] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe [1430144 2011-10-06] (ASUSTeK Computer Inc.)
R2 cFosSpeedS; C:\Program Files\ASUS\ROG GameFirst\spd.exe [487096 2010-11-22] (cFos Software GmbH)
R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-02-25] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-02-25] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-02-25] (CyberLink)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-15] ()
==================== Drivers (Whitelisted) ====================
R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-12-24] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed.sys [1437368 2010-11-22] (cFos Software GmbH)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [23832 2011-12-02] (Intel Corporation)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-12-24] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-09-10] (Cyberlink Corp.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
R3 SaiK0CD9; C:\Windows\System32\DRIVERS\SaiK0CD9.sys [180544 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [24680 2012-10-15] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52200 2012-10-15] (Saitek)
R3 SaiU0CD9; C:\Windows\System32\DRIVERS\SaiU0CD9.sys [47168 2012-09-20] (Saitek)
R3 V0750Vid; C:\Windows\System32\DRIVERS\V0750Vid.sys [378368 2012-04-26] (Creative Technology Ltd.)
R3 VirtCam; C:\Windows\System32\DRIVERS\VirtCam.sys [188672 2011-09-07] (Creative Technology Ltd.)
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [130320 2013-02-25] (CyberLink Corp.)
R3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 lvpopf64; system32\DRIVERS\lvpopf64.sys [x]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-26 01:19 - 2013-11-26 01:20 - 00015691 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-11-26 01:19 - 2013-11-26 01:19 - 00000000 ____D C:\FRST
2013-11-26 01:18 - 2013-11-26 01:19 - 01958474 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:45 - 2013-11-26 00:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:38 - 2013-11-25 23:38 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-25 23:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-25 21:47 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-20 20:41 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:33 - 2013-11-20 20:41 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 17:34 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-20 17:34 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-13 23:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 23:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 23:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 23:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 23:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 23:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 23:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 23:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 23:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 23:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 23:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 23:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 23:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:58 - 2013-11-10 19:58 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Documents\PC Speed Maximizer
2013-11-10 19:52 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:46 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
2013-11-04 18:14 - 2013-11-04 18:14 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\NVIDIA Corporation
2013-11-04 17:46 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-11-04 17:46 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-11-04 17:46 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-04 17:10 - 2013-11-08 21:47 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-04 17:10 - 2013-11-08 21:47 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-04 17:08 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-11-04 17:08 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
==================== One Month Modified Files and Folders =======
2013-11-26 01:20 - 2013-11-26 01:19 - 00015691 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-11-26 01:19 - 2013-11-26 01:19 - 00000000 ____D C:\FRST
2013-11-26 01:19 - 2013-11-26 01:18 - 01958474 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-26 01:17 - 2013-04-03 20:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Skype
2013-11-26 01:17 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh
2013-11-26 00:47 - 2013-04-04 12:34 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-26 00:46 - 2013-11-25 23:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-26 00:33 - 2012-12-24 15:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-26 00:02 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-26 00:02 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-26 00:00 - 2011-04-12 08:43 - 00708744 _____ C:\Windows\system32\perfh007.dat
2013-11-26 00:00 - 2011-04-12 08:43 - 00153728 _____ C:\Windows\system32\perfc007.dat
2013-11-26 00:00 - 2009-07-14 06:13 - 01646980 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-25 23:58 - 2009-07-14 05:51 - 00185593 _____ C:\Windows\setupact.log
2013-11-25 23:54 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-25 23:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-25 23:53 - 2010-11-21 04:47 - 00157472 _____ C:\Windows\PFRO.log
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:38 - 2013-11-25 23:38 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-25 23:23 - 2012-12-27 00:44 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\vlc
2013-11-25 21:47 - 2013-11-24 17:25 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-25 20:38 - 2012-12-24 11:51 - 00000000 ___RD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-25 10:54 - 2009-07-14 03:34 - 00000219 _____ C:\Windows\system.ini
2013-11-25 00:13 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\VirtualStore
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 23:55 - 2012-12-24 13:25 - 00001917 _____ C:\Windows\epplauncher.mif
2013-11-24 23:34 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-24 23:34 - 2012-12-24 11:51 - 01704326 _____ C:\Windows\WindowsUpdate.log
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-24 02:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-24 01:12 - 2013-02-14 16:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Programme
2013-11-24 01:07 - 2013-09-25 23:03 - 00000000 ____D C:\Windows\pss
2013-11-21 16:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ____D C:\ProgramData\Skype
2013-11-21 15:10 - 2012-12-24 11:51 - 00001425 _____ C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-21 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-20 22:18 - 2013-04-02 22:25 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Warframe
2013-11-20 20:41 - 2013-11-20 20:33 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:31 - 2012-12-24 16:03 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Adobe
2013-11-20 20:31 - 2012-12-24 15:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-20 20:31 - 2012-12-24 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 20:31 - 2012-12-24 15:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-20 20:25 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-20 20:23 - 2013-04-03 16:56 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Turbine
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 19:08 - 2012-12-24 14:44 - 00860600 _____ C:\Windows\DirectX.log
2013-11-20 17:38 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-16 17:54 - 2012-12-24 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele
2013-11-16 17:53 - 2012-12-25 22:15 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-16 17:53 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-16 17:48 - 2012-12-24 13:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:40 - 2013-10-20 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele (durch)
2013-11-15 23:26 - 2013-05-13 17:24 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\wc
2013-11-14 12:56 - 2013-11-20 17:34 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-20 17:34 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-14 03:03 - 2013-07-16 21:29 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 03:01 - 2012-12-24 12:41 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 00:43 - 2012-12-24 15:58 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-11 16:02 - 2013-08-14 10:01 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2013-08-14 10:01 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2013-08-14 10:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:58 - 2013-11-10 19:58 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Documents\PC Speed Maximizer
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:51 - 2013-11-10 19:46 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
2013-11-08 21:47 - 2013-11-04 17:10 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-08 21:47 - 2013-11-04 17:10 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-06 01:04 - 2013-01-04 01:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\dvdcss
2013-11-05 20:02 - 2012-12-26 21:17 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\DVDVideoSoft
2013-11-05 20:01 - 2013-04-12 11:26 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-04 23:17 - 2013-04-05 21:55 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\TS3Client
2013-11-04 19:54 - 2013-04-03 20:50 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-11-04 18:14 - 2013-11-04 18:14 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\NVIDIA Corporation
2013-11-04 17:50 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-04 17:10 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-04 02:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
Files to move or delete:
====================
C:\Windows\System32\mctadmin.exe
Some content of TEMP:
====================
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\6_Offer_14.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\AskSLib.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\AutoRun.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\CmdLineExt03.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\COMAP.EXE
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\CTPBSeq.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\drm_dyndata_7370007.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\drm_dyndata_7400008.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\drm_dyndata_7410004.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\eauninstall.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\LEGOBatman2.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\LEGOLOTR.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\lgps_lgps.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\MassEffect2-1.02.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\nvStInst.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\oi_{5FC0405C-C8D9-4981-8B74-F3563CD51CF9}.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SHSetup.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIMEEI2Installer.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIntf16.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIntf32.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SIntfNT.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\stubhelper.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\ubi145E.tmp.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\UNINSTALL.EXE
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.0.6-win64.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.0.7-win64.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.0.8-win64.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_dxinst.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is2D67.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is51A8.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is647C.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is65E7.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is815F.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is870A.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_is9D0.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_isBAD6.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_isBED5.exe
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\_isCB66.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-12-24 12:31] - [2012-12-24 14:06] - 2871808 ____A (Microsoft Corporation) 65DE61A95D4F5CD4E7ED63EC6344CBF0
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-21 16:14
==================== End Of Log ============================
--- --- --- Addition.txt hier: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-11-2013 01
Ran by Bl@ck´n´F!sh at 2013-11-26 01:21:02
Running from C:\Users\Bl@ck´n´F!sh\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
Adobe AIR (x32 Version: 2.7.0.19480)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)
Advanced Audio FX Engine (x32 Version: 1.12.05)
AI Suite II (x32 Version: 1.02.26)
ArcaniA - Fall of Setarrif (x32)
ArcaniA - Gothic 4 (x32)
Archeblade (x32)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.3.0)
Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.4.000)
Assassin's Creed (x32 Version: 1.02)
Assassin's Creed Brotherhood (x32 Version: 1.03)
Assassin's Creed II (x32 Version: 1.01)
Assassin's Creed Revelations 1.03 (x32 Version: 1.03)
Assassin's Creed(R) III v1.02 (x32 Version: 1.02)
ASUS Product Register Program (x32 Version: 1.0.014)
ASUS ROG Connect Plus (x32 Version: 1.00.14)
ASUS_ROG_THEME (x32 Version: 1.00.14)
AVNavigator (HKCU Version: VSX-921)
BBI USB WIRELESS CONTROLLER (x32 Version: 2005.12.02)
BioShock 2 (x32 Version: 1.0.0003.131)
BioShock 2 (x32 Version: 1.0.0005.131)
BioShock 2 (x32 Version: 1.00.0000)
BioShock Infinite (x32)
Black & White® 2 (x32 Version: 1.00.0000)
Black & White® 2 Battle of the Gods (x32 Version: 1.00.0000)
Böse Nachbarn (x32 Version: 1.0)
Call of Duty(R) - World at War(TM) (x32 Version: 1.0)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.7)
Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (x32 Version: 1.1)
Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (x32 Version: 1.2)
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (x32 Version: 1.3)
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32 Version: 1.4)
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Patch (x32 Version: 1.5)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7)
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32)
Call of Duty: Black Ops - Multiplayer (x32)
Call of Duty: Black Ops (x32)
Call of Duty: Modern Warfare 2 - Multiplayer (x32)
Call of Duty: Modern Warfare 2 (x32)
Call of Duty: Modern Warfare 3 - Dedicated Server (x32)
Call of Duty: Modern Warfare 3 - Multiplayer (x32)
Call of Duty: Modern Warfare 3 (x32)
CPUID ROG CPU-Z 1.58.4 (Version: 1.58.4)
Creative ALchemy (x32 Version: 1.43)
Creative HD CODEC (x32 Version: 1.1.1.3)
Creative Live! Central 3 (x32 Version: 3.01.14)
Creative MediaSource 5 (x32 Version: 5.00)
Creative Software AutoUpdate (x32 Version: 1.41)
Creative Systeminformationen (x32 Version: 1.10)
CyberLink PowerDVD 12 (x32 Version: 12.0.2625.57)
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0001.130)
Demigod (x32 Version: 1.00)
Demigod (x32)
Der Herr der Ringe® - Die Eroberung™ (x32 Version: 1.0.0.1)
DeskBabes version 1.1.0.84 (HKCU Version: 1.1.0.84)
Dolby Digital Live Pack (x32)
Dota 2 (x32)
DTS Connect Pack (x32)
Duel of Champions (x32)
EA Shared Game Component: Activation (x32 Version: 2.2.0)
EA Shared Game Component: Activation (x32 Version: 2.2.0.19)
EP2v1.4
Ep3v1.21 (x32)
EP4v1.0 (x32)
Fable - The Lost Chapters (x32 Version: 1.00.0000)
Fable III (x32 Version: 1.0.0000.131)
Fable III (x32 Version: 1.0.0002.131)
Fallout 3 (x32 Version: 1.00.0000)
Fallout: New Vegas (x32)
Far Cry 2 (x32 Version: 1.03.00)
Far Cry 3 (x32 Version: 1.05)
Far Cry 3 Blood Dragon (x32 Version: 1.02)
FastAccess Web Alert (x32 Version: 1.00)
Free Studio version 2013 (x32 Version: 6.2.0.1029)
GameSpy Comrade (x32 Version: 2.1.1.214)
GeForce Experience NvStream Client Components (Version: 1.6.28)
God Mode (x32)
Gothic III - Götterdämmerung (x32 Version: 1.00.0000)
Gothic III - Götterdämmerung 1.0.6 Patch (x32 Version: 1.0.0)
Gothic III - Götterdämmerung 1.08.9 Patch (x32 Version: 1.0.0)
Gothic III - Götterdämmerung Patch (x32 Version: 1.0.0)
Gothic III (x32 Version: 1.0.0)
HP FWUpdateEDO2 (x32 Version: 1.2.0.0)
HPDiagnosticAlert (x32 Version: 1.00.0000)
Impulse (x32 Version: 1.0)
Impulse (x32)
Intel(R) Management Engine Components (x32 Version: 7.1.21.1124)
Intel(R) Network Connections 16.6.126.0 (Version: 16.6.126.0)
Intel(R) Rapid Storage Technology enterprise (x32 Version: 3.0.0.3011)
Intel® Watchdog Timer Driver (Intel® WDT) (x32)
Java 7 Update 45 (64-bit) (Version: 7.0.450)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
JDownloader 0.9 (x32 Version: 0.9)
LEGO® Batman™ 2: DC Super Heroes (x32 Version: 1.0.0.0)
LEGO® Der Herr der Ringe™ (x32 Version: 1.0.0.0)
LEGO® Harry Potter™: Die Jahre 1-4 (x32 Version: 1.0.0.0)
LEGO® Harry Potter™: Die Jahre 5-7 (x32 Version: 1.0.0.0)
LEGO® Indiana Jones™ (x32 Version: 1.00.0000)
LEGO® Star Wars™: Die Komplette Saga (x32 Version: 1.00.0000)
LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000)
Leisure Suit Larry - Box Office Bust (x32 Version: 1.00.0000)
Live! Cam Connect HD VF0750 Driver (1.01.01.00)
Logitech GamePanel Software 3.06.109 (Version: 3.06.109)
Lost Planet 3 (x32)
LOST PLANET COLONIES (x32 Version: 1.02.129)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mass Effect (x32 Version: 1.00)
Mass Effect 2 (x32 Version: 1.02)
Mass Effect™ 3 (x32 Version: 1.05.0.0)
MemTweakIt 1.01.4 (Version: 1.01.4)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office Excel Viewer (x32 Version: 12.0.6612.1000)
Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000)
Microsoft Security Client (Version: 4.4.0304.0)
Microsoft Security Essentials (Version: 4.4.304.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0)
Might and Magic: Clash of Heroes (x32)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero 12 (x32 Version: 12.0.01600)
Nero 12 Content Pack (x32 Version: 12.0.00100)
Nero Abstract Themes (x32 Version: 12.0.11500)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0)
Nero BackItUp (x32 Version: 12.5.7000)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000)
Nero Blu-ray Player (x32 Version: 12.0.20030)
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.9000)
Nero Burning ROM (x32 Version: 12.5.6000)
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000)
Nero Cliparts (x32 Version: 12.0.11500)
Nero ControlCenter (x32 Version: 11.0.15600)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000)
Nero Core Components (x32 Version: 11.0.21800)
Nero Disc Menus 1 (x32 Version: 12.0.11500)
Nero Disc Menus 2 (x32 Version: 12.0.11500)
Nero Disc Menus 3 (x32 Version: 12.0.11500)
Nero Disc Menus Basic (x32 Version: 12.0.11500)
Nero Effects Basic (x32 Version: 12.0.11500)
Nero Express (x32 Version: 12.5.7000)
Nero Express Help (CHM) (x32 Version: 12.0.13000)
Nero Family and Events Themes (x32 Version: 12.0.11500)
Nero Football (Soccer) Themes (x32 Version: 12.0.11500)
Nero Holiday and Sports Themes (x32 Version: 12.0.11500)
Nero Image Samples (x32 Version: 12.0.11500)
Nero Kwik Media (x32 Version: 1.18.20100)
Nero Kwik Media Help (CHM) (x32 Version: 12.0.12000)
Nero Kwik Themes Basic (x32 Version: 12.0.11500)
Nero PiP Effects 1 (x32 Version: 12.0.11500)
Nero PiP Effects Basic (x32 Version: 12.0.11500)
Nero Platinum Effects 12 (x32 Version: 12.0.11500)
Nero Prerequisite Installer 2.0 (x32 Version: 12.0.01000)
Nero Recode (x32 Version: 12.5.6000)
Nero Recode Help (CHM) (x32 Version: 12.0.12000)
Nero RescueAgent (x32 Version: 12.0.11000)
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000)
Nero Retro Film Themes (x32 Version: 12.0.11700)
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0)
Nero Update (x32 Version: 11.0.11800.31.0)
Nero Video (x32 Version: 12.5.4000)
Nero Video Help (CHM) (x32 Version: 12.0.12000)
Nero Video Samples (x32 Version: 12.0.11500)
Nero Video Transitions 1 (x32 Version: 12.0.11500)
neroxml (x32 Version: 1.0.0)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA Display Control Panel (Version: 6.14.12.5919)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.140.952)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 9.3.21 (Version: 9.3.21)
NVIDIA Update Components (Version: 9.3.21)
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9)
Oblivion - Horse Armor Pack (x32 Version: 1.00.0000)
Oblivion - Knights of the Nine (x32 Version: 1.00.0000)
Oblivion - Mehrunes Razor (x32 Version: 1.00.0000)
Oblivion - Orrery (x32 Version: 1.00.0000)
Oblivion - Spell Tomes (x32 Version: 1.00.0000)
Oblivion - Thieves Den (x32 Version: 1.00.0000)
Oblivion - Vile Lair (x32 Version: 1.00.0000)
Oblivion - Wizard's Tower (x32 Version: 1.00.0000)
Oblivion (x32 Version: 1.00.0000)
OpenAL (x32)
Opera 12.16 (x32 Version: 12.16.1860)
Origin (x32 Version: 9.1.12.73)
Outlast (x32)
PlanetSide 2 (x32)
Prerequisite installer (x32 Version: 12.0.0003)
PunkBuster Services (x32 Version: 0.986)
Questpaket 4 Update 1 Deinstallation (x32 Version: 4.1.0.0)
RAGE (x32)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6570)
Reus (x32)
ROG GameFirst v4.53 (Version: 4.53)
Sacred 2 - Elite (x32 Version: 1.00.0000)
Sacred 2 (x32 Version: 2.0.2.0)
SHIELD Streaming (Version: 1.6.53)
Skype™ 6.10 (x32 Version: 6.10.104)
Smart Technology Programming Software 7.0.23.0 (Version: 7.0.23.0)
Sound Blaster X-Fi MB 2 (x32 Version: 1.0)
StarCraft II (x32 Version: 2.0.10.26585)
Steam (x32 Version: 1.0.0.0)
Stronghold Kingdoms (x32)
swMSM (x32 Version: 12.0.0.1)
Team Fortress 2 (x32)
TeamSpeak 3 Client (Version: 3.0.13.1)
The Binding of Isaac (x32)
The Elder Scrolls V: Skyrim (x32)
The Lord of the Rings Online™ (x32)
The Lord of the Rings Online™ v03.08.00.8029 (x32 Version: 03.08.00.8029)
The Lord of the Rings: War in the North (x32)
The Witcher 2 (x32 Version: 1.00.0000)
The Witcher Enhanced Edition (x32 Version: 1.00.0000)
TP-LINK Wireless Client Utility (x32 Version: 7.0)
Two Worlds II (x32 Version: 1.3.0.0)
Two Worlds II Castle Defense (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Uplay (x32 Version: 2.0)
VLC media player 2.1.1 (Version: 2.1.1)
WAR OF THE RING™ DER RINGKRIEG™ (x32 Version: 1.0)
Warframe (x32)
Webcam Virtual Driver (x32 Version: 1.00.08.0907)
Welcome App (Start-up experience) (x32 Version: 12.0.15000)
Whorecraft Episode 3 1.21 (x32 Version: 1.21)
Whorecraft v.1.0r (x32 Version: v.1.0r)
Winamp (x32 Version: 5.63 )
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
World of Battles (x32 Version: 1.2.6)
X3 Terran Conflict v3.2 (x32)
X3TC Bonuspaket 4.1.01 (x32 Version: 4.1.01)
X-Fi Home Theater HD (x32 Version: 1.0)
==================== Restore Points =========================
25-11-2013 00:41:30 Geplanter Prüfpunkt
25-11-2013 22:45:52 Installed SpyHunter
25-11-2013 23:45:34 Removed SpyHunter
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {04EE0DC8-A8E2-4FFD-95EF-AD9FCE5411C9} - \Windows Update Check - 0x090301DC No Task File
Task: {12A32E87-750D-4A40-B638-82C7E04A175A} - System32\Tasks\{4C2C797B-08DB-41A7-B22E-9B1EDD9CD015} => E:\Program Files (x86)\The Witcher 2\Launcher.exe [2013-05-06] (CD Projekt RED)
Task: {5853DD59-A481-462F-97DB-E93D5F894C08} - System32\Tasks\ASUS\RC TweakIt Server Execute => C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe [2010-11-23] ()
Task: {5CD95F13-B4DD-4E76-B4AE-5433BD5A6DE6} - System32\Tasks\ASUS\ASUS DigiPowerControl Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe [2011-09-19] (ASUSTeK Computer Inc.)
Task: {74BCD7E7-6D06-4BFD-812A-3CA65C565A29} - System32\Tasks\{B90077BB-4B3B-4617-9EE8-75137C8DB5FD} => E:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe
Task: {90812122-7D08-4BEC-9FBF-9620C3E4C0DB} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.)
Task: {96E5F05B-EED5-4BAE-893C-30E1EFDB2D30} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {98AA9DAA-157B-4628-A9B2-22AB3DDD1CF0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-20] (Adobe Systems Incorporated)
Task: {B46F3BF0-DBFF-44D3-9F8E-3A138A1810B8} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] ()
Task: {C02F490E-A1FB-41C1-96B3-B2AD139B8068} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {DA689BE1-5555-4805-96E4-44D4F50AB993} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3479730217-1746461300-4275407343-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {E29E0084-D112-4C44-8E6A-621449245C2B} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3479730217-1746461300-4275407343-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {FDC56009-EF20-424C-859E-528DF350DECA} - System32\Tasks\{3728183D-1740-4155-9107-AE0CBCA3CF4E} => E:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2012-12-24 13:52 - 2013-11-25 23:54 - 00027648 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\PEbiosinterface32.dll
2012-12-24 13:52 - 2010-06-29 03:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.18\ATKEX.dll
2012-12-24 14:00 - 2010-06-24 21:50 - 00094208 _____ () C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\IccLibDll.dll
2013-03-12 17:10 - 2013-11-06 22:48 - 00691200 _____ () E:\Program Files (x86)\Steam\SDL2.dll
2012-12-25 21:55 - 2013-11-22 00:43 - 01135016 _____ () E:\Program Files (x86)\Steam\bin\chromehtml.DLL
2012-12-25 21:55 - 2013-11-06 22:48 - 20625832 _____ () E:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-25 21:55 - 2013-06-15 00:49 - 01100800 _____ () E:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-25 21:55 - 2013-06-15 00:49 - 00124416 _____ () E:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-25 21:55 - 2013-06-15 00:49 - 00192000 _____ () E:\Program Files (x86)\Steam\bin\avformat-53.dll
2012-12-24 13:41 - 2011-07-21 19:04 - 00074240 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2012-12-24 13:41 - 2011-07-21 19:02 - 00207872 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2013-05-15 22:35 - 2011-08-24 03:39 - 00081920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Common\koan\_ctypes.pyd
2013-05-15 22:35 - 2011-08-24 03:39 - 00053248 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Common\Koan\_socket.pyd
2013-05-15 22:35 - 2011-08-24 03:39 - 00655360 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Common\Koan\_ssl.pyd
2013-05-05 04:08 - 2011-08-04 11:19 - 00002560 _____ () C:\Windows\system32\CTXFIRES.DLL
2013-08-16 08:49 - 2013-08-16 08:49 - 00019968 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\PSIClient\7ba7642e68c2ded50d7c08b00073b11e\PSIClient.ni.dll
2012-12-24 13:57 - 2011-03-04 09:33 - 00053248 ____N () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll
2012-12-24 13:57 - 2011-09-08 15:23 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll
2012-12-24 13:53 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll
2012-12-24 13:53 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll
2012-12-24 13:54 - 2011-09-26 19:36 - 00869376 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll
2012-12-24 13:54 - 2011-10-13 15:57 - 01077248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll
2012-12-24 13:53 - 2011-09-20 18:11 - 00985600 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll
2012-12-24 13:56 - 2011-08-23 16:19 - 01294848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll
2012-12-24 13:56 - 2011-09-29 11:36 - 01046016 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll
2012-12-24 13:53 - 2011-12-28 11:18 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll
2012-12-24 13:53 - 2011-09-26 18:37 - 01616384 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll
2012-12-24 13:53 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll
2012-12-24 13:53 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll
2012-12-24 13:53 - 2011-10-14 20:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll
2012-12-24 13:52 - 2010-08-23 03:17 - 00662016 ____R () C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMLib.dll
2012-12-24 13:53 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll
2012-12-24 13:53 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\06058659.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\07651968.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\34159608.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\06058659.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\07651968.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\34159608.sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary 4355406drv.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary 80078576.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/25/2013 11:55:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/25/2013 11:45:56 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary 4355406drv.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/25/2013 09:48:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary 39743217.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary 4816517drv.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/25/2013 00:13:41 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cleanautorun.exe, Version: 1.2.0.0, Zeitstempel: 0x4cb44279
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xdd8
Startzeit der fehlerhaften Anwendung: 0xcleanautorun.exe0
Pfad der fehlerhaften Anwendung: cleanautorun.exe1
Pfad des fehlerhaften Moduls: cleanautorun.exe2
Berichtskennung: cleanautorun.exe3
Error: (11/24/2013 11:46:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/24/2013 11:37:28 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (11/26/2013 00:58:05 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/26/2013 00:58:05 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/26/2013 00:48:34 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/25/2013 11:55:27 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (11/25/2013 11:55:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.
Error: (11/25/2013 11:54:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Microsoft Antimalware Service" wurde mit folgendem Fehler beendet:
%%-2147024894
Error: (11/25/2013 11:34:12 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/25/2013 11:34:12 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/25/2013 09:49:30 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (11/25/2013 09:48:45 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.
Microsoft Office Sessions:
=========================
Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary 4355406drv.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/26/2013 00:45:37 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary 80078576.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/25/2013 11:55:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/25/2013 11:45:56 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary 4355406drv.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/25/2013 09:48:59 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary 39743217.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/25/2013 01:41:34 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary 4816517drv.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/25/2013 00:13:41 AM) (Source: Application Error)(User: )
Description: cleanautorun.exe1.2.0.04cb44279unknown0.0.0.000000000c000000500000000dd801cee96acfb4947fH:\Programme\Kaspersky Tools\cleanautorun.exeunknown0e666ddb-555e-11e3-a4f7-0015834b229b
Error: (11/24/2013 11:46:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/24/2013 11:37:28 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2013-02-24 23:52:30.156
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-24 23:51:46.854
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-12-24 20:37:15.630
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-24 20:37:15.619
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-24 20:37:15.301
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-24 20:37:15.290
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8133.22 MB
Available physical RAM: 5050.26 MB
Total Pagefile: 16264.63 MB
Available Pagefile: 12725.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:537.82 GB) (Free:450.86 GB) NTFS
Drive d: (Sicherung) (Fixed) (Total:305.66 GB) (Free:0 GB) NTFS
Drive e: (Spiele) (Fixed) (Total:1019.53 GB) (Free:419.31 GB) NTFS
Drive h: (My Book) (Fixed) (Total:931.51 GB) (Free:472.04 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 4C58D3CF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 4C58D3FF)
Partition 1: (Not Active) - (Size=538 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=306 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1020 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 932 GB) (Disk ID: 44FDFE06)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Geändert von BlacknFish (26.11.2013 um 01:57 Uhr) |
|
26.11.2013, 01:49
| #2 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.aCode:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2013-11-26 01:39:44 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP1T0L0-1 ST32000641AS rev.CC13 1863,02GB Running: gmer_2.1.19163.exe; Driver: C:\Users\BL@CKN~1\AppData\Local\Temp\pglcqkob.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff800039f7000 86 bytes [00, 6D, C8, 13, 80, FA, FF, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 616 fffff800039f7058 64 bytes [40, 10, 1C, 18, 80, FA, FF, ...] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe[2076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe[2076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 00000000700d1a22 2 bytes [0D, 70] .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 00000000700d1ad0 2 bytes [0D, 70] .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 00000000700d1b08 2 bytes [0D, 70] .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 00000000700d1bba 2 bytes [0D, 70] .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 00000000700d1bda 2 bytes [0D, 70] .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe[4152] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe[4152] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe[4500] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000076698769 5 bytes JMP 0000000173e71000 .text C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe[4500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe[4500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe[4516] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000076698769 5 bytes JMP 0000000173e71000 .text C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe[4516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe[4516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\Windows Media Player\wmplayer.exe[5400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\Windows Media Player\wmplayer.exe[5400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe[1736] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe[1736] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[6808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[6808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[2892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000762e1465 2 bytes [2E, 76] .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[2892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000762e14bb 2 bytes [2E, 76] .text ... * 2 ---- Registry - GMER 2.1 ---- Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware entfernen.lnk 1 Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk 1 Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk 1 Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk 1 Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKNNZAGD\Opera_1212_int_Setup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Temp\Temp1_SmartPackSetup1.22.0.exe.zip\SmartPackSetup1.22.0.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Temp\Temp1_AZT_HTHD_V1.20_SWPACK_10AUG11.zip\Audio\Setup\setup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Opera\Opera\temporary_downloads\install_flash_player.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Opera\Opera\temporary_downloads\TWEE_EAX_HotFix_2.3.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Opera\Opera\temporary_downloads\bioshock_v1.1_worldwide_retail.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Opera\Opera\temporary_downloads\bioshock_v1.1_german_and_english (1).exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\setup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\setup (2).exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Opera\Opera\temporary_downloads\gfwlivesetup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Cherry Dolls (PC) (2009)\setup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KGFP7KBX\SetupAnyDVD7150.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Whorecraft The Chronicles of Alexstrasza.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Whorecraft The Adventures of Daemia.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKNNZAGD\Second_Life_3-4-5-270263_Setup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Mass.Effect.2.DLC.Pack-iND\DLC\ME2_ReconHood.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Mass.Effect.2.DLC.Pack-iND\DLC\ME2_Incisor.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Mass.Effect.2.DLC.Pack-iND\DLC\ME2_Sentry.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Mass.Effect.2.DLC.Pack-iND\DLC\ME2_Terminus.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Mass.Effect.2.DLC.Pack-iND\DLC\ME2_UmbraVisor.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKNNZAGD\TeamSpeak3-Client-win64-3.0.10.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FK8PO38Y\SkypeSetupFull.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Adventures_of_a_gardener_PORN.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\WCv1.6.1r.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Opera\Opera\temporary_downloads\320.49-desktop-win8-win7-winvista-64bit-international-whql.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\XLive\Updates\4e4d0fa1\Content\Setup.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Temp\ubi145E.tmp.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Ep4v.1.0r.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\Ep3v1.21.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q131XV3G\jre-7u45-windows-i586.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\Desktop\UDKInstall-EP2v1.4.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R5COT43T\mbam-setup-1.75.0.1300.exe 1 Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Bl@ck\xb4n\x00b4F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R5COT43T\SpyHunter-Installer.exe 1 ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk1\DR1 unknown MBR code ---- EOF - GMER 2.1 ---- |
|
01.12.2013, 09:45
| #3 | |
| /// the machine /// TB-Ausbilder    | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
02.12.2013, 20:39
| #4 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Kleines Update: leider kommt beim Start von Combofix folgende Meldung  Soll ich diese ignorieren? Ich kann nämlich leider auf keinem Weg auf MSE zugreifen. Oder soll ich es deinstallieren? Zusätzlich noch ein kleines Update von diesem Autorun:  |
|
03.12.2013, 12:05
| #5 |
| /// the machine /// TB-Ausbilder | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a MSE öffnen, dann kannst es deaktivieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.12.2013, 19:03
| #6 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Ich kann MSE nicht öffnen, deswegen ist doch dieser Thread hier unter anderem überhaupt offen. Der Fehle der nach dem autorun auftaucht, bezieht sich auf MSE und kommt auch wenn ich es manuell starten will. Ich habe es auch als Administrator versucht, keine Chance. |
|
04.12.2013, 11:38
| #7 |
| /// the machine /// TB-Ausbilder | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Dann einfach bei Combofix auf Ok klicken und laufen lassen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.12.2013, 21:36
| #8 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a ComboFix-Log hier: Code:
ATTFilter ComboFix 13-12-01.01 - Bl@ck´n´F!sh 04.12.2013 21:10:32.1.12 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.8133.5665 [GMT 1:00]
ausgeführt von:: c:\users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Bl@ck´n´F!sh\AppData\Roaming\.#
c:\windows\SysWow64\FlashPlayerApp.exe
c:\windows\SysWow64\tmp16CA.tmp
c:\windows\SysWow64\tmp16CB.tmp
.
Infizierte Kopie von c:\windows\explorer.exe wurde gefunden und desinfiziert
Kopie von - c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe wurde wiederhergestellt
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-11-04 bis 2013-12-04 ))))))))))))))))))))))))))))))
.
.
2013-12-04 20:18 . 2013-12-04 20:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-04 20:18 . 2013-12-04 20:20 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-11-26 00:19 . 2013-11-26 00:19 -------- d-----w- C:\FRST
2013-11-25 22:46 . 2013-11-25 22:46 -------- d-----w- c:\program files\Enigma Software Group
2013-11-25 22:45 . 2013-11-25 23:46 -------- d-----w- c:\windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 22:38 . 2013-11-25 22:38 -------- d-----w- c:\users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 22:38 . 2013-11-25 22:38 -------- d-----w- c:\programdata\Malwarebytes
2013-11-25 22:38 . 2013-11-25 22:38 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-11-25 22:38 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-11-24 22:57 . 2013-11-24 22:57 -------- d-----w- c:\programdata\Kaspersky Lab
2013-11-24 16:25 . 2013-11-25 20:47 -------- d-sh--w- c:\programdata\h65guhb0
2013-11-24 16:25 . 2013-11-24 16:25 -------- d-sh--w- c:\users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-24 01:59 . 2013-11-24 01:59 -------- d-----w- c:\users\Bl@ck´n´F!sh\AppData\Local\ElevatedDiagnostics
2013-11-24 00:06 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BF7482C1-B56F-462E-8865-778AAFF5B526}\mpengine.dll
2013-11-22 19:38 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-11-20 19:41 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-11-20 19:22 . 2013-11-20 19:22 -------- d-----w- C:\Crash
2013-11-20 18:13 . 2013-11-20 18:13 -------- d-----w- c:\users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-13 22:03 . 2013-10-05 20:25 1474048 ----a-w- c:\windows\system32\crypt32.dll
2013-11-11 07:59 . 2013-11-11 07:59 590112 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-11-10 18:52 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-10 18:52 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-10 18:52 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-10 18:52 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-10 18:52 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-10 18:52 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-10 18:52 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-10 18:51 . 2013-11-10 18:51 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-11-10 18:51 . 2013-11-10 18:51 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-11-10 18:51 . 2013-11-10 18:51 -------- d-----w- c:\program files (x86)\Java
2013-11-10 18:46 . 2013-11-10 18:51 -------- d-----w- c:\programdata\Oracle
2013-11-10 18:46 . 2013-11-10 18:46 312744 ----a-w- c:\windows\system32\javaws.exe
2013-11-10 18:46 . 2013-11-10 18:46 189352 ----a-w- c:\windows\system32\javaw.exe
2013-11-10 18:46 . 2013-11-10 18:46 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-11-10 18:46 . 2013-11-10 18:46 189352 ----a-w- c:\windows\system32\java.exe
2013-11-10 18:46 . 2013-11-10 18:46 -------- d-----w- c:\program files\Java
2013-11-07 00:21 . 2013-10-18 18:38 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3B976580-3BCF-4608-B079-E8CCB2B8EAAF}\gapaengine.dll
2013-11-05 19:00 . 2013-11-05 19:01 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 19:31 . 2012-12-24 14:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-19 10:21 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-11-14 11:56 . 2013-08-14 09:00 18293608 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-11-14 11:56 . 2013-08-14 09:00 15218504 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-11-14 11:56 . 2013-08-14 09:00 3069608 ----a-w- c:\windows\system32\nvapi64.dll
2013-11-14 11:56 . 2013-08-14 09:00 2697248 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-11-14 02:01 . 2012-12-24 11:41 82896128 ----a-w- c:\windows\system32\MRT.exe
2013-11-11 15:02 . 2013-08-14 09:01 6674208 ----a-w- c:\windows\system32\nvcpl.dll
2013-11-11 15:02 . 2013-08-14 09:01 3490080 ----a-w- c:\windows\system32\nvsvc64.dll
2013-11-11 15:01 . 2013-08-14 09:01 922912 ----a-w- c:\windows\system32\nvvsvc.exe
2013-11-11 15:01 . 2013-08-14 09:01 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-11-11 15:01 . 2013-08-14 09:01 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2013-11-11 15:01 . 2013-08-14 09:01 219424 ----a-w- c:\windows\system32\nvmctray.dll
2013-11-08 20:47 . 2013-11-04 16:10 1064224 ----a-w- c:\windows\system32\nvspcap64.dll
2013-11-08 20:47 . 2013-11-04 16:10 955168 ----a-w- c:\windows\SysWow64\nvspcap.dll
2013-10-26 20:01 . 2013-08-08 13:11 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-10-26 20:01 . 2013-08-08 12:41 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-10-25 19:27 . 2013-08-08 12:41 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-10-23 10:30 . 2013-11-04 16:46 1884448 ----a-w- c:\windows\system32\nvdispco6433165.dll
2013-10-23 10:30 . 2013-11-04 16:46 1511712 ----a-w- c:\windows\system32\nvdispgenco6433165.dll
2013-10-18 18:38 . 2013-03-12 17:24 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-09-27 23:01 . 2013-11-04 16:08 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2013-09-27 23:01 . 2013-11-04 16:08 28960 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2013-09-27 23:01 . 2013-07-30 18:41 29984 ----a-w- c:\windows\system32\nvaudcap64v.dll
2013-09-27 08:53 . 2013-09-27 08:53 248240 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2013-09-27 08:53 . 2012-08-30 21:03 134944 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2013-09-15 12:17 . 2013-08-08 12:41 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-09-12 08:58 . 2013-09-22 06:23 1884448 ----a-w- c:\windows\system32\nvdispco6432723.dll
2013-09-12 08:58 . 2013-09-22 06:23 1511712 ----a-w- c:\windows\system32\nvdispgenco6432723.dll
2013-09-08 02:30 . 2013-10-11 16:46 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:27 . 2013-10-11 16:46 327168 ----a-w- c:\windows\system32\mswsock.dll
2013-09-08 02:03 . 2013-10-11 16:46 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-10-21 20580000]
"Steam"="e:\program files (x86)\Steam\steam.exe" [2013-12-04 1823656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe" [2011-12-02 286720]
"THX Audio Control Panel"="c:\program files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe" [2010-06-11 1349632]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2013-09-03 40312]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"VolPanel"="c:\program files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" [2010-02-18 241789]
"PowerDVD12DMREngine"="c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe" [2013-02-25 505096]
"PowerDVD12Agent"="c:\program files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe" [2013-02-25 373784]
"FastAccess Web Alert"="c:\program files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FATRY.exe" [2011-07-11 2033648]
"V0750Mon.exe"="c:\windows\V0750Mon.exe" [2011-06-06 28672]
"CTxfiHlp"="CTXFIHLP.EXE" [2011-08-04 25088]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 lvpopf64;Logitech POP Suppression Filter;c:\windows\system32\DRIVERS\lvpopf64.sys;c:\windows\SYSNATIVE\DRIVERS\lvpopf64.sys [x]
R3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys;c:\windows\SYSNATIVE\drivers\LVUSBS64.sys [x]
R3 LVUVC64;Logitech QuickCam Fusion(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 HFGService;Handsfree Headset Service;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 AiChargerPlus;ASUS Charger Plus Driver;c:\windows\system32\DRIVERS\AiChargerPlus.sys;c:\windows\SYSNATIVE\DRIVERS\AiChargerPlus.sys [x]
S0 asahci64;asahci64;c:\windows\system32\DRIVERS\asahci64.sys;c:\windows\SYSNATIVE\DRIVERS\asahci64.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S2 {73526619-C24F-470B-9BED-53D455FBB5C6};Power Control [2013/05/15 23:37];c:\program files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl;c:\program files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [x]
S2 AsusFanControlService;AsusFanControlService;c:\program files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe;c:\program files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe [x]
S2 CLHNServiceForPowerDVD12;CLHNServiceForPowerDVD12;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [x]
S2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [x]
S2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 ntk_PowerDVD12;ntk_PowerDVD12;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys;SysWow64\drivers\ASUSFILTER.sys [x]
S3 BthAudioHF;BthAudioHF-Dienst;c:\windows\system32\DRIVERS\BthAudioHF.sys;c:\windows\SYSNATIVE\DRIVERS\BthAudioHF.sys [x]
S3 BthAvrcp;Bluetooth-AVRCP-Profil;c:\windows\system32\DRIVERS\BthAvrcp.sys;c:\windows\SYSNATIVE\DRIVERS\BthAvrcp.sys [x]
S3 csr_a2dp;Bluetooth-AV-Profil;c:\windows\system32\drivers\bthav.sys;c:\windows\SYSNATIVE\drivers\bthav.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
S3 ha20x22k;Creative 20X2 HAL Driver;c:\windows\system32\drivers\ha20x22k.sys;c:\windows\SYSNATIVE\drivers\ha20x22k.sys [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 SaiK0CD9;SaiK0CD9;c:\windows\system32\DRIVERS\SaiK0CD9.sys;c:\windows\SYSNATIVE\DRIVERS\SaiK0CD9.sys [x]
S3 SaiU0CD9;SaiU0CD9;c:\windows\system32\DRIVERS\SaiU0CD9.sys;c:\windows\SYSNATIVE\DRIVERS\SaiU0CD9.sys [x]
S3 V0750Vid;Live! Cam Connect HD VF0750 Driver;c:\windows\system32\DRIVERS\V0750Vid.sys;c:\windows\SYSNATIVE\DRIVERS\V0750Vid.sys [x]
S3 VirtCam;Creative Concurrent Video Streaming Virtual Camera Driver;c:\windows\system32\DRIVERS\VirtCam.sys;c:\windows\SYSNATIVE\DRIVERS\VirtCam.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-24 19:31]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-02-10 6463592]
"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2009-10-15 17920]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-08-03 415816]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2010-08-03 2412616]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-08-03 4725320]
"ProfilerU"="c:\program files\SmartTechnology\Software\ProfilerU.exe" [2012-10-15 454144]
"SaiMfd"="c:\program files\SmartTechnology\Software\SaiMfd.exe" [2012-10-15 158208]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-08 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-11-08 1064224]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = fritz.box;<local>
IE: Free YouTube Download - c:\users\Bl@ck´n´F!sh\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\Bl@ck´n´F!sh\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
Trusted Zone: aeriagames.com
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Akamai NetSession Interface - c:\users\Bl@ck´n´F!sh\AppData\Local\Akamai\netsession_win.exe
c:\users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_07336915.lnk - c:\users\Bl@ck´n´F!sh\AppData\Local\Temp\_uninst_07336915.bat
c:\users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_39743217.lnk - c:\users\Bl@ck´n´F!sh\AppData\Local\Temp\_uninst_39743217.bat
SafeBoot-06058659.sys
SafeBoot-07651968.sys
SafeBoot-34159608.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-UDK-8cd56b9e-f402-46df-81d4-78eee2dfccef - c:\udk\Ep3v1.21\Binaries\UnSetup.exe
AddRemove-UDK-a4faf819-0f87-491e-adfd-7130f6f290df - c:\udk\EP4v1.0\Binaries\UnSetup.exe
AddRemove-Whorecraft v.1.0r - e:\download\Whorecraft\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{73526619-C24F-470B-9BED-53D455FBB5C6}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3479730217-1746461300-4275407343-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:ce,5e,94,2b,bb,66,8e,dc,4b,24,81,2d,e1,04,f0,1b,1a,0c,76,3e,84,be,ff,
e8,5f,2a,be,4b,70,7f,17,d7,b7,cf,2d,2a,65,15,c9,aa,73,01,a1,8f,b4,e6,e6,36,\
"??"=hex:41,e0,42,8c,cf,55,c7,95,2b,14,4d,f8,66,7b,0c,1b
.
[HKEY_USERS\S-1-5-21-3479730217-1746461300-4275407343-1000\Software\SecuROM\License information*]
"datasecu"=hex:06,70,98,47,99,02,91,2a,6f,aa,28,4e,2b,25,d8,e8,9a,b0,91,1d,c0,
ca,60,de,1f,6b,6d,79,13,7c,83,11,73,b9,90,48,22,55,a1,08,90,a9,f9,14,d9,a3,\
"rkeysecu"=hex:32,ba,2c,e8,e9,f5,97,91,73,0d,6d,f4,d6,81,80,b1
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
c:\program files (x86)\ASUS\AI Suite II\AsRoutineController.exe
c:\program files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
c:\program files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
c:\program files (x86)\ASUS\AI Suite II\AI Suite II.exe
c:\program files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-12-04 21:25:52 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-12-04 20:25
.
Vor Suchlauf: 15 Verzeichnis(se), 482.850.758.656 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 497.372.725.248 Bytes frei
.
- - End Of File - - 4D387990D7FCB0F13D8C4F94E309C30B
A36C5E4F47E84449FF07ED3517B43A31
|
|
05.12.2013, 12:27
| #9 |
| /// the machine /// TB-Ausbilder | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.12.2013, 14:31
| #10 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a MalwareBytes Log hier: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.05.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16428 Bl@ck´n´F!sh :: BLCK´N´FSH-PC [Administrator] 05.12.2013 14:04:20 mbam-log-2013-12-05 (14-04-20).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 259722 Laufzeit: 3 Minute(n), 5 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.014 - Bericht erstellt am 05/12/2013 um 14:11:44
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Bl@ck´n´F!sh - BLCK´N´FSH-PC
# Gestartet von : C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Bl@ck´n´F!sh\AppData\Local\vghd
Ordner Gelöscht : C:\Users\Bl@ck´n´F!sh\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Bl@ck´n´F!sh\Documents\PC Speed Maximizer
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ASUS_ROG_THEME
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
*************************
AdwCleaner[R0].txt - [2325 octets] - [05/12/2013 14:09:36]
AdwCleaner[S0].txt - [2244 octets] - [05/12/2013 14:11:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2304 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x64
Ran by Bl@ckïnïF!sh on 05.12.2013 at 14:16:15,88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3479730217-1746461300-4275407343-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskToolbarNRO_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskToolbarNRO_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskToolbarNRO_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskToolbarNRO_RASMANCS
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.12.2013 at 14:19:52,20
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-12-2013
Ran by Bl@ck´n´F!sh (administrator) on BLCK´N´FSH-PC on 05-12-2013 14:25:26
Running from C:\Users\Bl@ck´n´F!sh\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe
(cFos Software GmbH) C:\Program Files\ASUS\ROG GameFirst\spd.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDWebCam.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
(Creative Technology Ltd.) C:\Windows\V0750Mon.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463592 2012-02-10] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe [415816 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2012-10-15] (Saitek)
HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2012-10-15] (Saitek)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - E:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-04] (Valve Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [286720 2011-12-02] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe [1349632 2010-06-11] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe [241789 2010-02-18] (Creative Technology Ltd)
HKLM-x32\...\Run: [PowerDVD12DMREngine] - C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-02-25] (CyberLink)
HKLM-x32\...\Run: [PowerDVD12Agent] - C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [FastAccess Web Alert] - C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FAtry.exe [2033648 2011-07-11] (Microsoft)
HKLM-x32\...\Run: [V0750Mon.exe] - C:\Windows\V0750Mon.exe [28672 2011-06-06] (Creative Technology Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25088 2011-08-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B670C0AA430CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe [948656 2012-01-20] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe [1430144 2011-10-06] (ASUSTeK Computer Inc.)
R2 cFosSpeedS; C:\Program Files\ASUS\ROG GameFirst\spd.exe [487096 2010-11-22] (cFos Software GmbH)
R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-02-25] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-02-25] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-02-25] (CyberLink)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-15] ()
==================== Drivers (Whitelisted) ====================
R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-12-24] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed.sys [1437368 2010-11-22] (cFos Software GmbH)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [23832 2011-12-02] (Intel Corporation)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-12-24] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-09-10] (Cyberlink Corp.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
R3 SaiK0CD9; C:\Windows\System32\DRIVERS\SaiK0CD9.sys [180544 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [24680 2012-10-15] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52200 2012-10-15] (Saitek)
R3 SaiU0CD9; C:\Windows\System32\DRIVERS\SaiU0CD9.sys [47168 2012-09-20] (Saitek)
R3 V0750Vid; C:\Windows\System32\DRIVERS\V0750Vid.sys [378368 2012-04-26] (Creative Technology Ltd.)
R3 VirtCam; C:\Windows\System32\DRIVERS\VirtCam.sys [188672 2011-09-07] (Creative Technology Ltd.)
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [130320 2013-02-25] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 lvpopf64; system32\DRIVERS\lvpopf64.sys [x]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-05 14:25 - 2013-12-05 14:25 - 01959766 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-12-05 14:19 - 2013-12-05 14:20 - 00001344 _____ C:\Users\Bl@ck´n´F!sh\Desktop\JRT.txt
2013-12-05 14:16 - 2013-12-05 14:16 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 14:15 - 2013-12-05 14:15 - 01034531 _____ (Thisisu) C:\Users\Bl@ck´n´F!sh\Desktop\JRT.exe
2013-12-05 14:14 - 2013-12-05 14:14 - 00002392 _____ C:\Users\Bl@ck´n´F!sh\Desktop\AdwCleaner[S0].txt
2013-12-05 14:09 - 2013-12-05 14:11 - 00000000 ____D C:\AdwCleaner
2013-12-05 14:08 - 2013-12-05 14:08 - 01110034 _____ C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bl@ck´n´F!sh\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-05 14:02 - 2013-12-05 14:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 14:02 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 21:25 - 2013-12-04 21:25 - 00028942 _____ C:\ComboFix.txt
2013-12-04 21:07 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-04 21:07 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-04 21:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-04 21:06 - 2013-12-04 21:26 - 00000000 ____D C:\ComboFix
2013-12-02 20:32 - 2013-12-04 21:25 - 00000000 ____D C:\Qoobox
2013-12-02 20:32 - 2013-12-04 21:24 - 00000000 ____D C:\Windows\erdnt
2013-12-02 20:30 - 2013-12-02 20:30 - 05151572 ____R (Swearware) C:\Users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
2013-11-26 01:39 - 2013-11-26 01:39 - 00021487 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer.txt
2013-11-26 01:33 - 2013-11-26 01:33 - 00377856 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer_2.1.19163.exe
2013-11-26 01:21 - 2013-11-26 01:22 - 00034439 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Addition.txt
2013-11-26 01:19 - 2013-12-05 14:25 - 00015067 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-11-26 01:19 - 2013-11-26 01:19 - 00000000 ____D C:\FRST
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:45 - 2013-11-26 00:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-25 21:47 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-20 20:41 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:33 - 2013-11-20 20:41 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 17:34 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-20 17:34 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-13 23:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 23:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 23:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 23:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 23:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 23:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 23:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 23:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 23:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 23:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 23:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 23:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 23:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:52 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:46 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
==================== One Month Modified Files and Folders =======
2013-12-05 14:25 - 2013-12-05 14:25 - 01959766 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-12-05 14:25 - 2013-11-26 01:19 - 00015067 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-12-05 14:20 - 2013-12-05 14:19 - 00001344 _____ C:\Users\Bl@ck´n´F!sh\Desktop\JRT.txt
2013-12-05 14:20 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-05 14:20 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-05 14:16 - 2013-12-05 14:16 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 14:15 - 2013-12-05 14:15 - 01034531 _____ (Thisisu) C:\Users\Bl@ck´n´F!sh\Desktop\JRT.exe
2013-12-05 14:15 - 2009-07-14 05:51 - 00188281 _____ C:\Windows\setupact.log
2013-12-05 14:14 - 2013-12-05 14:14 - 00002392 _____ C:\Users\Bl@ck´n´F!sh\Desktop\AdwCleaner[S0].txt
2013-12-05 14:14 - 2013-04-03 20:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Skype
2013-12-05 14:13 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-05 14:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-05 14:12 - 2012-12-24 11:51 - 01787190 _____ C:\Windows\WindowsUpdate.log
2013-12-05 14:11 - 2013-12-05 14:09 - 00000000 ____D C:\AdwCleaner
2013-12-05 14:08 - 2013-12-05 14:08 - 01110034 _____ C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bl@ck´n´F!sh\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-05 14:02 - 2013-12-05 14:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 21:33 - 2012-12-24 15:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-04 21:26 - 2013-12-04 21:06 - 00000000 ____D C:\ComboFix
2013-12-04 21:25 - 2013-12-04 21:25 - 00028942 _____ C:\ComboFix.txt
2013-12-04 21:25 - 2013-12-02 20:32 - 00000000 ____D C:\Qoobox
2013-12-04 21:25 - 2012-12-24 11:51 - 00000000 ___RD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 21:25 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-04 21:24 - 2013-12-02 20:32 - 00000000 ____D C:\Windows\erdnt
2013-12-04 21:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-04 21:20 - 2010-11-21 04:47 - 00158196 _____ C:\Windows\PFRO.log
2013-12-03 19:00 - 2011-04-12 08:43 - 00708744 _____ C:\Windows\system32\perfh007.dat
2013-12-03 19:00 - 2011-04-12 08:43 - 00153728 _____ C:\Windows\system32\perfc007.dat
2013-12-03 19:00 - 2009-07-14 06:13 - 01646980 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-02 20:30 - 2013-12-02 20:30 - 05151572 ____R (Swearware) C:\Users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
2013-11-26 01:39 - 2013-11-26 01:39 - 00021487 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer.txt
2013-11-26 01:33 - 2013-11-26 01:33 - 00377856 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer_2.1.19163.exe
2013-11-26 01:22 - 2013-11-26 01:21 - 00034439 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Addition.txt
2013-11-26 01:19 - 2013-11-26 01:19 - 00000000 ____D C:\FRST
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-26 01:17 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh
2013-11-26 00:47 - 2013-04-04 12:34 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-26 00:46 - 2013-11-25 23:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-25 23:23 - 2012-12-27 00:44 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\vlc
2013-11-25 21:47 - 2013-11-24 17:25 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-25 00:13 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\VirtualStore
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 23:55 - 2012-12-24 13:25 - 00001917 _____ C:\Windows\epplauncher.mif
2013-11-24 23:34 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-24 02:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-24 01:12 - 2013-02-14 16:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Programme
2013-11-24 01:07 - 2013-09-25 23:03 - 00000000 ____D C:\Windows\pss
2013-11-21 16:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ____D C:\ProgramData\Skype
2013-11-21 15:10 - 2012-12-24 11:51 - 00001425 _____ C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-21 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-20 22:18 - 2013-04-02 22:25 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Warframe
2013-11-20 20:41 - 2013-11-20 20:33 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:31 - 2012-12-24 16:03 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Adobe
2013-11-20 20:31 - 2012-12-24 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 20:31 - 2012-12-24 15:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-20 20:25 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-20 20:23 - 2013-04-03 16:56 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Turbine
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 19:08 - 2012-12-24 14:44 - 00860600 _____ C:\Windows\DirectX.log
2013-11-20 17:38 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-16 17:54 - 2012-12-24 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele
2013-11-16 17:53 - 2012-12-25 22:15 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-16 17:53 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-16 17:48 - 2012-12-24 13:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:40 - 2013-10-20 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele (durch)
2013-11-15 23:26 - 2013-05-13 17:24 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\wc
2013-11-14 12:56 - 2013-11-20 17:34 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-20 17:34 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-14 03:03 - 2013-07-16 21:29 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 03:01 - 2012-12-24 12:41 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 00:43 - 2012-12-24 15:58 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-11 16:02 - 2013-08-14 10:01 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2013-08-14 10:01 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2013-08-14 10:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:51 - 2013-11-10 19:46 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
2013-11-08 21:47 - 2013-11-04 17:10 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-08 21:47 - 2013-11-04 17:10 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-06 01:04 - 2013-01-04 01:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\dvdcss
2013-11-05 20:02 - 2012-12-26 21:17 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\DVDVideoSoft
2013-11-05 20:01 - 2013-04-12 11:26 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
Some content of TEMP:
====================
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-12-24 12:31] - [2011-02-26 07:14] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-02 21:10
==================== End Of Log ============================
--- --- --- |
|
06.12.2013, 10:07
| #11 |
| /// the machine /// TB-Ausbilder | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.aESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.12.2013, 06:18
| #12 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Eset Log hier: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6bfae8339b426a459e2c8f094b5c3919
# engine=16178
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-08 02:33:09
# local_time=2013-12-08 03:33:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 12808487 138099839 0 0
# scanned=414928
# found=3
# cleaned=0
# scan_time=30530
sh=B208987A0A76628B9F9536517B8C778C92C435C2 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="C:\Users\Bl@ck´n´F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OHVHQBV9\firstload_com[1].htm"
sh=7316EB90E21C62FC4DDEAD95B9851E3CE9805A23 ft=1 fh=5222ab19b98ba9f5 vn="Win32/Inject.NDT trojan" ac=I fn="H:\Games\Download\Sexvilla\UsenetDevils 3D Sexvilla 2.058.002.exe"
sh=C35F0EECCF7CB3268CEA03BECE2B1936D7FE7D4C ft=0 fh=0000000000000000 vn="Java/Agent.EI trojan" ac=I fn="H:\PHILIPPDOMBROWA\Backup Set 2012-01-02 045850\Backup Files 2012-03-22 165403\Backup files 3.zip"
Security Checkup Log hier: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6bfae8339b426a459e2c8f094b5c3919
# engine=16178
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-08 02:33:09
# local_time=2013-12-08 03:33:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 12808487 138099839 0 0
# scanned=414928
# found=3
# cleaned=0
# scan_time=30530
sh=B208987A0A76628B9F9536517B8C778C92C435C2 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="C:\Users\Bl@ck´n´F!sh\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OHVHQBV9\firstload_com[1].htm"
sh=7316EB90E21C62FC4DDEAD95B9851E3CE9805A23 ft=1 fh=5222ab19b98ba9f5 vn="Win32/Inject.NDT trojan" ac=I fn="H:\Games\Download\Sexvilla\UsenetDevils 3D Sexvilla 2.058.002.exe"
sh=C35F0EECCF7CB3268CEA03BECE2B1936D7FE7D4C ft=0 fh=0000000000000000 vn="Java/Agent.EI trojan" ac=I fn="H:\PHILIPPDOMBROWA\Backup Set 2012-01-02 045850\Backup Files 2012-03-22 165403\Backup files 3.zip"
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 01
Ran by Bl@ck´n´F!sh (administrator) on BLCK´N´FSH-PC on 08-12-2013 03:52:44
Running from C:\Users\Bl@ck´n´F!sh\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe
(cFos Software GmbH) C:\Program Files\ASUS\ROG GameFirst\spd.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
(Creative Technology Ltd.) C:\Windows\V0750Mon.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDWebCam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463592 2012-02-10] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe [415816 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2012-10-15] (Saitek)
HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2012-10-15] (Saitek)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - E:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-06] (Valve Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [286720 2011-12-02] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe [1349632 2010-06-11] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe [241789 2010-02-18] (Creative Technology Ltd)
HKLM-x32\...\Run: [PowerDVD12DMREngine] - C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-02-25] (CyberLink)
HKLM-x32\...\Run: [PowerDVD12Agent] - C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [FastAccess Web Alert] - C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FAtry.exe [2033648 2011-07-11] (Microsoft)
HKLM-x32\...\Run: [V0750Mon.exe] - C:\Windows\V0750Mon.exe [28672 2011-06-06] (Creative Technology Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25088 2011-08-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B670C0AA430CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe [948656 2012-01-20] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe [1430144 2011-10-06] (ASUSTeK Computer Inc.)
R2 cFosSpeedS; C:\Program Files\ASUS\ROG GameFirst\spd.exe [487096 2010-11-22] (cFos Software GmbH)
R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-02-25] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-02-25] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-02-25] (CyberLink)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-15] ()
==================== Drivers (Whitelisted) ====================
R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-12-24] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed.sys [1437368 2010-11-22] (cFos Software GmbH)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [23832 2011-12-02] (Intel Corporation)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-12-24] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-09-10] (Cyberlink Corp.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
R3 SaiK0CD9; C:\Windows\System32\DRIVERS\SaiK0CD9.sys [180544 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [24680 2012-10-15] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52200 2012-10-15] (Saitek)
R3 SaiU0CD9; C:\Windows\System32\DRIVERS\SaiU0CD9.sys [47168 2012-09-20] (Saitek)
R3 V0750Vid; C:\Windows\System32\DRIVERS\V0750Vid.sys [378368 2012-04-26] (Creative Technology Ltd.)
R3 VirtCam; C:\Windows\System32\DRIVERS\VirtCam.sys [188672 2011-09-07] (Creative Technology Ltd.)
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [130320 2013-02-25] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 lvpopf64; system32\DRIVERS\lvpopf64.sys [x]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-08 03:52 - 2013-12-08 03:52 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\FRST-OlderVersion
2013-12-08 03:48 - 2013-12-08 03:48 - 00891184 _____ C:\Users\Bl@ck´n´F!sh\Desktop\SecurityCheck.exe
2013-12-07 18:50 - 2013-12-07 18:50 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-05 14:26 - 2013-12-05 14:26 - 00065906 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST_05_12_2013.txt
2013-12-05 14:25 - 2013-12-08 03:52 - 01927742 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-12-05 14:19 - 2013-12-05 14:20 - 00001344 _____ C:\Users\Bl@ck´n´F!sh\Desktop\JRT.txt
2013-12-05 14:16 - 2013-12-05 14:16 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 14:15 - 2013-12-05 14:15 - 01034531 _____ (Thisisu) C:\Users\Bl@ck´n´F!sh\Desktop\JRT.exe
2013-12-05 14:14 - 2013-12-05 14:14 - 00002392 _____ C:\Users\Bl@ck´n´F!sh\Desktop\AdwCleaner[S0].txt
2013-12-05 14:09 - 2013-12-05 14:11 - 00000000 ____D C:\AdwCleaner
2013-12-05 14:08 - 2013-12-05 14:08 - 01110034 _____ C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bl@ck´n´F!sh\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-05 14:02 - 2013-12-05 14:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 14:02 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 21:25 - 2013-12-04 21:25 - 00028942 _____ C:\ComboFix.txt
2013-12-04 21:07 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-04 21:07 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-04 21:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-04 21:06 - 2013-12-04 21:26 - 00000000 ____D C:\ComboFix
2013-12-02 20:32 - 2013-12-04 21:25 - 00000000 ____D C:\Qoobox
2013-12-02 20:32 - 2013-12-04 21:24 - 00000000 ____D C:\Windows\erdnt
2013-12-02 20:30 - 2013-12-02 20:30 - 05151572 ____R (Swearware) C:\Users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
2013-11-26 01:39 - 2013-11-26 01:39 - 00021487 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer.txt
2013-11-26 01:33 - 2013-11-26 01:33 - 00377856 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer_2.1.19163.exe
2013-11-26 01:21 - 2013-11-26 01:22 - 00034439 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Addition.txt
2013-11-26 01:19 - 2013-12-08 03:52 - 00015156 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-11-26 01:19 - 2013-12-08 03:52 - 00000000 ____D C:\FRST
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:45 - 2013-11-26 00:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-25 21:47 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-20 20:41 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:33 - 2013-11-20 20:41 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 17:34 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-20 17:34 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-13 23:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 23:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 23:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 23:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 23:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 23:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 23:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 23:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 23:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 23:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 23:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 23:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 23:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:52 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:46 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
==================== One Month Modified Files and Folders =======
2013-12-08 03:52 - 2013-12-08 03:52 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\FRST-OlderVersion
2013-12-08 03:52 - 2013-12-05 14:25 - 01927742 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-12-08 03:52 - 2013-11-26 01:19 - 00015156 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-12-08 03:52 - 2013-11-26 01:19 - 00000000 ____D C:\FRST
2013-12-08 03:48 - 2013-12-08 03:48 - 00891184 _____ C:\Users\Bl@ck´n´F!sh\Desktop\SecurityCheck.exe
2013-12-08 03:46 - 2013-04-03 20:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Skype
2013-12-08 03:33 - 2012-12-24 15:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-08 03:00 - 2012-12-24 11:51 - 01817142 _____ C:\Windows\WindowsUpdate.log
2013-12-07 18:53 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-07 18:53 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-07 18:52 - 2011-04-12 08:43 - 00708744 _____ C:\Windows\system32\perfh007.dat
2013-12-07 18:52 - 2011-04-12 08:43 - 00153728 _____ C:\Windows\system32\perfc007.dat
2013-12-07 18:52 - 2009-07-14 06:13 - 01646980 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-07 18:50 - 2013-12-07 18:50 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-07 18:46 - 2009-07-14 05:51 - 00188617 _____ C:\Windows\setupact.log
2013-12-07 18:45 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-07 18:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-05 14:26 - 2013-12-05 14:26 - 00065906 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST_05_12_2013.txt
2013-12-05 14:20 - 2013-12-05 14:19 - 00001344 _____ C:\Users\Bl@ck´n´F!sh\Desktop\JRT.txt
2013-12-05 14:16 - 2013-12-05 14:16 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 14:15 - 2013-12-05 14:15 - 01034531 _____ (Thisisu) C:\Users\Bl@ck´n´F!sh\Desktop\JRT.exe
2013-12-05 14:14 - 2013-12-05 14:14 - 00002392 _____ C:\Users\Bl@ck´n´F!sh\Desktop\AdwCleaner[S0].txt
2013-12-05 14:11 - 2013-12-05 14:09 - 00000000 ____D C:\AdwCleaner
2013-12-05 14:08 - 2013-12-05 14:08 - 01110034 _____ C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bl@ck´n´F!sh\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-05 14:02 - 2013-12-05 14:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 21:26 - 2013-12-04 21:06 - 00000000 ____D C:\ComboFix
2013-12-04 21:25 - 2013-12-04 21:25 - 00028942 _____ C:\ComboFix.txt
2013-12-04 21:25 - 2013-12-02 20:32 - 00000000 ____D C:\Qoobox
2013-12-04 21:25 - 2012-12-24 11:51 - 00000000 ___RD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 21:25 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-04 21:24 - 2013-12-02 20:32 - 00000000 ____D C:\Windows\erdnt
2013-12-04 21:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-04 21:20 - 2010-11-21 04:47 - 00158196 _____ C:\Windows\PFRO.log
2013-12-02 20:30 - 2013-12-02 20:30 - 05151572 ____R (Swearware) C:\Users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
2013-11-26 01:39 - 2013-11-26 01:39 - 00021487 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer.txt
2013-11-26 01:33 - 2013-11-26 01:33 - 00377856 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer_2.1.19163.exe
2013-11-26 01:22 - 2013-11-26 01:21 - 00034439 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Addition.txt
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-26 01:17 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh
2013-11-26 00:47 - 2013-04-04 12:34 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-26 00:46 - 2013-11-25 23:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-25 23:23 - 2012-12-27 00:44 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\vlc
2013-11-25 21:47 - 2013-11-24 17:25 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-25 00:13 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\VirtualStore
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 23:55 - 2012-12-24 13:25 - 00001917 _____ C:\Windows\epplauncher.mif
2013-11-24 23:34 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-24 02:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-24 01:12 - 2013-02-14 16:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Programme
2013-11-24 01:07 - 2013-09-25 23:03 - 00000000 ____D C:\Windows\pss
2013-11-21 16:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ____D C:\ProgramData\Skype
2013-11-21 15:10 - 2012-12-24 11:51 - 00001425 _____ C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-21 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-20 22:18 - 2013-04-02 22:25 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Warframe
2013-11-20 20:41 - 2013-11-20 20:33 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:31 - 2012-12-24 16:03 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Adobe
2013-11-20 20:31 - 2012-12-24 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 20:31 - 2012-12-24 15:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-20 20:25 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-20 20:23 - 2013-04-03 16:56 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Turbine
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 19:08 - 2012-12-24 14:44 - 00860600 _____ C:\Windows\DirectX.log
2013-11-20 17:38 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-16 17:54 - 2012-12-24 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele
2013-11-16 17:53 - 2012-12-25 22:15 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-16 17:53 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-16 17:48 - 2012-12-24 13:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:40 - 2013-10-20 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele (durch)
2013-11-15 23:26 - 2013-05-13 17:24 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\wc
2013-11-14 12:56 - 2013-11-20 17:34 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-20 17:34 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-14 03:03 - 2013-07-16 21:29 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 03:01 - 2012-12-24 12:41 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 00:43 - 2012-12-24 15:58 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-11 16:02 - 2013-08-14 10:01 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2013-08-14 10:01 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2013-08-14 10:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:51 - 2013-11-10 19:46 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
2013-11-08 21:47 - 2013-11-04 17:10 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-08 21:47 - 2013-11-04 17:10 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
Some content of TEMP:
====================
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-12-24 12:31] - [2011-02-26 07:14] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-02 21:10
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- leider hat sich an der Fehlermeldung beim Systemstart nichts geändert.  und MSE funktioniert immernoch nicht |
|
08.12.2013, 08:10
| #13 |
| /// the machine /// TB-Ausbilder | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Downloade dir bitte Windows Repair (All In One) von hier.
Dann bitte ein frisches FRST log und das hier: Downloade dir bitte  Farbar Service Scanner
Poste bitte den Inhalt hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.12.2013, 20:30
| #14 |
| | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a frisches FRST Log: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by Bl@ck´n´F!sh (administrator) on BLCK´N´FSH-PC on 09-12-2013 20:21:16
Running from C:\Users\Bl@ck´n´F!sh\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe
(cFos Software GmbH) C:\Program Files\ASUS\ROG GameFirst\spd.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
(Creative Technology Ltd.) C:\Windows\V0750Mon.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDWebCam.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463592 2012-02-10] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe [415816 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2412616 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2012-10-15] (Saitek)
HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2012-10-15] (Saitek)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - E:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-06] (Valve Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [286720 2011-12-02] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe [1349632 2010-06-11] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe [241789 2010-02-18] (Creative Technology Ltd)
HKLM-x32\...\Run: [PowerDVD12DMREngine] - C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-02-25] (CyberLink)
HKLM-x32\...\Run: [PowerDVD12Agent] - C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [FastAccess Web Alert] - C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FAtry.exe [2033648 2011-07-11] (Microsoft)
HKLM-x32\...\Run: [V0750Mon.exe] - C:\Windows\V0750Mon.exe [28672 2011-06-06] (Creative Technology Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25088 2011-08-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B670C0AA430CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.19\aaHMSvc.exe [948656 2012-01-20] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.10\AsusFanControlService.exe [1430144 2011-10-06] (ASUSTeK Computer Inc.)
R2 cFosSpeedS; C:\Program Files\ASUS\ROG GameFirst\spd.exe [487096 2010-11-22] (cFos Software GmbH)
R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-02-25] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-02-25] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-02-25] (CyberLink)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-15] ()
==================== Drivers (Whitelisted) ====================
R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-12-24] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed.sys [1437368 2010-11-22] (cFos Software GmbH)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [23832 2011-12-02] (Intel Corporation)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-12-24] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-09-10] (Cyberlink Corp.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
R3 SaiK0CD9; C:\Windows\System32\DRIVERS\SaiK0CD9.sys [180544 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [24680 2012-10-15] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52200 2012-10-15] (Saitek)
R3 SaiU0CD9; C:\Windows\System32\DRIVERS\SaiU0CD9.sys [47168 2012-09-20] (Saitek)
R3 V0750Vid; C:\Windows\System32\DRIVERS\V0750Vid.sys [378368 2012-04-26] (Creative Technology Ltd.)
R3 VirtCam; C:\Windows\System32\DRIVERS\VirtCam.sys [188672 2011-09-07] (Creative Technology Ltd.)
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [130320 2013-02-25] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 lvpopf64; system32\DRIVERS\lvpopf64.sys [x]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-09 20:19 - 2013-12-09 20:19 - 00708597 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FSS.exe
2013-12-09 20:19 - 2013-12-09 20:19 - 00002495 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FSS.txt
2013-12-09 19:50 - 2013-12-09 20:14 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-12-09 19:47 - 2013-12-09 19:47 - 00000207 _____ C:\Windows\tweaking.com-regbackup-BLCK´N´FSH-PC-Microsoft-Windows-7-Professional-(64-bit).dat
2013-12-09 19:47 - 2013-12-09 19:47 - 00000000 ____D C:\RegBackup
2013-12-09 19:34 - 2013-12-09 19:33 - 06951675 _____ C:\Users\Bl@ck´n´F!sh\Desktop\CBS.log
2013-12-09 19:14 - 2013-12-09 19:14 - 00006624 ____N C:\bootsqm.dat
2013-12-09 19:08 - 2013-12-09 19:08 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Tweaking.com - Windows Repair
2013-12-09 19:07 - 2013-12-09 19:07 - 02804572 _____ C:\Users\Bl@ck´n´F!sh\Desktop\tweaking.com_windows_repair_aio.zip
2013-12-08 03:54 - 2013-12-08 03:54 - 00066489 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST_08_12_2013.txt
2013-12-08 03:52 - 2013-12-09 20:21 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\FRST-OlderVersion
2013-12-08 03:48 - 2013-12-08 03:48 - 00891184 _____ C:\Users\Bl@ck´n´F!sh\Desktop\SecurityCheck.exe
2013-12-05 14:26 - 2013-12-05 14:26 - 00065906 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST_05_12_2013.txt
2013-12-05 14:25 - 2013-12-09 20:21 - 01927982 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-12-05 14:19 - 2013-12-05 14:20 - 00001344 _____ C:\Users\Bl@ck´n´F!sh\Desktop\JRT.txt
2013-12-05 14:16 - 2013-12-05 14:16 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 14:15 - 2013-12-05 14:15 - 01034531 _____ (Thisisu) C:\Users\Bl@ck´n´F!sh\Desktop\JRT.exe
2013-12-05 14:14 - 2013-12-05 14:14 - 00002392 _____ C:\Users\Bl@ck´n´F!sh\Desktop\AdwCleaner[S0].txt
2013-12-05 14:09 - 2013-12-05 14:11 - 00000000 ____D C:\AdwCleaner
2013-12-05 14:08 - 2013-12-05 14:08 - 01110034 _____ C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bl@ck´n´F!sh\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-05 14:02 - 2013-12-05 14:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 14:02 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 21:25 - 2013-12-04 21:25 - 00028942 _____ C:\ComboFix.txt
2013-12-04 21:07 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-04 21:07 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-04 21:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-04 21:07 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-04 21:06 - 2013-12-04 21:26 - 00000000 ____D C:\ComboFix
2013-12-02 20:32 - 2013-12-04 21:25 - 00000000 ____D C:\Qoobox
2013-12-02 20:32 - 2013-12-04 21:24 - 00000000 ____D C:\Windows\erdnt
2013-12-02 20:30 - 2013-12-02 20:30 - 05151572 ____R (Swearware) C:\Users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
2013-11-26 01:39 - 2013-11-26 01:39 - 00021487 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer.txt
2013-11-26 01:33 - 2013-11-26 01:33 - 00377856 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer_2.1.19163.exe
2013-11-26 01:21 - 2013-11-26 01:22 - 00034439 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Addition.txt
2013-11-26 01:19 - 2013-12-09 20:21 - 00014982 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-11-26 01:19 - 2013-12-09 20:21 - 00000000 ____D C:\FRST
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:45 - 2013-11-26 00:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-25 21:47 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-20 20:41 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:33 - 2013-11-20 20:41 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 17:34 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-20 17:34 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-20 17:34 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-13 23:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 23:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 23:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 23:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 23:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 23:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 23:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 23:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 23:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 23:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 23:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 23:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 23:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 23:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 23:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 23:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 23:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 23:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 23:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 23:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 23:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:52 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-11-10 19:52 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:46 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
==================== One Month Modified Files and Folders =======
2013-12-09 20:21 - 2013-12-08 03:52 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\FRST-OlderVersion
2013-12-09 20:21 - 2013-12-05 14:25 - 01927982 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FRST64.exe
2013-12-09 20:21 - 2013-11-26 01:19 - 00014982 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST.txt
2013-12-09 20:21 - 2013-11-26 01:19 - 00000000 ____D C:\FRST
2013-12-09 20:19 - 2013-12-09 20:19 - 00708597 _____ (Farbar) C:\Users\Bl@ck´n´F!sh\Desktop\FSS.exe
2013-12-09 20:19 - 2013-12-09 20:19 - 00002495 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FSS.txt
2013-12-09 20:18 - 2013-04-03 20:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Skype
2013-12-09 20:17 - 2012-12-24 12:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-09 20:17 - 2012-12-24 11:59 - 00059536 _____ C:\Users\Bl@ck´n´F!sh\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-09 20:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-09 20:17 - 2009-07-14 05:51 - 00190521 _____ C:\Windows\setupact.log
2013-12-09 20:17 - 2009-07-14 05:45 - 00271064 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-09 20:16 - 2010-11-21 04:47 - 00159382 _____ C:\Windows\PFRO.log
2013-12-09 20:14 - 2013-12-09 19:50 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-12-09 20:14 - 2012-12-24 11:51 - 01870880 _____ C:\Windows\WindowsUpdate.log
2013-12-09 20:14 - 2009-07-14 03:34 - 00000439 _____ C:\Windows\win.ini
2013-12-09 19:47 - 2013-12-09 19:47 - 00000207 _____ C:\Windows\tweaking.com-regbackup-BLCK´N´FSH-PC-Microsoft-Windows-7-Professional-(64-bit).dat
2013-12-09 19:47 - 2013-12-09 19:47 - 00000000 ____D C:\RegBackup
2013-12-09 19:44 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 19:44 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 19:33 - 2013-12-09 19:34 - 06951675 _____ C:\Users\Bl@ck´n´F!sh\Desktop\CBS.log
2013-12-09 19:33 - 2012-12-24 15:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-09 19:14 - 2013-12-09 19:14 - 00006624 ____N C:\bootsqm.dat
2013-12-09 19:08 - 2013-12-09 19:08 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Tweaking.com - Windows Repair
2013-12-09 19:07 - 2013-12-09 19:07 - 02804572 _____ C:\Users\Bl@ck´n´F!sh\Desktop\tweaking.com_windows_repair_aio.zip
2013-12-08 03:54 - 2013-12-08 03:54 - 00066489 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST_08_12_2013.txt
2013-12-08 03:48 - 2013-12-08 03:48 - 00891184 _____ C:\Users\Bl@ck´n´F!sh\Desktop\SecurityCheck.exe
2013-12-07 18:52 - 2011-04-12 08:43 - 00708744 _____ C:\Windows\system32\perfh007.dat
2013-12-07 18:52 - 2011-04-12 08:43 - 00153728 _____ C:\Windows\system32\perfc007.dat
2013-12-07 18:52 - 2009-07-14 06:13 - 01646980 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-05 14:26 - 2013-12-05 14:26 - 00065906 _____ C:\Users\Bl@ck´n´F!sh\Desktop\FRST_05_12_2013.txt
2013-12-05 14:20 - 2013-12-05 14:19 - 00001344 _____ C:\Users\Bl@ck´n´F!sh\Desktop\JRT.txt
2013-12-05 14:16 - 2013-12-05 14:16 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 14:15 - 2013-12-05 14:15 - 01034531 _____ (Thisisu) C:\Users\Bl@ck´n´F!sh\Desktop\JRT.exe
2013-12-05 14:14 - 2013-12-05 14:14 - 00002392 _____ C:\Users\Bl@ck´n´F!sh\Desktop\AdwCleaner[S0].txt
2013-12-05 14:11 - 2013-12-05 14:09 - 00000000 ____D C:\AdwCleaner
2013-12-05 14:08 - 2013-12-05 14:08 - 01110034 _____ C:\Users\Bl@ck´n´F!sh\Desktop\adwcleaner.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bl@ck´n´F!sh\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-05 14:02 - 2013-12-05 14:02 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-05 14:02 - 2013-12-05 14:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 21:26 - 2013-12-04 21:06 - 00000000 ____D C:\ComboFix
2013-12-04 21:25 - 2013-12-04 21:25 - 00028942 _____ C:\ComboFix.txt
2013-12-04 21:25 - 2013-12-02 20:32 - 00000000 ____D C:\Qoobox
2013-12-04 21:25 - 2012-12-24 11:51 - 00000000 ___RD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 21:25 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-04 21:24 - 2013-12-02 20:32 - 00000000 ____D C:\Windows\erdnt
2013-12-04 21:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-02 20:30 - 2013-12-02 20:30 - 05151572 ____R (Swearware) C:\Users\Bl@ck´n´F!sh\Desktop\ComboFix.exe
2013-11-26 01:39 - 2013-11-26 01:39 - 00021487 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer.txt
2013-11-26 01:33 - 2013-11-26 01:33 - 00377856 _____ C:\Users\Bl@ck´n´F!sh\Desktop\gmer_2.1.19163.exe
2013-11-26 01:22 - 2013-11-26 01:21 - 00034439 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Addition.txt
2013-11-26 01:18 - 2013-11-26 01:18 - 00050477 _____ C:\Users\Bl@ck´n´F!sh\Desktop\Defogger.exe
2013-11-26 01:17 - 2013-11-26 01:17 - 00000486 _____ C:\Users\Bl@ck´n´F!sh\Desktop\defogger_disable.log
2013-11-26 01:17 - 2013-11-26 01:17 - 00000000 _____ C:\Users\Bl@ck´n´F!sh\defogger_reenable
2013-11-26 01:17 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh
2013-11-26 00:47 - 2013-04-04 12:34 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-26 00:46 - 2013-11-25 23:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-25 23:46 - 2013-11-25 23:46 - 00000000 _____ C:\autoexec.bat
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Malwarebytes
2013-11-25 23:38 - 2013-11-25 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-25 23:23 - 2012-12-27 00:44 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\vlc
2013-11-25 21:47 - 2013-11-24 17:25 - 00000000 __SHD C:\ProgramData\h65guhb0
2013-11-25 00:13 - 2012-12-24 11:51 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\VirtualStore
2013-11-24 23:57 - 2013-11-24 23:57 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-24 23:55 - 2012-12-24 13:25 - 00001917 _____ C:\Windows\epplauncher.mif
2013-11-24 23:34 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-24 17:40 - 2013-11-24 17:40 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgre
2013-11-24 17:25 - 2013-11-24 17:25 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\AppData\Roaming\msgr
2013-11-24 02:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-24 01:12 - 2013-02-14 16:28 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Programme
2013-11-24 01:07 - 2013-09-25 23:03 - 00000000 ____D C:\Windows\pss
2013-11-21 16:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-21 15:12 - 2013-04-03 20:51 - 00000000 ____D C:\ProgramData\Skype
2013-11-21 15:10 - 2012-12-24 11:51 - 00001425 _____ C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-21 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-20 22:18 - 2013-04-02 22:25 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Warframe
2013-11-20 20:41 - 2013-11-20 20:33 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-20 20:36 - 2013-11-20 20:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-20 20:36 - 2013-11-20 20:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-20 20:36 - 2013-11-20 20:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-20 20:36 - 2013-11-20 20:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-20 20:36 - 2013-11-20 20:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-20 20:36 - 2013-11-20 20:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-20 20:36 - 2013-11-20 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-20 20:36 - 2013-11-20 20:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-20 20:31 - 2012-12-24 16:03 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Adobe
2013-11-20 20:31 - 2012-12-24 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 20:31 - 2012-12-24 15:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-20 20:25 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-20 20:23 - 2013-04-03 16:56 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Local\Turbine
2013-11-20 20:22 - 2013-11-20 20:22 - 00000000 ____D C:\Crash
2013-11-20 19:13 - 2013-11-20 19:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\openvr
2013-11-20 19:08 - 2012-12-24 14:44 - 00860600 _____ C:\Windows\DirectX.log
2013-11-20 17:38 - 2012-12-24 12:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-16 17:54 - 2012-12-24 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele
2013-11-16 17:53 - 2012-12-25 22:15 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-16 17:53 - 2012-12-24 13:25 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-16 17:48 - 2012-12-24 13:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:40 - 2013-10-20 18:13 - 00000000 ____D C:\Users\Bl@ck´n´F!sh\Desktop\Spiele (durch)
2013-11-15 23:26 - 2013-05-13 17:24 - 00000000 __SHD C:\Users\Bl@ck´n´F!sh\wc
2013-11-14 12:56 - 2013-11-20 17:34 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-20 17:34 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-20 17:34 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2013-08-14 10:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-14 03:03 - 2013-07-16 21:29 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 03:01 - 2012-12-24 12:41 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 00:43 - 2012-12-24 15:58 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-11 16:02 - 2013-08-14 10:01 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2013-08-14 10:01 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2013-08-14 10:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2013-08-14 10:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 19:51 - 2013-11-10 19:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\ProgramData\Sun
2013-11-10 19:51 - 2013-11-10 19:51 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-10 19:51 - 2013-11-10 19:46 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 19:46 - 2013-11-10 19:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 19:46 - 2013-11-10 19:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 19:46 - 2013-11-10 19:46 - 00000000 ____D C:\Program Files\Java
Some content of TEMP:
====================
C:\Users\Bl@ck´n´F!sh\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-12-24 12:31] - [2011-02-26 07:14] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-02 21:10
==================== End Of Log ============================
--- --- --- FSS Log: Code:
ATTFilter [Farbar Service Scanner Version: 05-12-2013
Ran by Bl@ck´n´F!sh (administrator) on 09-12-2013 at 20:19:47
Running from "C:\Users\Bl@ck´n´F!sh\Desktop"
Microsoft Windows 7 Professional Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
Other Services:
==============
File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
**** End of log ****
|
|
10.12.2013, 10:47
| #15 |
| /// the machine /// TB-Ausbilder | MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
C:\Program Files\Enigma Software Group
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a |
| akamai, computer, cpu-z, excel, fehler, flash player, funktioniert nicht mehr, helper, home, installation, kaspersky, langsam, launch, plug-in, realtek, refresh, registry, rundll, scan, security, services.exe, software, super, svchost.exe, system, teamspeak, tower, trojan, updates, usb, windows, windows updates |
Linear-Darstellung
